Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-3632)
CVE-2009-3632
CWE-138
Medium
TYPO3 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-3633)
CVE-2009-3633
CWE-352
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3634)
CVE-2009-3634
CWE-707
Medium
TYPO3 Improper Authentication Vulnerability (CVE-2009-3635)
CVE-2009-3635
CWE-287
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3636)
CVE-2009-3636
CWE-707
Medium
Django Other Vulnerability (CVE-2009-3695)
CVE-2009-3695
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3696)
CVE-2009-3696
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3742)
CVE-2009-3742
CWE-707
Medium
Nginx Improper Certificate Validation Vulnerability (CVE-2009-3555)
CVE-2009-3555
CWE-295
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2009-3830)
CVE-2009-3830
CWE-20
Medium
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-3890)
CVE-2009-3890
CWE-94
Medium
Nginx Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-3896)
CVE-2009-3896
CWE-119
Medium
Nginx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-3898)
CVE-2009-3898
CWE-22
Medium
Joomla CVE-2009-3945 Vulnerability (CVE-2009-3945)
CVE-2009-3945
-
Medium
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3946)
CVE-2009-3946
CWE-200
Medium
PHP Other Vulnerability (CVE-2009-4017)
CVE-2009-4017
-
Medium
MySQL Other Vulnerability (CVE-2009-4019)
CVE-2009-4019
-
Medium
MySQL Improper Input Validation Vulnerability (CVE-2009-4028)
CVE-2009-4028
CWE-20
Medium
MySQL Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2009-4030)
CVE-2009-4030
CWE-59
Medium
PostgreSQL Cryptographic Issues Vulnerability (CVE-2009-4034)
CVE-2009-4034
-
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4039)
CVE-2009-4039
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4040)
CVE-2009-4040
CWE-707
Medium
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4066)
CVE-2009-4066
CWE-352
Medium
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3557)
CVE-2009-3557
CWE-264
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2009-3555)
CVE-2009-3555
-
Medium
Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2405)
CVE-2009-2405
CWE-707
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-2854)
CVE-2009-2854
CWE-264
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2009-2409)
CVE-2009-2409
-
Medium
WordPress Improper Input Validation Vulnerability (CVE-2009-2431)
CVE-2009-2431
CWE-20
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-2432)
CVE-2009-2432
CWE-264
Medium
Internet Information Services Uncontrolled Resource Consumption Vulnerability (CVE-2009-2521)
CVE-2009-2521
CWE-400
Medium
PHP Address Book Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2608)
CVE-2009-2608
CWE-138
Medium
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-2621)
CVE-2009-2621
CWE-119
Medium
Squid Improper Input Validation Vulnerability (CVE-2009-2622)
CVE-2009-2622
CWE-20
Medium
PHP Other Vulnerability (CVE-2009-2626)
CVE-2009-2626
-
Medium
PHP Improper Input Validation Vulnerability (CVE-2009-2687)
CVE-2009-2687
CWE-20
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-2693)
CVE-2009-2693
CWE-22
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2696)
CVE-2009-2696
CWE-707
Medium
XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2783)
CVE-2009-2783
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2851)
CVE-2009-2851
CWE-707
Medium
Squid Improper Input Validation Vulnerability (CVE-2009-2855)
CVE-2009-2855
CWE-20
Medium
Apache HTTP Server Cryptographic Issues Vulnerability (CVE-2009-3555)
CVE-2009-3555
-
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-2901)
CVE-2009-2901
CWE-264
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-2902)
CVE-2009-2902
CWE-22
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3009)
CVE-2009-3009
CWE-707
Medium
Ruby on Rails Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3086)
CVE-2009-3086
CWE-200
Medium
Apache HTTP Server Other Vulnerability (CVE-2009-3095)
CVE-2009-3095
-
Medium
PostgreSQL CVE-2009-3229 Vulnerability (CVE-2009-3229)
CVE-2009-3229
-
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3230)
CVE-2009-3230
CWE-264
Medium
PostgreSQL Improper Authentication Vulnerability (CVE-2009-3231)
CVE-2009-3231
CWE-287
Medium
PHP Use of Externally-Controlled Format String Vulnerability (CVE-2009-3294)
CVE-2009-3294
CWE-134
Medium
Oracle Application Server CVE-2009-3407 Vulnerability (CVE-2009-3407)
CVE-2009-3407
-
Medium
Oracle Database Server CVE-2009-3411 Vulnerability (CVE-2009-3411)
CVE-2009-3411
-
Medium
Oracle Database Server CVE-2009-3414 Vulnerability (CVE-2009-3414)
CVE-2009-3414
-
Medium
e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3444)
CVE-2009-3444
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3479)
CVE-2009-3479
CWE-707
Medium
Oracle Database Server CVE-2010-2415 Vulnerability (CVE-2010-2415)
CVE-2010-2415
-
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2422)
CVE-2010-2422
CWE-707
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2197)
CVE-2011-2197
CWE-707
Medium
PHP Numeric Errors Vulnerability (CVE-2011-0755)
CVE-2011-0755
-
Medium
Apache Tomcat Resource Management Errors Vulnerability (CVE-2011-0534)
CVE-2011-0534
-
Medium
Zikula Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-0535)
CVE-2011-0535
CWE-352
Medium
phpBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0544)
CVE-2011-0544
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0653)
CVE-2011-0653
CWE-707
Medium
Django Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-0696)
CVE-2011-0696
CWE-352
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0697)
CVE-2011-0697
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-0701)
CVE-2011-0701
CWE-200
Medium
Mailman Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0707)
CVE-2011-0707
CWE-707
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2011-0708)
CVE-2011-0708
CWE-119
Medium
SugarCRM Improper Input Validation Vulnerability (CVE-2011-0745)
CVE-2011-0745
CWE-20
Medium
PHP Improper Input Validation Vulnerability (CVE-2011-0752)
CVE-2011-0752
CWE-20
Medium
PHP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2011-0753)
CVE-2011-0753
CWE-362
Medium
PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2011-0754)
CVE-2011-0754
CWE-59
Medium
Perl Other Vulnerability (CVE-2011-0761)
CVE-2011-0761
-
Medium
Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0508)
CVE-2011-0508
CWE-707
Medium