Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11629)
CVE-2019-11629
CWE-707
Medium
phpBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-11767)
CVE-2019-11767
CWE-918
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11809)
CVE-2019-11809
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11846)
CVE-2019-11846
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11876)
CVE-2019-11876
CWE-707
Medium
Squid Out-of-bounds Write Vulnerability (CVE-2019-12521)
CVE-2019-12521
CWE-787
Medium
Twisted Web HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-12387)
CVE-2019-12387
CWE-138
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12471)
CVE-2019-12471
CWE-707
Medium
MediaWiki Missing Authorization Vulnerability (CVE-2019-12470)
CVE-2019-12470
CWE-862
Medium
MediaWiki Missing Authorization Vulnerability (CVE-2019-12469)
CVE-2019-12469
CWE-862
Medium
MediaWiki CVE-2019-12467 Vulnerability (CVE-2019-12467)
CVE-2019-12467
-
Medium
WebLogic Improper Input Validation Vulnerability (CVE-2019-12400)
CVE-2019-12400
CWE-20
Medium
Jboss EAP Improper Input Validation Vulnerability (CVE-2019-12400)
CVE-2019-12400
CWE-20
Medium
Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12386)
CVE-2019-12386
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11876)
CVE-2019-11876
CWE-707
Medium
Dot CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-12309)
CVE-2019-12309
CWE-22
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12308)
CVE-2019-12308
CWE-707
Medium
silverstripeCMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-12246)
CVE-2019-12246
CWE-352
Medium
silverstripeCMS Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-12245)
CVE-2019-12245
CWE-732
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12205)
CVE-2019-12205
CWE-707
Medium
silverstripeCMS Session Fixation Vulnerability (CVE-2019-12203)
CVE-2019-12203
CWE-384
Medium
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15171)
CVE-2020-15171
CWE-138
Medium
Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13655)
CVE-2020-13655
CWE-707
Medium
Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-15242)
CVE-2020-15242
CWE-601
Medium
PHP Improper Input Validation Vulnerability (CVE-2020-7071)
CVE-2020-7071
CWE-20
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5749)
CVE-2020-5749
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5750)
CVE-2020-5750
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5751)
CVE-2020-5751
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6163)
CVE-2020-6163
CWE-707
Medium
silverstripeCMS Incorrect Default Permissions Vulnerability (CVE-2020-6165)
CVE-2020-6165
CWE-276
Medium
ZenCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6578)
CVE-2020-6578
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6632)
CVE-2020-6632
CWE-707
Medium
WordPress Ultimate Member Plugin Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-6859)
CVE-2020-6859
CWE-639
Medium
PHP Improper Preservation of Permissions Vulnerability (CVE-2020-7063)
CVE-2020-7063
CWE-281
Medium
PHP Out-of-bounds Read Vulnerability (CVE-2020-7064)
CVE-2020-7064
CWE-125
Medium
PHP Other Vulnerability (CVE-2020-7066)
CVE-2020-7066
-
Medium
PHP Inadequate Encryption Strength Vulnerability (CVE-2020-7069)
CVE-2020-7069
CWE-326
Medium
PHP Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2020-7070)
CVE-2020-7070
CWE-565
Medium
jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7656)
CVE-2020-7656
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5747)
CVE-2020-5747
CWE-707
Medium
AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7676)
CVE-2020-7676
CWE-707
Medium
UAParser.js Uncontrolled Resource Consumption Vulnerability (CVE-2020-7733)
CVE-2020-7733
CWE-400
Medium
UAParser.js Other Vulnerability (CVE-2020-7793)
CVE-2020-7793
-
Medium
MongoDb Incorrect Authorization Vulnerability (CVE-2020-7921)
CVE-2020-7921
CWE-863
Medium
MongoDb Improper Handling of Exceptional Conditions Vulnerability (CVE-2020-7923)
CVE-2020-7923
CWE-755
Medium
MongoDb Improper Handling of Exceptional Conditions Vulnerability (CVE-2020-7926)
CVE-2020-7926
CWE-755
Medium
MongoDb Other Vulnerability (CVE-2020-7928)
CVE-2020-7928
-
Medium
MongoDb Other Vulnerability (CVE-2020-7929)
CVE-2020-7929
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7934)
CVE-2020-7934
CWE-707
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-7936)
CVE-2020-7936
CWE-601
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7937)
CVE-2020-7937
CWE-707
Medium
Prototype Improper Privilege Management Vulnerability (CVE-2020-7993)
CVE-2020-7993
CWE-269
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7994)
CVE-2020-7994
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5748)
CVE-2020-5748
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5746)
CVE-2020-5746
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8089)
CVE-2020-8089
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5276)
CVE-2020-5276
CWE-707
Medium
IBM RTC CVE-2020-4964 Vulnerability (CVE-2020-4964)
CVE-2020-4964
-
Medium
IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-4974)
CVE-2020-4974
CWE-918
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4975)
CVE-2020-4975
CWE-707
Medium
IBM RTC Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-4989)
CVE-2020-4989
CWE-668
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5004)
CVE-2020-5004
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5031)
CVE-2020-5031
CWE-707
Medium
PrestaShop Files or Directories Accessible to External Parties Vulnerability (CVE-2020-5250)
CVE-2020-5250
CWE-552
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5264)
CVE-2020-5264
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5265)
CVE-2020-5265
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5269)
CVE-2020-5269
CWE-707
Medium
PrestaShop URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-5270)
CVE-2020-5270
CWE-601
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5271)
CVE-2020-5271
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5272)
CVE-2020-5272
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5278)
CVE-2020-5278
CWE-707
Medium
TCExam Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5744)
CVE-2020-5744
CWE-22
Medium
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5279)
CVE-2020-5279
CWE-863
Medium
Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5284)
CVE-2020-5284
CWE-22
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5285)
CVE-2020-5285
CWE-707
Medium