Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23975 vulnerabilities in this category.

Critical: 1584 High: 12800 Medium: 8788 Low: 799 Information: 4
Vulnerability Name
CVE
CWE
Severity
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5293)
CVE-2020-5293
CWE-863
Medium
WebLogic Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5397)
CVE-2020-5397
CWE-352
Medium
WebLogic CVE-2020-5421 Vulnerability (CVE-2020-5421)
CVE-2020-5421
-
Medium
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5501)
CVE-2020-5501
CWE-352
Medium
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5502)
CVE-2020-5502
CWE-352
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5592)
CVE-2020-5592
CWE-707
Medium
TCExam Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-5743)
CVE-2020-5743
CWE-200
Medium
TCExam Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5744)
CVE-2020-5744
CWE-22
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5746)
CVE-2020-5746
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5747)
CVE-2020-5747
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5748)
CVE-2020-5748
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5749)
CVE-2020-5749
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5750)
CVE-2020-5750
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5751)
CVE-2020-5751
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6163)
CVE-2020-6163
CWE-707
Medium
silverstripeCMS Incorrect Default Permissions Vulnerability (CVE-2020-6165)
CVE-2020-6165
CWE-276
Medium
ZenCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6578)
CVE-2020-6578
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6632)
CVE-2020-6632
CWE-707
Medium
WordPress Ultimate Member Plugin Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-6859)
CVE-2020-6859
CWE-639
Medium
PHP Improper Preservation of Permissions Vulnerability (CVE-2020-7063)
CVE-2020-7063
CWE-281
Medium
PHP Out-of-bounds Read Vulnerability (CVE-2020-7064)
CVE-2020-7064
CWE-125
Medium
PHP Other Vulnerability (CVE-2020-7066)
CVE-2020-7066
-
Medium
PHP Inadequate Encryption Strength Vulnerability (CVE-2020-7069)
CVE-2020-7069
CWE-326
Medium
PHP Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2020-7070)
CVE-2020-7070
CWE-565
Medium
PHP Improper Input Validation Vulnerability (CVE-2020-7071)
CVE-2020-7071
CWE-20
Medium
jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7656)
CVE-2020-7656
CWE-707
Medium
AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7676)
CVE-2020-7676
CWE-707
Medium
UAParser.js Uncontrolled Resource Consumption Vulnerability (CVE-2020-7733)
CVE-2020-7733
CWE-400
Medium
UAParser.js Other Vulnerability (CVE-2020-7793)
CVE-2020-7793
-
Medium
MongoDb Incorrect Authorization Vulnerability (CVE-2020-7921)
CVE-2020-7921
CWE-863
Medium
MongoDb Improper Handling of Exceptional Conditions Vulnerability (CVE-2020-7923)
CVE-2020-7923
CWE-755
Medium
MongoDb Improper Handling of Exceptional Conditions Vulnerability (CVE-2020-7926)
CVE-2020-7926
CWE-755
Medium
MongoDb Other Vulnerability (CVE-2020-7928)
CVE-2020-7928
-
Medium
MongoDb Other Vulnerability (CVE-2020-7929)
CVE-2020-7929
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7934)
CVE-2020-7934
CWE-707
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-7936)
CVE-2020-7936
CWE-601
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7937)
CVE-2020-7937
CWE-707
Medium
Prototype Improper Privilege Management Vulnerability (CVE-2020-7993)
CVE-2020-7993
CWE-269
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7994)
CVE-2020-7994
CWE-707
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7996)
CVE-2020-7996
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8089)
CVE-2020-8089
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8091)
CVE-2020-8091
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8115)
CVE-2020-8115
CWE-707
Medium
reveal.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8127)
CVE-2020-8127
CWE-707
Medium
ReviveAdserver Incorrect Authorization Vulnerability (CVE-2020-8142)
CVE-2020-8142
CWE-863
Medium
ReviveAdserver URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-8143)
CVE-2020-8143
CWE-601
Medium
Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8166)
CVE-2020-8166
CWE-352
Medium
Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8167)
CVE-2020-8167
CWE-352
Medium
Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2020-8185)
CVE-2020-8185
CWE-400
Medium
phpBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-8226)
CVE-2020-8226
CWE-918
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8264)
CVE-2020-8264
CWE-707
Medium
Python Improper Input Validation Vulnerability (CVE-2020-8315)
CVE-2020-8315
CWE-20
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8421)
CVE-2020-8421
CWE-707
Medium
Python Uncontrolled Resource Consumption Vulnerability (CVE-2020-8492)
CVE-2020-8492
CWE-400
Medium
Envoy Proxy Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-8660)
CVE-2020-8660
CWE-345
Medium
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8825)
CVE-2020-8825
CWE-707
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9016)
CVE-2020-9016
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9281)
CVE-2020-9281
CWE-707
Medium
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9281)
CVE-2020-9281
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9311)
CVE-2020-9311
CWE-707
Medium
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9440)
CVE-2020-9440
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9467)
CVE-2020-9467
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9577)
CVE-2020-9577
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9581)
CVE-2020-9581
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9584)
CVE-2020-9584
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9665)
CVE-2020-9665
CWE-707
Medium
Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-9689)
CVE-2020-9689
CWE-22
Medium
Magento Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-9690)
CVE-2020-9690
-
Medium
Magento Incorrect Authorization Vulnerability (CVE-2020-9692)
CVE-2020-9692
CWE-863
Medium
SharePoint CVE-2021-1641 Vulnerability (CVE-2021-1641)
CVE-2021-1641
-
Medium
SharePoint Improper Privilege Management Vulnerability (CVE-2021-1712)
CVE-2021-1712
CWE-269
Medium
SharePoint CVE-2021-1717 Vulnerability (CVE-2021-1717)
CVE-2021-1717
-
Medium
SharePoint Improper Privilege Management Vulnerability (CVE-2021-1719)
CVE-2021-1719
CWE-269
Medium
SharePoint CVE-2021-1726 Vulnerability (CVE-2021-1726)
CVE-2021-1726
-
Medium
Oracle Database Server Create Session privilege issue (CVE-2021-1993)
CVE-2021-1993
-
Medium