Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61638)
CVE-2025-61638
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-61639)
CVE-2025-61639
CWE-200
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61640)
CVE-2025-61640
CWE-707
Medium
MediaWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-61641)
CVE-2025-61641
CWE-22
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61642)
CVE-2025-61642
CWE-707
Medium
MediaWiki Improper Removal of Sensitive Information Before Storage or Transfer Vulnerability (CVE-2025-61643)
CVE-2025-61643
CWE-212
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61645)
CVE-2025-61645
CWE-707
Medium
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-61764)
CVE-2025-61764
CWE-200
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62244)
CVE-2025-62244
CWE-639
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62240)
CVE-2025-62240
CWE-707
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62244)
CVE-2025-62244
CWE-639
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62243)
CVE-2025-62243
CWE-863
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-62243)
CVE-2025-62243
CWE-863
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62242)
CVE-2025-62242
CWE-639
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62242)
CVE-2025-62242
CWE-639
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62241)
CVE-2025-62241
CWE-639
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62240)
CVE-2025-62240
CWE-707
Medium
Apache Tomcat Improper Resource Shutdown or Release Vulnerability (CVE-2025-61795)
CVE-2025-61795
CWE-404
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62239)
CVE-2025-62239
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62239)
CVE-2025-62239
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62238)
CVE-2025-62238
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62238)
CVE-2025-62238
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62237)
CVE-2025-62237
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62237)
CVE-2025-62237
CWE-707
Medium
AngularJS Other Vulnerability (CVE-2024-8373)
CVE-2024-8373
-
Medium
MongoDb Other Vulnerability (CVE-2024-8305)
CVE-2024-8305
-
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-42627)
CVE-2023-42627
CWE-707
Medium
MySQL CVE-2024-20985 Vulnerability (CVE-2024-20985)
CVE-2024-20985
-
Medium
Oracle JRE Incorrect Default Permissions Vulnerability (CVE-2024-20921)
CVE-2024-20921
CWE-276
Medium
Oracle JRE CVE-2024-20926 Vulnerability (CVE-2024-20926)
CVE-2024-20926
-
Medium
Oracle JRE CVE-2024-20945 Vulnerability (CVE-2024-20945)
CVE-2024-20945
-
Medium
MySQL CVE-2024-20961 Vulnerability (CVE-2024-20961)
CVE-2024-20961
-
Medium
MySQL CVE-2024-20963 Vulnerability (CVE-2024-20963)
CVE-2024-20963
-
Medium
MySQL CVE-2024-20965 Vulnerability (CVE-2024-20965)
CVE-2024-20965
-
Medium
MySQL CVE-2024-20967 Vulnerability (CVE-2024-20967)
CVE-2024-20967
-
Medium
MySQL CVE-2024-20969 Vulnerability (CVE-2024-20969)
CVE-2024-20969
-
Medium
MySQL CVE-2024-20971 Vulnerability (CVE-2024-20971)
CVE-2024-20971
-
Medium
MySQL CVE-2024-20973 Vulnerability (CVE-2024-20973)
CVE-2024-20973
-
Medium
MySQL CVE-2024-20975 Vulnerability (CVE-2024-20975)
CVE-2024-20975
-
Medium
MySQL CVE-2024-20977 Vulnerability (CVE-2024-20977)
CVE-2024-20977
-
Medium
MySQL CVE-2024-20981 Vulnerability (CVE-2024-20981)
CVE-2024-20981
-
Medium
MySQL CVE-2024-20983 Vulnerability (CVE-2024-20983)
CVE-2024-20983
-
Medium
WebLogic CVE-2024-20986 Vulnerability (CVE-2024-20986)
CVE-2024-20986
-
Medium
Oracle Database Server CVE-2024-20903 Vulnerability (CVE-2024-20903)
CVE-2024-20903
-
Medium
Oracle HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-20991)
CVE-2024-20991
CWE-200
Medium
MySQL CVE-2024-20996 Vulnerability (CVE-2024-20996)
CVE-2024-20996
-
Medium
MySQL CVE-2024-21047 Vulnerability (CVE-2024-21047)
CVE-2024-21047
-
Medium
MySQL CVE-2024-21049 Vulnerability (CVE-2024-21049)
CVE-2024-21049
-
Medium
MySQL CVE-2024-21050 Vulnerability (CVE-2024-21050)
CVE-2024-21050
-
Medium
MySQL CVE-2024-21051 Vulnerability (CVE-2024-21051)
CVE-2024-21051
-
Medium
MySQL CVE-2024-21055 Vulnerability (CVE-2024-21055)
CVE-2024-21055
-
Medium
MySQL CVE-2024-21056 Vulnerability (CVE-2024-21056)
CVE-2024-21056
-
Medium
Oracle Database Server CVE-2024-21058 Vulnerability (CVE-2024-21058)
CVE-2024-21058
-
Medium
MySQL CVE-2024-21061 Vulnerability (CVE-2024-21061)
CVE-2024-21061
-
Medium
MySQL CVE-2024-21062 Vulnerability (CVE-2024-21062)
CVE-2024-21062
-
Medium
Oracle Database Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21066)
CVE-2024-21066
CWE-707
Medium
MySQL CVE-2024-21069 Vulnerability (CVE-2024-21069)
CVE-2024-21069
-
Medium
MySQL CVE-2024-21087 Vulnerability (CVE-2024-21087)
CVE-2024-21087
-
Medium
Oracle JRE CVE-2024-20919 Vulnerability (CVE-2024-20919)
CVE-2024-20919
-
Medium
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-1102)
CVE-2024-1102
CWE-200
Medium
MySQL CVE-2024-21102 Vulnerability (CVE-2024-21102)
CVE-2024-21102
-
Medium
TCExam Missing Authorization Vulnerability (CVE-2023-6554)
CVE-2023-6554
CWE-862
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5631)
CVE-2023-5631
CWE-707
Medium
OpenSSL Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2023-5678)
CVE-2023-5678
CWE-754
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5842)
CVE-2023-5842
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5863)
CVE-2023-5863
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5864)
CVE-2023-5864
CWE-707
Medium
phpMyFAQ Sensitive Cookie in HTTPS Session Without 'Secure' Attribute Vulnerability (CVE-2023-5866)
CVE-2023-5866
CWE-614
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5867)
CVE-2023-5867
CWE-707
Medium
PostgreSQL CVE-2023-5868 Vulnerability (CVE-2023-5868)
CVE-2023-5868
-
Medium
PostgreSQL CVE-2023-5870 Vulnerability (CVE-2023-5870)
CVE-2023-5870
-
Medium
phpBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5917)
CVE-2023-5917
CWE-707
Medium
OpenSSL Out-of-bounds Write Vulnerability (CVE-2023-6129)
CVE-2023-6129
CWE-787
Medium
Grafana Incorrect Authorization Vulnerability (CVE-2023-6152)
CVE-2023-6152
CWE-863
Medium
osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-6296)
CVE-2023-6296
CWE-707
Medium