Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23975 vulnerabilities in this category.

Critical: 1584 High: 12800 Medium: 8788 Low: 799 Information: 4
Vulnerability Name
CVE
CWE
Severity
Opencart Incomplete Filtering of Special Elements Vulnerability (CVE-2026-3714)
CVE-2026-3714
CWE-791
Medium
XWikiplatform Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-40105)
CVE-2026-40105
CWE-707
Medium
axios Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-40175)
CVE-2026-40175
CWE-707
Medium
Spring Boot : Improper Certificate Validation Vulnerability (CVE-2026-40970)
CVE-2026-40970
CWE-295
Medium
Spring Boot : Improper Certificate Validation Vulnerability (CVE-2026-40971)
CVE-2026-40971
CWE-295
Medium
Spring Boot : Improper Certificate Validation Vulnerability (CVE-2026-40974)
CVE-2026-40974
CWE-295
Medium
Spring Boot : Use of Insufficiently Random Values Vulnerability (CVE-2026-40975)
CVE-2026-40975
CWE-330
Medium
Spring Boot : Improper Link Resolution Before File Access Vulnerability (CVE-2026-40977)
CVE-2026-40977
-
Medium
Spring Boot : Improper Certificate Validation Vulnerability (CVE-2026-40992)
CVE-2026-40992
CWE-295
Medium
Spring Boot : Insecure Temporary File Vulnerability (CVE-2026-41001)
CVE-2026-41001
CWE-377
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-41240)
CVE-2026-41240
CWE-707
Medium
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-41423)
CVE-2026-41423
CWE-918
Medium
axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-42034)
CVE-2026-42034
CWE-770
Medium
axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-42036)
CVE-2026-42036
CWE-770
Medium
axios Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2026-42037)
CVE-2026-42037
CWE-707
Medium
axios Improper Authentication Vulnerability (CVE-2026-42041)
CVE-2026-42041
CWE-287
Medium
axios Permissive List of Allowed Inputs Vulnerability (CVE-2026-42042)
CVE-2026-42042
CWE-183
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42766)
CVE-2026-42766
CWE-476
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42767)
CVE-2026-42767
CWE-476
Medium
OpenSSL Improper Certificate Validation Vulnerability (CVE-2026-42769)
CVE-2026-42769
CWE-295
Medium
OpenSSL Out-of-bounds Read Vulnerability (CVE-2026-42771)
CVE-2026-42771
CWE-125
Medium
OpenSSL Inefficient Algorithmic Complexity Vulnerability (CVE-2026-42772)
CVE-2026-42772
CWE-407
Medium
Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2026-43951)
CVE-2026-43951
CWE-125
Medium
Apache HTTP Server Improper Privilege Management Vulnerability (CVE-2026-44119)
CVE-2026-44119
CWE-269
Medium
axios Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-44489)
CVE-2026-44489
CWE-707
Medium
Next.js Acceptance of Extraneous Untrusted Data With Trusted Data Vulnerability (CVE-2026-44572)
CVE-2026-44572
CWE-349
Medium
Next.js Interpretation Conflict Vulnerability (CVE-2026-44576)
CVE-2026-44576
CWE-436
Medium
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44577)
CVE-2026-44577
CWE-770
Medium
Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44580)
CVE-2026-44580
CWE-707
Medium
Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44581)
CVE-2026-44581
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-44821)
CVE-2026-44821
CWE-125
Medium
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-45446)
CVE-2026-45446
CWE-325
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45453)
CVE-2026-45453
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45462)
CVE-2026-45462
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45464)
CVE-2026-45464
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45465)
CVE-2026-45465
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45467)
CVE-2026-45467
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45468)
CVE-2026-45468
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45479)
CVE-2026-45479
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45481)
CVE-2026-45481
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45483)
CVE-2026-45483
CWE-707
Medium
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-46417)
CVE-2026-46417
CWE-918
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-46917)
CVE-2026-46917
CWE-284
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-46968)
CVE-2026-46968
CWE-284
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-46975)
CVE-2026-46975
CWE-284
Medium
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-47021)
CVE-2026-47021
CWE-400
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47027)
CVE-2026-47027
CWE-284
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47039)
CVE-2026-47039
CWE-284
Medium
Oracle Database Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-47045)
CVE-2026-47045
CWE-601
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47060)
CVE-2026-47060
CWE-284
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47061)
CVE-2026-47061
CWE-284
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-47205)
CVE-2026-47205
CWE-416
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-47207)
CVE-2026-47207
CWE-416
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47634)
CVE-2026-47634
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47636)
CVE-2026-47636
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47637)
CVE-2026-47637
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47638)
CVE-2026-47638
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47639)
CVE-2026-47639
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47640)
CVE-2026-47640
CWE-707
Medium
SharePoint CVE-2026-47641 Vulnerability (CVE-2026-47641)
CVE-2026-47641
-
Medium
Envoy Proxy Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-47692)
CVE-2026-47692
CWE-130
Medium
Squid Out-of-bounds Read Vulnerability (CVE-2026-47729)
CVE-2026-47729
CWE-125
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47759)
CVE-2026-47759
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47760)
CVE-2026-47760
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47761)
CVE-2026-47761
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47762)
CVE-2026-47762
CWE-707
Medium
Envoy Proxy Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2026-47775)
CVE-2026-47775
CWE-209
Medium
Envoy Proxy Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2026-47778)
CVE-2026-47778
CWE-158
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-48090)
CVE-2026-48090
CWE-416
Medium
UAParser.js Uncontrolled Resource Consumption Vulnerability (CVE-2026-48125)
CVE-2026-48125
CWE-400
Medium
Envoy : NULL Pointer Dereference Vulnerability (CVE-2026-48521)
CVE-2026-48521
CWE-476
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48560)
CVE-2026-48560
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48562)
CVE-2026-48562
CWE-707
Medium
Django Incomplete Comparison with Missing Factors Vulnerability (CVE-2026-48587)
CVE-2026-48587
CWE-1023
Medium
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48588)
CVE-2026-48588
CWE-524
Medium