Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9421)
CVE-2016-9421
CWE-707
Medium
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-7169)
CVE-2016-7169
CWE-22
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-8643)
CVE-2016-8643
CWE-284
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7419)
CVE-2016-7419
CWE-707
Medium
MySQL CVE-2016-7440 Vulnerability (CVE-2016-7440)
CVE-2016-7440
-
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7570)
CVE-2016-7570
CWE-264
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7571)
CVE-2016-7571
CWE-707
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7572)
CVE-2016-7572
CWE-264
Medium
MySQL CVE-2016-8283 Vulnerability (CVE-2016-8283)
CVE-2016-8283
-
Medium
MySQL CVE-2016-8287 Vulnerability (CVE-2016-8287)
CVE-2016-8287
-
Medium
MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8289)
CVE-2016-8289
CWE-264
Medium
MySQL CVE-2016-8290 Vulnerability (CVE-2016-8290)
CVE-2016-8290
-
Medium
MySQL CVE-2016-8318 Vulnerability (CVE-2016-8318)
CVE-2016-8318
-
Medium
MySQL CVE-2016-8327 Vulnerability (CVE-2016-8327)
CVE-2016-8327
-
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2016-8612)
CVE-2016-8612
CWE-20
Medium
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2016-8627)
CVE-2016-8627
CWE-400
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-8642)
CVE-2016-8642
CWE-284
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8644)
CVE-2016-8644
CWE-264
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9419)
CVE-2016-9419
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9126)
CVE-2016-9126
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9128)
CVE-2016-9128
CWE-707
Medium
ReviveAdserver Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9129)
CVE-2016-9129
CWE-200
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9130)
CVE-2016-9130
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9188)
CVE-2016-9188
CWE-707
Medium
WordPress Improper Input Validation Vulnerability (CVE-2016-9263)
CVE-2016-9263
CWE-20
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9404)
CVE-2016-9404
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9405)
CVE-2016-9405
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9406)
CVE-2016-9406
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9407)
CVE-2016-9407
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9408)
CVE-2016-9408
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9409)
CVE-2016-9409
CWE-707
Medium
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9411)
CVE-2016-9411
CWE-200
Medium
MyBB Improper Access Control Vulnerability (CVE-2016-9413)
CVE-2016-9413
CWE-284
Medium
phpMyAdmin Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2016-5701)
CVE-2016-5701
CWE-138
Medium
Swagger UI Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5682)
CVE-2016-5682
CWE-707
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2016-0800)
CVE-2016-0800
-
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2864)
CVE-2016-2864
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2154)
CVE-2016-2154
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2155)
CVE-2016-2155
CWE-264
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2156)
CVE-2016-2156
CWE-200
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2158)
CVE-2016-2158
CWE-200
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-2159)
CVE-2016-2159
CWE-284
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2178)
CVE-2016-2178
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2190)
CVE-2016-2190
CWE-264
Medium
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2212)
CVE-2016-2212
CWE-200
Medium
Squid Improper Input Validation Vulnerability (CVE-2016-2390)
CVE-2016-2390
CWE-20
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2559)
CVE-2016-2559
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2560)
CVE-2016-2560
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2561)
CVE-2016-2561
CWE-707
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-2562)
CVE-2016-2562
CWE-20
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2865)
CVE-2016-2865
CWE-200
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2152)
CVE-2016-2152
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2926)
CVE-2016-2926
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2986)
CVE-2016-2986
CWE-707
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2987)
CVE-2016-2987
CWE-200
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3014)
CVE-2016-3014
CWE-707
Medium
IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3018)
CVE-2016-3018
CWE-707
Medium
Drupal Other Vulnerability (CVE-2016-3166)
CVE-2016-3166
-
Medium
Drupal 7PK - Security Features Vulnerability (CVE-2016-3168)
CVE-2016-3168
-
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3170)
CVE-2016-3170
CWE-200
Medium
Python Other Vulnerability (CVE-2016-3189)
CVE-2016-3189
-
Medium
WebLogic CVE-2016-3416 Vulnerability (CVE-2016-3416)
CVE-2016-3416
-
Medium
MySQL CVE-2016-3424 Vulnerability (CVE-2016-3424)
CVE-2016-3424
-
Medium
WebLogic CVE-2016-3445 Vulnerability (CVE-2016-3445)
CVE-2016-3445
-
Medium
MySQL CVE-2016-3459 Vulnerability (CVE-2016-3459)
CVE-2016-3459
-
Medium
MySQL CVE-2016-3486 Vulnerability (CVE-2016-3486)
CVE-2016-3486
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2153)
CVE-2016-2153
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2151)
CVE-2016-2151
CWE-200
Medium
MySQL CVE-2016-3495 Vulnerability (CVE-2016-3495)
CVE-2016-3495
-
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10872)
CVE-2016-10872
CWE-707
Medium
Python URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2016-1000110)
CVE-2016-1000110
CWE-601
Medium
Twisted Web HTTP Server Direct Request ('Forced Browsing') Vulnerability (CVE-2016-1000111)
CVE-2016-1000111
CWE-425
Medium
ClipBucket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1000307)
CVE-2016-1000307
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10083)
CVE-2016-10083
CWE-707
Medium
WordPress 7PK - Security Features Vulnerability (CVE-2016-10148)
CVE-2016-10148
-
Medium