Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
TYPO3 Uncaught Exception Vulnerability (CVE-2025-59014)
CVE-2025-59014
CWE-248
Low
PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1481)
CVE-2010-1481
CWE-707
Low
Roundcube Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2026-35538)
CVE-2026-35538
CWE-707
Low
Oracle JRE CVE-2020-14581 Vulnerability (CVE-2020-14581)
CVE-2020-14581
-
Low
Oracle JRE CVE-2023-22044 Vulnerability (CVE-2023-22044)
CVE-2023-22044
-
Low
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-35496)
CVE-2026-35496
CWE-22
Low
Oracle JRE CVE-2023-22045 Vulnerability (CVE-2023-22045)
CVE-2023-22045
-
Low
MySQL CVE-2023-22048 Vulnerability (CVE-2023-22048)
CVE-2023-22048
-
Low
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-28566)
CVE-2021-28566
CWE-200
Low
Java Unspesificed Vulnerability (CVE-2018-3157)
CVE-2018-3157
-
Low
SharePoint CVE-2021-38651 Vulnerability (CVE-2021-38651)
CVE-2021-38651
-
Low
Java Unspesificed Vulnerability (CVE-2018-3150)
CVE-2018-3150
-
Low
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5502)
CVE-2012-5502
CWE-707
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5097)
CVE-2010-5097
CWE-707
Low
silverstripeCMS Credentials Management Errors Vulnerability (CVE-2010-5092)
CVE-2010-5092
-
Low
MySQL CVE-2023-22113 Vulnerability (CVE-2023-22113)
CVE-2023-22113
-
Low
Drupal Improper Access Control Vulnerability (CVE-2015-2559)
CVE-2015-2559
CWE-284
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6147)
CVE-2012-6147
CWE-707
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6148)
CVE-2012-6148
CWE-707
Low
MySQL CVE-2021-35633 Vulnerability (CVE-2021-35633)
CVE-2021-35633
-
Low
Oracle JRE CVE-2020-14781 Vulnerability (CVE-2020-14781)
CVE-2020-14781
-
Low
Oracle JRE CVE-2013-2451 Vulnerability (CVE-2013-2451)
CVE-2013-2451
-
Low
MySQL CVE-2018-2767 Vulnerability (CVE-2018-2767)
CVE-2018-2767
-
Low
Oracle JRE CVE-2020-14782 Vulnerability (CVE-2020-14782)
CVE-2020-14782
-
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0212)
CVE-2015-0212
CWE-707
Low
MySQL CVE-2015-2567 Vulnerability (CVE-2015-2567)
CVE-2015-2567
-
Low
MySQL CVE-2015-2566 Vulnerability (CVE-2015-2566)
CVE-2015-2566
-
Low
MySQL CVE-2021-35625 Vulnerability (CVE-2021-35625)
CVE-2021-35625
-
Low
EspoCRM Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-33659)
CVE-2026-33659
CWE-367
Low
MySQL CVE-2021-35623 Vulnerability (CVE-2021-35623)
CVE-2021-35623
-
Low
MySQL CVE-2021-2042 Vulnerability (CVE-2021-2042)
CVE-2021-2042
-
Low
MySQL CVE-2021-35618 Vulnerability (CVE-2021-35618)
CVE-2021-35618
-
Low
Oracle Application Server Other Vulnerability (CVE-2002-0568)
CVE-2002-0568
-
Low
Oracle Database Server CVE-2010-2389 Vulnerability (CVE-2010-2389)
CVE-2010-2389
-
Low
Oracle Database Server CVE-2010-2391 Vulnerability (CVE-2010-2391)
CVE-2010-2391
-
Low
GlassFish CVE-2010-2397 Vulnerability (CVE-2010-2397)
CVE-2010-2397
-
Low
MySQL CVE-2020-14791 Vulnerability (CVE-2020-14791)
CVE-2020-14791
-
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0216)
CVE-2015-0216
CWE-707
Low
Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0422)
CVE-2002-0422
CWE-200
Low
Mailman Other Vulnerability (CVE-2002-0389)
CVE-2002-0389
-
Low
MySQL CVE-2015-2576 Vulnerability (CVE-2015-2576)
CVE-2015-2576
-
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6145)
CVE-2012-6145
CWE-707
Low
Oracle Database Server CVE-2013-3790 Vulnerability (CVE-2013-3790)
CVE-2013-3790
-
Low
Oracle Database Server SYS Account privilege issue (CVE-2021-2000)
CVE-2021-2000
-
Low
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5868)
CVE-2012-5868
CWE-200
Low
Java Denial of Service (DoS) Vulnerability (CVE-2018-2952)
CVE-2018-2952
-
Low
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2026-34094)
CVE-2026-34094
CWE-668
Low
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0122)
CVE-2015-0122
CWE-707
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-3742)
CVE-2013-3742
CWE-707
Low
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0123)
CVE-2015-0123
CWE-707
Low
Oracle Database Server CVE-2023-22074 Vulnerability (CVE-2023-22074)
CVE-2023-22074
-
Low
Oracle Database Server CVE-2023-22075 Vulnerability (CVE-2023-22075)
CVE-2023-22075
-
Low
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0130)
CVE-2015-0130
CWE-707
Low
MySQL CVE-2015-2661 Vulnerability (CVE-2015-2661)
CVE-2015-2661
-
Low
MySQL Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2010-2008)
CVE-2010-2008
CWE-138
Low
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4883)
CVE-2010-4883
CWE-707
Low
Oracle JRE CVE-2020-14779 Vulnerability (CVE-2020-14779)
CVE-2020-14779
-
Low
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6074)
CVE-2012-6074
CWE-707
Low
MySQL CVE-2015-2641 Vulnerability (CVE-2015-2641)
CVE-2015-2641
-
Low
MySQL CVE-2021-2007 Vulnerability (CVE-2021-2007)
CVE-2021-2007
-
Low
MySQL CVE-2015-2639 Vulnerability (CVE-2015-2639)
CVE-2015-2639
-
Low
MySQL CVE-2020-14771 Vulnerability (CVE-2020-14771)
CVE-2020-14771
-
Low
Oracle JRE CVE-2018-2790 Vulnerability (CVE-2018-2790)
CVE-2018-2790
-
Low
MySQL CVE-2021-35640 Vulnerability (CVE-2021-35640)
CVE-2021-35640
-
Low
MySQL CVE-2021-2019 Vulnerability (CVE-2021-2019)
CVE-2021-2019
-
Low
Python Use After Free Vulnerability (CVE-2018-1000030)
CVE-2018-1000030
CWE-416
Low
Oracle Database Server CVE-2015-2585 Vulnerability (CVE-2015-2585)
CVE-2015-2585
-
Low
Apache HTTP Server Other Vulnerability (CVE-2002-1233)
CVE-2002-1233
-
Low
MySQL CVE-2013-3812 Vulnerability (CVE-2013-3812)
CVE-2013-3812
-
Low
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4874)
CVE-2026-4874
CWE-918
Low
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3507)
CVE-2012-3507
CWE-707
Low
MySQL CVE-2014-2438 Vulnerability (CVE-2014-2438)
CVE-2014-2438
-
Low
Java Unspesificed Vulnerability (CVE-2019-2766)
CVE-2019-2766
-
Low
Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-2667)
CVE-2014-2667
CWE-362
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2571)
CVE-2014-2571
CWE-707
Low