Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress 4.2.2 Multiple Vulnerabilities (0.7 - 4.2.2)
CVE-2015-5623
CWE-264
High
WordPress Denial of Service Vulnerability (3.5 - 3.6.1)
CVE-2014-5265
CWE-399
High
WordPress 4.0 Multiple Vulnerabilities (4.0)
CVE-2014-9039
CWE-918
High
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.14)
CVE-2016-5839
CWE-400
High
Envoy Proxy Use After Free Vulnerability (CVE-2024-23322)
CVE-2024-23322
CWE-416
High
WordPress 3.9.2 Multiple Vulnerabilities (3.9 - 3.9.2)
CVE-2014-9039
CWE-918
High
Envoy Proxy CVE-2024-23324 Vulnerability (CVE-2024-23324)
CVE-2024-23324
-
High
Envoy Proxy Improper Handling of Exceptional Conditions Vulnerability (CVE-2024-23325)
CVE-2024-23325
CWE-755
High
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-23326)
CVE-2024-23326
-
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-23327)
CVE-2024-23327
CWE-476
High
WordPress 3.9.1 Multiple Vulnerabilities (3.9 - 3.9.1)
CVE-2014-5266
CWE-611
High
WordPress 3.8.4 Multiple Vulnerabilities (3.8 - 3.8.4)
CVE-2014-9039
CWE-918
High
WordPress 3.8.3 Multiple Vulnerabilities (3.8 - 3.8.3)
CVE-2014-5266
CWE-611
High
WordPress 3.8.1 Multiple Vulnerabilities (3.8 - 3.8.1)
CVE-2014-0166
CWE-287
High
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.15)
CVE-2016-7169
CWE-79
High
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.12)
CVE-2016-2222
CWE-918
High
Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21677)
CVE-2024-21677
CWE-22
High
WordPress 3.9.x Same Origin Method Execution (SOME) Vulnerability (3.9 - 3.9.11)
CVE-2016-4566
CWE-79
High
Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21678)
CVE-2024-21678
CWE-707
High
Atlassian Confluence CVE-2024-21683 Vulnerability (CVE-2024-21683)
CVE-2024-21683
-
High
Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21686)
CVE-2024-21686
CWE-707
High
Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21690)
CVE-2024-21690
CWE-707
High
WordPress 4.0.x Same Origin Method Execution (SOME) Vulnerability (4.0 - 4.0.10)
CVE-2016-4566
CWE-79
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.11)
CVE-2016-5839
CWE-400
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.9)
CVE-2016-2222
CWE-918
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.12)
CVE-2016-7169
CWE-79
High
WordPress 4.0.x Cross-Site Scripting Vulnerability (4.0 - 4.0.8)
CVE-2016-1564
CWE-79
High
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.12)
CVE-2016-5839
CWE-400
High
Drupal Other Vulnerability (CVE-2024-22362)
CVE-2024-22362
-
High
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.10)
CVE-2016-2222
CWE-918
High
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.13)
CVE-2016-7169
CWE-79
High
WordPress 3.9.x Cross-Site Scripting Vulnerability (3.9 - 3.9.9)
CVE-2016-1564
CWE-79
High
WordPress 3.8.x Same Origin Method Execution (SOME) Vulnerability (3.8 - 3.8.13)
CVE-2016-4566
CWE-79
High
WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.14)
CVE-2016-5839
CWE-400
High
WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.12)
CVE-2016-2222
CWE-918
High
TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-22188)
CVE-2024-22188
CWE-94
High
Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-22201)
CVE-2024-22201
CWE-770
High
WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.15)
CVE-2016-7169
CWE-79
High
WordPress 3.8.x Cross-Site Scripting Vulnerability (3.8 - 3.8.11)
CVE-2016-1564
CWE-79
High
WordPress 2.0.1 Denial of Service Vulnerability (0.6.2 - 2.0.1)
-
CWE-400
High
Drupal Core 8.9.0 Security Bypass (8.9.0)
CVE-2020-13665
CWE-264
High
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.16)
CVE-2017-5493
CWE-352
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2024-39573)
CVE-2024-39573
CWE-20
High
Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.4.8)
CVE-2019-6340
CWE-94
High
Drupal Core 8.x.x Multiple Vulnerabilities (8.0.0 - 8.4.8)
CVE-2019-10911
CWE-264
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2024-38477)
CVE-2024-38477
CWE-476
High
Apache Traffic Server CVE-2024-38479 Vulnerability (CVE-2024-38479)
CVE-2024-38479
-
High
GeoServer Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-38524)
CVE-2024-38524
CWE-200
High
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2024-38875)
CVE-2024-38875
CWE-130
High
LimeSurvey Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-39063)
CVE-2024-39063
CWE-352
High
Drupal Core 8.x.x Directory Traversal (8.0.0 - 8.5.15)
CVE-2019-11831
CWE-22
High
axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-39338)
CVE-2024-39338
CWE-918
High
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2024-39614)
CVE-2024-39614
CWE-130
High
Apache HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2024-38473)
CVE-2024-38473
CWE-116
High
Next.js Uncontrolled Resource Consumption Vulnerability (CVE-2024-39693)
CVE-2024-39693
CWE-400
High
Drupal Core 8.x.x Cross-Site Scripting (8.0.0 - 8.4.8)
CVE-2019-11358
CWE-79
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6638)
CVE-2026-6638
CWE-138
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6637)
CVE-2026-6637
CWE-138
High
MongoDb Improper Input Validation Vulnerability (CVE-2024-3372)
CVE-2024-3372
CWE-20
High
TYPO3 Cleartext Storage of Sensitive Information Vulnerability (CVE-2026-6553)
CVE-2026-6553
CWE-312
High
PostgreSQL Uncontrolled Recursion Vulnerability (CVE-2026-6479)
CVE-2026-6479
CWE-674
High
Drupal Core 8.7.4 Security Bypass (8.7.4)
CVE-2019-6342
CWE-264
High
Beego Framework Improper Certificate Validation Vulnerability (CVE-2024-40464)
CVE-2024-40464
CWE-295
High
Beego Framework Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2024-40465)
CVE-2024-40465
CWE-327
High
Drupal Core 7.x Cross-Site Request Forgery (7.0 - 7.71)
CVE-2020-13663
CWE-352
High
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-38472)
CVE-2024-38472
CWE-918
High
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-40597)
CVE-2024-40597
CWE-200
High
Liferay DXP Incorrect Authorization Vulnerability (CVE-2024-38002)
CVE-2024-38002
CWE-863
High
Drupal Core 7.x Open Redirect (7.0 - 7.69)
CVE-2020-13662
CWE-601
High
Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-37821)
CVE-2024-37821
CWE-94
High
Drupal Core 7.x Cross-Site Scripting (7.0 - 7.72)
CVE-2020-13666
CWE-79
High
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-70355)
CVE-2026-70355
CWE-707
High
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-70326)
CVE-2026-70326
CWE-918
High
XWikiplatform Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-37899)
CVE-2024-37899
CWE-94
High
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-70324)
CVE-2026-70324
CWE-918
High