Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23975 vulnerabilities in this category.

Critical: 1584 High: 12800 Medium: 8788 Low: 799 Information: 4
Vulnerability Name
CVE
CWE
Severity
PostgreSQL Covert Timing Channel Vulnerability (CVE-2026-6478)
CVE-2026-6478
CWE-385
Medium
PostgreSQL Buffer Over-read Vulnerability (CVE-2026-6575)
CVE-2026-6575
CWE-126
Medium
PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6735)
CVE-2026-6735
CWE-707
Medium
Jetty Improper Input Validation Vulnerability (CVE-2026-6790)
CVE-2026-6790
CWE-20
Medium
Django Improper Verification of Cryptographic Signature Vulnerability (CVE-2026-6873)
CVE-2026-6873
CWE-347
Medium
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-6907)
CVE-2026-6907
CWE-524
Medium
MongoDb Improper Validation of Specified Quantity in Input Vulnerability (CVE-2026-6915)
CVE-2026-6915
CWE-1284
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-71100)
CVE-2026-71100
CWE-284
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulne (CVE-2026-71503)
CVE-2026-71503
CWE-707
Medium
Dolibarr Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-71507)
CVE-2026-71507
CWE-639
Medium
Dolibarr Missing Authorization Vulnerability (CVE-2026-71508)
CVE-2026-71508
CWE-862
Medium
Dolibarr Missing Authorization Vulnerability (CVE-2026-71509)
CVE-2026-71509
CWE-862
Medium
Dolibarr Incorrect Authorization Vulnerability (CVE-2026-71510)
CVE-2026-71510
CWE-863
Medium
Dolibarr Insufficiently Protected Credentials Vulnerability (CVE-2026-71511)
CVE-2026-71511
CWE-522
Medium
Envoy : Authentication Bypass by Alternate Name Vulnerability (CVE-2026-73511)
CVE-2026-73511
CWE-289
Medium
Envoy : Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-73549)
CVE-2026-73549
CWE-754
Medium
Envoy : Use of Non-Canonical URL Paths for Authorization Decisions Vulnerability (CVE-2026-73551)
CVE-2026-73551
CWE-647
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vu (CVE-2026-73628)
CVE-2026-73628
CWE-707
Medium
OpenSSL Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-75804)
CVE-2026-75804
CWE-770
Medium
OpenSSL NULL-pointer dereference Vulnerability (CVE-2026-75805)
CVE-2026-75805
-
Medium
OpenSSL Improper Validation of Specified Quantity in Input Vulnerability (CVE-2026-75806)
CVE-2026-75806
CWE-1284
Medium
Django : Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-77050)
CVE-2026-77050
CWE-789
Medium
Nexus Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-77121)
CVE-2026-77121
CWE-770
Medium
Nexus Incorrect Authorization Vulnerability (CVE-2026-77122)
CVE-2026-77122
CWE-863
Medium
Nexus Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-77123)
CVE-2026-77123
CWE-201
Medium
CaddyWebServer : Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-77281)
CVE-2026-77281
CWE-94
Medium
Dolibarr Incorrect Authorization Vulnerability (CVE-2026-77923)
CVE-2026-77923
CWE-863
Medium
PHP NULL Pointer Dereference Vulnerability (CVE-2026-7259)
CVE-2026-7259
CWE-476
Medium
PHP Stack-based Buffer Overflow Vulnerability (CVE-2026-7260)
CVE-2026-7260
CWE-121
Medium
FrontAccounting Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-80210)
CVE-2026-80210
CWE-352
Medium
FrontAccounting Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2026-80211)
CVE-2026-80211
CWE-916
Medium
Dolibarr Incorrect Authorization Vulnerability (CVE-2026-81729)
CVE-2026-81729
CWE-863
Medium
PrestaShop Authentication bypass by spoofing Vulnerability (CVE-2026-84186)
CVE-2026-84186
-
Medium
Django : Inefficient Algorithmic Complexity Vulnerability (CVE-2026-84429)
CVE-2026-84429
CWE-407
Medium
Django : Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-87890)
CVE-2026-87890
CWE-918
Medium
Django : Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-87975)
CVE-2026-87975
CWE-639
Medium
Angular : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vuln (CVE-2026-88057)
CVE-2026-88057
CWE-707
Medium
Angular : Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-88059)
CVE-2026-88059
CWE-200
Medium
EspoCRM Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-88896)
CVE-2026-88896
CWE-918
Medium
Dolibarr Improper Handling of Case Sensitivity Vulnerability (CVE-2026-89012)
CVE-2026-89012
CWE-178
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-8063)
CVE-2026-8063
CWE-476
Medium
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-8199)
CVE-2026-8199
CWE-1325
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-8200)
CVE-2026-8200
CWE-532
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-8202)
CVE-2026-8202
CWE-770
Medium
MongoDb Use After Free Vulnerability (CVE-2026-8336)
CVE-2026-8336
CWE-416
Medium
Jetty Use of Non-Canonical URL Paths for Authorization Decisions Vulnerability (CVE-2026-8384)
CVE-2026-8384
CWE-647
Medium
Django Improper Handling of Case Sensitivity Vulnerability (CVE-2026-8404)
CVE-2026-8404
CWE-178
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-8595)
CVE-2026-8595
CWE-707
Medium
EspoCRM Incorrect Authorization Vulnerability (CVE-2026-90934)
CVE-2026-90934
CWE-863
Medium
TornadoWebServer Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response (CVE-2026-91991)
CVE-2026-91991
CWE-707
Medium
TornadoWebServer Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-91992)
CVE-2026-91992
CWE-200
Medium
CaddyWebServer : Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-92284)
CVE-2026-92284
CWE-770
Medium
EspoCRM Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2026-92298)
CVE-2026-92298
CWE-338
Medium
CaddyWebServer : Improper Handling of Case Sensitivity Vulnerability (CVE-2026-92700)
CVE-2026-92700
CWE-178
Medium
NextJsReactFramework : Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-94484)
CVE-2026-94484
CWE-524
Medium
NextJsReactFramework : Origin Validation Error Vulnerability (CVE-2026-94485)
CVE-2026-94485
CWE-346
Medium
NextJsReactFramework : Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-94543)
CVE-2026-94543
CWE-524
Medium
NextJsReactFramework : Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-94544)
CVE-2026-94544
CWE-524
Medium
GibbonEdu Missing Authentication Vulnerability (CVE-2026-97864)
CVE-2026-97864
-
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-9029)
CVE-2026-9029
CWE-707
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-9735)
CVE-2026-9735
CWE-532
Medium
MongoDb Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-9741)
CVE-2026-9741
CWE-319
Medium
MongoDb Improper Validation of Specified Type of Input Vulnerability (CVE-2026-9742)
CVE-2026-9742
CWE-1287
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-9743)
CVE-2026-9743
CWE-476
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9746)
CVE-2026-9746
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9747)
CVE-2026-9747
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9748)
CVE-2026-9748
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9749)
CVE-2026-9749
CWE-617
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9750)
CVE-2026-9750
CWE-617
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-9751)
CVE-2026-9751
CWE-532
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-9752)
CVE-2026-9752
CWE-476
Medium
MongoDb Use of Uninitialized Variable Vulnerability (CVE-2026-9754)
CVE-2026-9754
CWE-457
Medium
Unfiltered header injection in Apache 1.3.34/2.0.57/2.2.1
CVE-2006-3918
CWE-79
Low
Vulnerable package dependencies [low]
-
CWE-1104
Low
Internet Information Services Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-1999-0861)
CVE-1999-0861
CWE-362
Low