Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23975 vulnerabilities in this category.

Critical: 1584 High: 12800 Medium: 8788 Low: 799 Information: 4
Vulnerability Name
CVE
CWE
Severity
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67855)
CVE-2025-67855
CWE-707
Medium
Moodle Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-67857)
CVE-2025-67857
CWE-201
Medium
OpenSSL Out-of-bounds Write Vulnerability (CVE-2025-68160)
CVE-2025-68160
CWE-787
Medium
Craft CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-68436)
CVE-2025-68436
CWE-200
Medium
Craft CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-68437)
CVE-2025-68437
CWE-918
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-68461)
CVE-2025-68461
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-68951)
CVE-2025-68951
CWE-707
Medium
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2025-69418)
CVE-2025-69418
CWE-325
Medium
Chamilo Use of Cache Containing Sensitive Information Vulnerability (CVE-2025-69581)
CVE-2025-69581
CWE-524
Medium
Python Uncontrolled Resource Consumption Vulnerability (CVE-2025-6075)
CVE-2025-6075
CWE-400
Medium
PHP NULL Pointer Dereference Vulnerability (CVE-2025-6491)
CVE-2025-6491
CWE-476
Medium
MongoDb Incorrect Authorization Vulnerability (CVE-2025-6707)
CVE-2025-6707
CWE-863
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-6711)
CVE-2025-6711
CWE-532
Medium
MongoDb Uncontrolled Resource Consumption Vulnerability (CVE-2025-6712)
CVE-2025-6712
CWE-400
Medium
MongoDb Improper Authorization Vulnerability (CVE-2025-6713)
CVE-2025-6713
CWE-285
Medium
Podcast Generator Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-70336)
CVE-2025-70336
CWE-707
Medium
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-70811)
CVE-2025-70811
CWE-352
Medium
MongoDb Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2025-7259)
CVE-2025-7259
CWE-843
Medium
TYPO3 Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-7900)
CVE-2025-7900
CWE-639
Medium
markdown-it Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-7969)
CVE-2025-7969
CWE-707
Medium
Pega Infinity Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-9559)
CVE-2025-9559
CWE-639
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-0540)
CVE-2026-0540
CWE-707
Medium
Python Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2026-0864)
CVE-2026-0864
CWE-138
Medium
axios : Protection Mechanism Failure Vulnerability (CVE-2026-101899)
CVE-2026-101899
CWE-693
Medium
axios : Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Inje (CVE-2026-101900)
CVE-2026-101900
CWE-138
Medium
axios : Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') V (CVE-2026-101902)
CVE-2026-101902
CWE-1321
Medium
axios : Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Inje (CVE-2026-101904)
CVE-2026-101904
CWE-138
Medium
axios : Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') V (CVE-2026-101908)
CVE-2026-101908
CWE-1321
Medium
NextJsReactFramework : Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-103004)
CVE-2026-103004
CWE-524
Medium
TornadoWebServer Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-103261)
CVE-2026-103261
CWE-770
Medium
TornadoWebServer Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2026-103263)
CVE-2026-103263
CWE-59
Medium
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulner (CVE-2026-105831)
CVE-2026-105831
CWE-707
Medium
EspoCRM Improper Authentication Vulnerability (CVE-2026-105832)
CVE-2026-105832
CWE-287
Medium
Dolibarr Incorrect Authorization Vulnerability (CVE-2026-107706)
CVE-2026-107706
CWE-863
Medium
contao : Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-107842)
CVE-2026-107842
CWE-200
Medium
contao : Observable Response Discrepancy Vulnerability (CVE-2026-107843)
CVE-2026-107843
CWE-204
Medium
contao : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerabili (CVE-2026-107844)
CVE-2026-107844
CWE-22
Medium
contao : Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-107850)
CVE-2026-107850
CWE-639
Medium
contao : Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-107851)
CVE-2026-107851
CWE-524
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vuln (CVE-2026-109344)
CVE-2026-109344
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vuln (CVE-2026-109345)
CVE-2026-109345
CWE-707
Medium
EspoCRM Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-109957)
CVE-2026-109957
CWE-639
Medium
EspoCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-109958)
CVE-2026-109958
CWE-200
Medium
EspoCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-109959)
CVE-2026-109959
CWE-200
Medium
Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-10601)
CVE-2026-10601
CWE-22
Medium
Nexus Repository Manager Incorrect Authorization Vulnerability (CVE-2026-10741)
CVE-2026-10741
CWE-863
Medium
MOVEit Transfer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-11903)
CVE-2026-11903
CWE-707
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-13055)
CVE-2026-13055
CWE-617
Medium
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-13056)
CVE-2026-13056
CWE-1325
Medium
MongoDb Improper Input Validation Vulnerability (CVE-2026-13057)
CVE-2026-13057
CWE-20
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-13058)
CVE-2026-13058
CWE-617
Medium
MongoDb Incorrect Authorization Vulnerability (CVE-2026-13060)
CVE-2026-13060
CWE-863
Medium
MongoDb Incorrect Authorization Vulnerability (CVE-2026-13061)
CVE-2026-13061
CWE-863
Medium
MongoDb Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-13062)
CVE-2026-13062
CWE-441
Medium
MongoDb Integer Overflow or Wraparound Vulnerability (CVE-2026-13063)
CVE-2026-13063
CWE-190
Medium
MongoDb Inefficient Algorithmic Complexity Vulnerability (CVE-2026-13064)
CVE-2026-13064
CWE-407
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-13065)
CVE-2026-13065
CWE-476
Medium
MongoDb Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-13066)
CVE-2026-13066
CWE-843
Medium
MongoDb Incorrect Authorization Vulnerability (CVE-2026-13067)
CVE-2026-13067
CWE-863
Medium
MongoDb Incorrect Authorization Vulnerability (CVE-2026-13068)
CVE-2026-13068
CWE-863
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13069)
CVE-2026-13069
CWE-770
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-13070)
CVE-2026-13070
CWE-476
Medium
MongoDb Use After Free Vulnerability (CVE-2026-13071)
CVE-2026-13071
CWE-416
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-13073)
CVE-2026-13073
CWE-617
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13074)
CVE-2026-13074
CWE-770
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13075)
CVE-2026-13075
CWE-770
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13076)
CVE-2026-13076
CWE-770
Medium
PHP Heap-based Buffer Overflow Vulnerability (CVE-2026-14355)
CVE-2026-14355
CWE-122
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-14358)
CVE-2026-14358
CWE-707
Medium
PostgreSQL Cleartext Storage in a File or on Disk Vulnerability (CVE-2026-14663)
CVE-2026-14663
CWE-313
Medium
PostgreSQL Improper Preservation of Consistency Between Independent Representations of Shared State Vulnerability (CVE-2026-14666)
CVE-2026-14666
CWE-1250
Medium
PostgreSQL Observable Response Discrepancy Vulnerability (CVE-2026-14672)
CVE-2026-14672
CWE-204
Medium
PostgreSQL Buffer Over-read Vulnerability (CVE-2026-14678)
CVE-2026-14678
CWE-126
Medium
PostgreSQL Improper Enforcement of Message Integrity During Transmission in a Communication Channel Vulnerability (CVE-2026-14681)
CVE-2026-14681
CWE-924
Medium
Django Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-15337)
CVE-2026-15337
CWE-789
Medium