Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
Zenphoto Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-0993)
CVE-2012-0993
CWE-94
Medium
Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-0994)
CVE-2012-0994
CWE-138
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0995)
CVE-2012-0995
CWE-707
Medium
Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1039)
CVE-2012-1039
CWE-707
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1098)
CVE-2012-1098
CWE-707
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1099)
CVE-2012-1099
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1117)
CVE-2012-1117
CWE-707
Medium
Perl Use of Externally-Controlled Format String Vulnerability (CVE-2012-1151)
CVE-2012-1151
CWE-134
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1500)
CVE-2012-1500
CWE-707
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1154)
CVE-2012-1154
CWE-264
Medium
Moodle Incorrect Default Permissions Vulnerability (CVE-2012-1157)
CVE-2012-1157
CWE-276
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1158)
CVE-2012-1158
CWE-200
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1159)
CVE-2012-1159
CWE-200
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1161)
CVE-2012-1161
CWE-200
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2012-1165)
CVE-2012-1165
-
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1167)
CVE-2012-1167
CWE-264
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1169)
CVE-2012-1169
CWE-200
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1171)
CVE-2012-1171
CWE-200
Medium
PHP Improper Input Validation Vulnerability (CVE-2012-1172)
CVE-2012-1172
CWE-20
Medium
Nginx Use After Free Vulnerability (CVE-2012-1180)
CVE-2012-1180
CWE-416
Medium
Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-1181)
CVE-2012-1181
CWE-119
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1190)
CVE-2012-1190
CWE-707
Medium
Contao Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-1297)
CVE-2012-1297
CWE-352
Medium
Oracle Database Server CVE-2012-1747 Vulnerability (CVE-2012-1747)
CVE-2012-1747
-
Medium
MySQL CVE-2012-1756 Vulnerability (CVE-2012-1756)
CVE-2012-1756
-
Medium
Atlassian Confluence Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928)
CVE-2012-2928
CWE-264
Medium
PostgreSQL Resource Management Errors Vulnerability (CVE-2012-2655)
CVE-2012-2655
-
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2359)
CVE-2012-2359
CWE-264
Medium
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2363)
CVE-2012-2363
CWE-138
Medium
Moodle Other Vulnerability (CVE-2012-2366)
CVE-2012-2366
-
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2367)
CVE-2012-2367
CWE-264
Medium
Tornado Improper Input Validation Vulnerability (CVE-2012-2374)
CVE-2012-2374
CWE-20
Medium
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-2397)
CVE-2012-2397
CWE-352
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2398)
CVE-2012-2398
CWE-707
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2401)
CVE-2012-2401
CWE-264
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2402)
CVE-2012-2402
CWE-264
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2403)
CVE-2012-2403
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2404)
CVE-2012-2404
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2413)
CVE-2012-2413
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2517)
CVE-2012-2517
CWE-707
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2641)
CVE-2012-2641
CWE-707
Medium
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2660)
CVE-2012-2660
CWE-264
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2357)
CVE-2012-2357
CWE-200
Medium
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2661)
CVE-2012-2661
CWE-138
Medium
Collabtive Improper Input Validation Vulnerability (CVE-2012-2670)
CVE-2012-2670
CWE-20
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2012-2686)
CVE-2012-2686
-
Medium
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2694)
CVE-2012-2694
CWE-264
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2698)
CVE-2012-2698
CWE-707
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2012-2733)
CVE-2012-2733
CWE-20
Medium
Oracle JRE Cryptographic Issues Vulnerability (CVE-2012-2739)
CVE-2012-2739
-
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2741)
CVE-2012-2741
CWE-707
Medium
Joomla CVE-2012-2748 Vulnerability (CVE-2012-2748)
CVE-2012-2748
-
Medium
MySQL Resource Management Errors Vulnerability (CVE-2012-2749)
CVE-2012-2749
-
Medium
Oracle HTTP Server Other Vulnerability (CVE-2012-2751)
CVE-2012-2751
-
Medium
PHP Address Book Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2903)
CVE-2012-2903
CWE-707
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2922)
CVE-2012-2922
CWE-200
Medium
Atlassian Jira Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928)
CVE-2012-2928
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2358)
CVE-2012-2358
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2356)
CVE-2012-2356
CWE-264
Medium
MySQL CVE-2012-1757 Vulnerability (CVE-2012-1757)
CVE-2012-1757
-
Medium
PostgreSQL Cryptographic Issues Vulnerability (CVE-2012-2143)
CVE-2012-2143
-
Medium
Dot CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1826)
CVE-2012-1826
CWE-264
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1859)
CVE-2012-1859
CWE-707
Medium
SharePoint Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1860)
CVE-2012-1860
CWE-264
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1861)
CVE-2012-1861
CWE-707
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1902)
CVE-2012-1902
CWE-200
Medium
PHP Address Book Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1912)
CVE-2012-1912
CWE-707
Medium
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-1936)
CVE-2012-1936
CWE-352
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-20001)
CVE-2012-20001
CWE-707
Medium
Nginx Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2012-2089)
CVE-2012-2089
CWE-120
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2112)
CVE-2012-2112
CWE-707
Medium
MySQL Improper Authentication Vulnerability (CVE-2012-2122)
CVE-2012-2122
CWE-287
Medium
RubyGems Other Vulnerability (CVE-2012-2125)
CVE-2012-2125
-
Medium
RubyGems Cryptographic Issues Vulnerability (CVE-2012-2126)
CVE-2012-2126
-
Medium
Python Other Vulnerability (CVE-2012-2135)
CVE-2012-2135
-
Medium