🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23765 vulnerabilities
in this category.
Critical: 1566
High: 12713
Medium: 8693
Low: 789
Information: 4
Vulnerability Name
CVE
CWE
Severity
PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5814)
CVE-2008-5814
CWE-707
Low
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-4721)
CVE-2014-4721
CWE-200
Low
Oracle Database Server CVE-2014-2478 Vulnerability (CVE-2014-2478)
CVE-2014-2478
-
Low
MySQL CVE-2014-2451 Vulnerability (CVE-2014-2451)
CVE-2014-2451
-
Low
XWiki CVE-2007-4898 Vulnerability (CVE-2007-4898)
CVE-2007-4898
-
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6170)
CVE-2008-6170
CWE-707
Low
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0372)
CVE-2016-0372
CWE-200
Low
MySQL CVE-2019-2738 Vulnerability (CVE-2019-2738)
CVE-2019-2738
-
Low
Python Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4940)
CVE-2011-4940
CWE-707
Low
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-5702)
CVE-2016-5702
-
Low
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6299)
CVE-2008-6299
CWE-707
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4954)
CVE-2014-4954
CWE-707
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-24728)
CVE-2022-24728
CWE-707
Low
Django Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-7666)
CVE-2026-7666
CWE-319
Low
MySQL CVE-2019-2730 Vulnerability (CVE-2019-2730)
CVE-2019-2730
-
Low
Oracle JRE Incorrect Default Permissions Vulnerability (CVE-2024-21012)
CVE-2024-21012
CWE-276
Low
MySQL CVE-2014-2432 Vulnerability (CVE-2014-2432)
CVE-2014-2432
-
Low
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-5256)
CVE-2011-5256
CWE-707
Low
MySQL CVE-2014-2431 Vulnerability (CVE-2014-2431)
CVE-2014-2431
-
Low
MySQL CVE-2014-2430 Vulnerability (CVE-2014-2430)
CVE-2014-2430
-
Low
Python Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4944)
CVE-2011-4944
CWE-264
Low
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-5461)
CVE-2007-5461
CWE-22
Low
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2012-0021)
CVE-2012-0021
CWE-20
Low
MySQL CVE-2016-0598 Vulnerability (CVE-2016-0598)
CVE-2016-0598
-
Low
PHP Improper Input Validation Vulnerability (CVE-2007-6039)
CVE-2007-6039
CWE-20
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5977)
CVE-2007-5977
CWE-707
Low
MySQL CVE-2016-0605 Vulnerability (CVE-2016-0605)
CVE-2016-0605
-
Low
MySQL CVE-2016-0601 Vulnerability (CVE-2016-0601)
CVE-2016-0601
-
Low
MySQL CVE-2016-0600 Vulnerability (CVE-2016-0600)
CVE-2016-0600
-
Low
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5250)
CVE-2008-5250
CWE-707
Low
Oracle Database Server Incorrect Default Permissions Vulnerability (CVE-2024-21123)
CVE-2024-21123
CWE-276
Low
MySQL CVE-2016-0599 Vulnerability (CVE-2016-0599)
CVE-2016-0599
-
Low
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5710)
CVE-2007-5710
CWE-707
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5621)
CVE-2007-5621
CWE-707
Low
MySQL CVE-2024-21101 Vulnerability (CVE-2024-21101)
CVE-2024-21101
-
Low
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3050)
CVE-2014-3050
CWE-200
Low
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5519)
CVE-2008-5519
CWE-200
Low
Oracle JRE Acceptance of Extraneous Untrusted Data With Trusted Data Vulnerability (CVE-2024-21094)
CVE-2024-21094
CWE-349
Low
Oracle JRE CVE-2024-21085 Vulnerability (CVE-2024-21085)
CVE-2024-21085
-
Low
phpMyFAQ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-29196)
CVE-2024-29196
CWE-22
Low
MySQL CVE-2019-2791 Vulnerability (CVE-2019-2791)
CVE-2019-2791
-
Low
MySQL CVE-2019-2789 Vulnerability (CVE-2019-2789)
CVE-2019-2789
-
Low
Java Unspesificed Vulnerability (CVE-2019-2786)
CVE-2019-2786
-
Low
MySQL CVE-2016-5444 Vulnerability (CVE-2016-5444)
CVE-2016-5444
-
Low
MySQL CVE-2022-39403 Vulnerability (CVE-2022-39403)
CVE-2022-39403
-
Low
Oracle JRE CVE-2024-21068 Vulnerability (CVE-2024-21068)
CVE-2024-21068
-
Low
Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5498)
CVE-2016-5498
CWE-200
Low
Oracle Database Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-5499)
CVE-2016-5499
CWE-264
Low
Oracle JRE Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-21011)
CVE-2024-21011
CWE-770
Low
Oracle JRE CVE-2014-2420 Vulnerability (CVE-2014-2420)
CVE-2014-2420
-
Low
MySQL CVE-2016-0606 Vulnerability (CVE-2016-0606)
CVE-2016-0606
-
Low
Phusion Passenger Other Vulnerability (CVE-2014-1831)
CVE-2014-1831
-
Low
MySQL CVE-2012-0493 Vulnerability (CVE-2012-0493)
CVE-2012-0493
-
Low
MySQL CVE-2012-0494 Vulnerability (CVE-2012-0494)
CVE-2012-0494
-
Low
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5240)
CVE-2014-5240
CWE-707
Low
Play Framework Data Amplification Vulnerability (CVE-2020-28923)
CVE-2020-28923
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1879)
CVE-2014-1879
CWE-707
Low
Opencart Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28838)
CVE-2020-28838
CWE-352
Low
PostgreSQL Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-10977)
CVE-2024-10977
CWE-345
Low
MySQL CVE-2019-2513 Vulnerability (CVE-2019-2513)
CVE-2019-2513
-
Low
Phusion Passenger Other Vulnerability (CVE-2014-1832)
CVE-2014-1832
-
Low
OpenSSL Other Vulnerability (CVE-2007-3108)
CVE-2007-3108
-
Low
MySQL CVE-2015-0499 Vulnerability (CVE-2015-0499)
CVE-2015-0499
-
Low
Oracle Database Server CVE-2019-2547 Vulnerability (CVE-2019-2547)
CVE-2019-2547
-
Low
PHP Other Vulnerability (CVE-2007-2727)
CVE-2007-2727
-
Low
MySQL Other Vulnerability (CVE-2007-2693)
CVE-2007-2693
-
Low
Grafana Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-10452)
CVE-2024-10452
CWE-639
Low
PHP Improper Input Validation Vulnerability (CVE-2007-2509)
CVE-2007-2509
CWE-20
Low
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-2450)
CVE-2007-2450
CWE-707
Low
Dotclear Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7903)
CVE-2016-7903
CWE-264
Low
MySQL CVE-2016-8284 Vulnerability (CVE-2016-8284)
CVE-2016-8284
-
Low
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-8286)
CVE-2016-8286
CWE-200
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5273)
CVE-2014-5273
CWE-707
Low
MySQL Improper Access Control Vulnerability (CVE-2016-8288)
CVE-2016-8288
CWE-284
Low
Oracle JRE CVE-2022-21624 Vulnerability (CVE-2022-21624)
CVE-2022-21624
-
Low
«
1
...
311
312
313
...
317
»