🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23765 vulnerabilities
in this category.
Critical: 1566
High: 12713
Medium: 8693
Low: 789
Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0700)
CVE-2011-0700
CWE-707
Low
Jboss EAP Credentials Management Errors Vulnerability (CVE-2009-5066)
CVE-2009-5066
-
Low
PHP Other Vulnerability (CVE-2005-0596)
CVE-2005-0596
-
Low
OpenSSL Cryptographic Issues Vulnerability (CVE-2015-4000)
CVE-2015-4000
-
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4371)
CVE-2009-4371
CWE-707
Low
Oracle Database Server Improper Privilege Management Vulnerability (CVE-2025-50066)
CVE-2025-50066
CWE-269
Low
Caddy Web Server Partial String Comparison Vulnerability (CVE-2026-45692)
CVE-2026-45692
CWE-187
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4370)
CVE-2009-4370
CWE-707
Low
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4572)
CVE-2012-4572
CWE-264
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4579)
CVE-2012-4579
CWE-707
Low
Oracle JRE CVE-2023-21938 Vulnerability (CVE-2023-21938)
CVE-2023-21938
-
Low
Oracle Database Server CVE-2023-21949 Vulnerability (CVE-2023-21949)
CVE-2023-21949
-
Low
MySQL CVE-2023-21882 Vulnerability (CVE-2023-21882)
CVE-2023-21882
-
Low
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-45485)
CVE-2026-45485
CWE-125
Low
MySQL CVE-2015-4757 Vulnerability (CVE-2015-4757)
CVE-2015-4757
-
Low
Oracle Database Server CVE-2011-0793 Vulnerability (CVE-2011-0793)
CVE-2011-0793
-
Low
MySQL CVE-2015-4737 Vulnerability (CVE-2015-4737)
CVE-2015-4737
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4995)
CVE-2013-4995
CWE-707
Low
Oracle JRE CVE-2023-21843 Vulnerability (CVE-2023-21843)
CVE-2023-21843
-
Low
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9042)
CVE-2014-9042
CWE-707
Low
TYPO3 Unverified Password Change Vulnerability (CVE-2025-47938)
CVE-2025-47938
CWE-620
Low
OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-23839)
CVE-2021-23839
CWE-327
Low
Oracle Database Server CVE-2015-4753 Vulnerability (CVE-2015-4753)
CVE-2015-4753
-
Low
PostgreSQL Other Vulnerability (CVE-2005-1410)
CVE-2005-1410
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5002)
CVE-2013-5002
CWE-707
Low
MySQL CVE-2017-3320 Vulnerability (CVE-2017-3320)
CVE-2017-3320
-
Low
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3319)
CVE-2017-3319
CWE-200
Low
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4422)
CVE-2012-4422
CWE-264
Low
Next.js Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2025-49005)
CVE-2025-49005
-
Low
XWikiplatform Insufficient UI Warning of Dangerous Operations Vulnerability (CVE-2025-49583)
CVE-2025-49583
CWE-357
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5001)
CVE-2013-5001
CWE-707
Low
Next.js Use of Weak Hash Vulnerability (CVE-2026-44582)
CVE-2026-44582
-
Low
MySQL CVE-2017-3467 Vulnerability (CVE-2017-3467)
CVE-2017-3467
-
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4369)
CVE-2009-4369
CWE-707
Low
Coppermine Cross-site Scripting (XSS) Vulnerability (CVE-2015-3921)
CVE-2015-3921
-
Low
axios Improper Encoding or Escaping of Output Vulnerability (CVE-2026-42040)
CVE-2026-42040
CWE-116
Low
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5739)
CVE-2013-5739
CWE-707
Low
MySQL CVE-2015-4792 Vulnerability (CVE-2015-4792)
CVE-2015-4792
-
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4523)
CVE-2013-4523
CWE-707
Low
MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4452)
CVE-2012-4452
CWE-264
Low
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-26071)
CVE-2021-26071
CWE-352
Low
MySQL CVE-2015-4807 Vulnerability (CVE-2015-4807)
CVE-2015-4807
-
Low
PHP Other Vulnerability (CVE-2005-3319)
CVE-2005-3319
-
Low
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47059)
CVE-2026-47059
CWE-284
Low
Atlassian Jira CVE-2021-26076 Vulnerability (CVE-2021-26076)
CVE-2021-26076
-
Low
OpenSSL Covert Channel Vulnerability (CVE-2026-42768)
CVE-2026-42768
CWE-514
Low
Moodle Improper Input Validation Vulnerability (CVE-2019-10134)
CVE-2019-10134
CWE-20
Low
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9475)
CVE-2014-9475
CWE-707
Low
osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-0606)
CVE-2010-0606
CWE-707
Low
MySQL CVE-2025-50098 Vulnerability (CVE-2025-50098)
CVE-2025-50098
-
Low
MySQL CVE-2025-50100 Vulnerability (CVE-2025-50100)
CVE-2025-50100
-
Low
SharePoint CVE-2021-40484 Vulnerability (CVE-2021-40484)
CVE-2021-40484
-
Low
SharePoint CVE-2021-40483 Vulnerability (CVE-2021-40483)
CVE-2021-40483
-
Low
MySQL CVE-2015-4791 Vulnerability (CVE-2015-4791)
CVE-2015-4791
-
Low
MySQL CVE-2017-3653 Vulnerability (CVE-2017-3653)
CVE-2017-3653
-
Low
MySQL CVE-2015-4761 Vulnerability (CVE-2015-4761)
CVE-2015-4761
-
Low
Vanilla Forums Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4954)
CVE-2012-4954
CWE-264
Low
MySQL CVE-2015-4766 Vulnerability (CVE-2015-4766)
CVE-2015-4766
-
Low
MySQL Improper Access Control Vulnerability (CVE-2025-50081)
CVE-2025-50081
CWE-284
Low
MySQL CVE-2015-4767 Vulnerability (CVE-2015-4767)
CVE-2015-4767
-
Low
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5404)
CVE-2013-5404
CWE-707
Low
MySQL CVE-2015-4769 Vulnerability (CVE-2015-4769)
CVE-2015-4769
-
Low
MySQL CVE-2015-4771 Vulnerability (CVE-2015-4771)
CVE-2015-4771
-
Low
Apache Tomcat Observable Timing Discrepancy Vulnerability (CVE-2026-43514)
CVE-2026-43514
CWE-208
Low
MySQL CVE-2017-3650 Vulnerability (CVE-2017-3650)
CVE-2017-3650
-
Low
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-42770)
CVE-2026-42770
CWE-325
Low
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47010)
CVE-2026-47010
CWE-284
Low
Oracle Database Server CVE-2011-0804 Vulnerability (CVE-2011-0804)
CVE-2011-0804
-
Low
PHP Other Vulnerability (CVE-2005-3054)
CVE-2005-3054
-
Low
Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3240)
CVE-2017-3240
CWE-200
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4525)
CVE-2013-4525
CWE-707
Low
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-3164)
CVE-2005-3164
CWE-200
Low
Oracle Database Server Missing Authentication for Critical Function Vulnerability (CVE-2026-47038)
CVE-2026-47038
CWE-306
Low
GlassFish Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3239)
CVE-2017-3239
CWE-200
Low
MySQL CVE-2017-3468 Vulnerability (CVE-2017-3468)
CVE-2017-3468
-
Low
«
1
...
307
308
309
...
317
»