Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Missing Update

This page lists 22224 vulnerabilities in this category.

Critical: 1394 High: 12186 Medium: 7891 Low: 749 Information: 4
Vulnerability Name
CVE
CWE
Severity
Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-32780)
CVE-2021-32780
CWE-754
High
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32779)
CVE-2021-32779
CWE-863
High
Envoy Proxy Excessive Iteration Vulnerability (CVE-2021-32778)
CVE-2021-32778
CWE-834
High
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32777)
CVE-2021-32777
CWE-863
High
Zope Web Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-32674)
CVE-2021-32674
CWE-22
High
Atlassian Jira CVE-2021-39123 Vulnerability (CVE-2021-39123)
CVE-2021-39123
-
High
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39126)
CVE-2021-39126
CWE-352
High
ownCloud Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-44537)
CVE-2021-44537
CWE-138
High
Ruby CVE-2021-41819 Vulnerability (CVE-2021-41819)
CVE-2021-41819
-
High
Oracle HTTP Server Uncontrolled Recursion Vulnerability (CVE-2021-42717)
CVE-2021-42717
CWE-674
High
Apache Tomcat Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2021-42340)
CVE-2021-42340
CWE-772
High
Masa CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-42183)
CVE-2021-42183
CWE-22
High
Mailman Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-42097)
CVE-2021-42097
CWE-352
High
MediaWiki Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-42040)
CVE-2021-42040
CWE-835
High
Craft CMS Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-41824)
CVE-2021-41824
CWE-1236
High
Ruby Other Vulnerability (CVE-2021-41817)
CVE-2021-41817
-
High
jQuery Validation Other Vulnerability (CVE-2021-43306)
CVE-2021-43306
-
High
MediaWiki Incorrect Authorization Vulnerability (CVE-2021-41801)
CVE-2021-41801
CWE-863
High
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-41799)
CVE-2021-41799
CWE-770
High
Apache HTTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-41773)
CVE-2021-41773
CWE-22
High
Oracle HTTP Server Other Vulnerability (CVE-2021-41617)
CVE-2021-41617
-
High
Squid Improper Certificate Validation Vulnerability (CVE-2021-41611)
CVE-2021-41611
CWE-295
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-41585)
CVE-2021-41585
CWE-20
High
MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-43281)
CVE-2021-43281
CWE-94
High
ATutor Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-43498)
CVE-2021-43498
CWE-640
High
SharePoint CVE-2021-41344 Vulnerability (CVE-2021-41344)
CVE-2021-41344
-
High
Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-43944)
CVE-2021-43944
CWE-94
High
Django Improper Authentication Vulnerability (CVE-2021-44420)
CVE-2021-44420
CWE-287
High
Mailman Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-44227)
CVE-2021-44227
CWE-352
High
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-44224)
CVE-2021-44224
CWE-476
High
Resin Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-44138)
CVE-2021-44138
CWE-22
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-44040)
CVE-2021-44040
CWE-20
High
Atlassian Jira CVE-2021-43947 Vulnerability (CVE-2021-43947)
CVE-2021-43947
-
High
Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2021-43940)
CVE-2021-43940
CWE-427
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43559)
CVE-2021-43559
CWE-352
High
Envoy Proxy Use After Free Vulnerability (CVE-2021-43826)
CVE-2021-43826
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2021-43825)
CVE-2021-43825
CWE-416
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-43824)
CVE-2021-43824
CWE-476
High
Oracle HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43818)
CVE-2021-43818
CWE-707
High
Next.js CVE-2021-43803 Vulnerability (CVE-2021-43803)
CVE-2021-43803
-
High
Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-43798)
CVE-2021-43798
CWE-22
High
PostgreSQL Improper Certificate Validation Vulnerability (CVE-2021-43766)
CVE-2021-43766
CWE-295
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-41524)
CVE-2021-41524
CWE-476
High
Atlassian Jira Improper Authentication Vulnerability (CVE-2021-41312)
CVE-2021-41312
CWE-287
High
Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39128)
CVE-2021-39128
CWE-138
High
WebLogic Improper Certificate Validation Vulnerability (CVE-2021-3450)
CVE-2021-3450
CWE-295
High
OpenSSL Out-of-bounds Read Vulnerability (CVE-2021-3712)
CVE-2021-3712
CWE-125
High
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
CVE-2021-3690
CWE-400
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
CVE-2021-3690
CWE-400
High
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)
CVE-2021-3629
CWE-400
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)
CVE-2021-3629
CWE-400
High
Nginx Improper Certificate Validation Vulnerability (CVE-2021-3618)
CVE-2021-3618
CWE-295
High
OpenSSL Improper Certificate Validation Vulnerability (CVE-2021-3450)
CVE-2021-3450
CWE-295
High
YOURLS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2021-3734)
CVE-2021-3734
CWE-1021
High
ZenCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2021-3291)
CVE-2021-3291
CWE-138
High
PHP-Fusion Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-3172)
CVE-2021-3172
CWE-732
High
Grafana Improper Authentication Vulnerability (CVE-2021-39226)
CVE-2021-39226
CWE-287
High
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-39206)
CVE-2021-39206
CWE-863
High
Envoy Proxy Excessive Iteration Vulnerability (CVE-2021-39204)
CVE-2021-39204
CWE-834
High
Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-39162)
CVE-2021-39162
CWE-754
High
Jboss EAP Files or Directories Accessible to External Parties Vulnerability (CVE-2021-3717)
CVE-2021-3717
CWE-552
High
Python Uncontrolled Resource Consumption Vulnerability (CVE-2021-3737)
CVE-2021-3737
CWE-400
High
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41307)
CVE-2021-41307
CWE-639
High
Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-40662)
CVE-2021-40662
CWE-352
High
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41306)
CVE-2021-41306
CWE-639
High
ColdFusion directory traversal
CVE-2010-2861
CWE-22
High
TYPO3 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-41113)
CVE-2021-41113
CWE-352
High
Apache Tomcat Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-41079)
CVE-2021-41079
CWE-835
High
ProjectSend Incorrect Authorization Vulnerability (CVE-2021-40884)
CVE-2021-40884
CWE-863
High
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-40690)
CVE-2021-40690
CWE-200
High
Piwigo Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-40553)
CVE-2021-40553
CWE-138
High
axios Uncontrolled Resource Consumption Vulnerability (CVE-2021-3749)
CVE-2021-3749
CWE-400
High
SharePoint CVE-2021-40487 Vulnerability (CVE-2021-40487)
CVE-2021-40487
-
High
SharePoint CVE-2021-40482 Vulnerability (CVE-2021-40482)
CVE-2021-40482
-
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-40317)
CVE-2021-40317
CWE-138
High