Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
XWikiplatform Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-37901)
CVE-2024-37901
CWE-94
High
Liferay Portal Incorrect Authorization Vulnerability (CVE-2024-38002)
CVE-2024-38002
CWE-863
High
SharePoint CVE-2024-38018 Vulnerability (CVE-2024-38018)
CVE-2024-38018
-
High
MongoDb Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2026-6914)
CVE-2026-6914
CWE-191
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2024-38023)
CVE-2024-38023
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2024-38024)
CVE-2024-38024
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2024-38094)
CVE-2024-38094
CWE-502
High
SharePoint CVE-2024-38227 Vulnerability (CVE-2024-38227)
CVE-2024-38227
-
High
SharePoint CVE-2024-38228 Vulnerability (CVE-2024-38228)
CVE-2024-38228
-
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-70321)
CVE-2026-70321
CWE-502
High
Drupal Core 7.x Cross-Site Scripting (7.0 - 7.69)
CVE-2020-11023
CWE-79
High
Moodle Incomplete Cleanup Vulnerability (CVE-2024-38275)
CVE-2024-38275
CWE-459
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-38276)
CVE-2024-38276
CWE-352
High
Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-38286)
CVE-2024-38286
CWE-770
High
PostgreSQL Use of Inherently Dangerous Function Vulnerability (CVE-2026-6477)
CVE-2026-6477
CWE-242
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6476)
CVE-2026-6476
CWE-138
High
PHP Out-of-bounds Read Vulnerability (CVE-2026-7258)
CVE-2026-7258
CWE-125
High
SharePoint CVE-2024-43466 Vulnerability (CVE-2024-43466)
CVE-2024-43466
-
High
Moodle Improper Validation of Specified Type of Input Vulnerability (CVE-2024-43426)
CVE-2024-43426
CWE-1287
High
Moodle Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-43428)
CVE-2024-43428
CWE-345
High
Moodle Missing Authorization Vulnerability (CVE-2024-43431)
CVE-2024-43431
CWE-862
High
Artifactory Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-65921)
CVE-2026-65921
CWE-22
High
Moodle Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-43434)
CVE-2024-43434
CWE-22
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-43436)
CVE-2024-43436
CWE-138
High
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-43438)
CVE-2024-43438
CWE-639
High
Moodle Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-43440)
CVE-2024-43440
CWE-22
High
SharePoint CVE-2024-43464 Vulnerability (CVE-2024-43464)
CVE-2024-43464
-
High
SharePoint CVE-2024-43503 Vulnerability (CVE-2024-43503)
CVE-2024-43503
-
High
XWiki Missing Authorization Vulnerability (CVE-2024-43401)
CVE-2024-43401
CWE-862
High
Django CVE-2024-45230 Vulnerability (CVE-2024-45230)
CVE-2024-45230
-
High
Contao Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-45398)
CVE-2024-45398
CWE-434
High
Moodle Incorrect Default Permissions Vulnerability (CVE-2024-45690)
CVE-2024-45690
CWE-276
High
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65898)
CVE-2026-65898
CWE-707
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65665)
CVE-2026-65665
CWE-502
High
Squid CVE-2024-45802 Vulnerability (CVE-2024-45802)
CVE-2024-45802
-
High
Drupal Core 8.6.x Cross-Site Scripting (8.6.0 - 8.6.12)
CVE-2019-6341
CWE-79
High
Envoy Proxy CVE-2024-45807 Vulnerability (CVE-2024-45807)
CVE-2024-45807
-
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65663)
CVE-2026-65663
CWE-502
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-45809)
CVE-2024-45809
CWE-476
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-43425)
CVE-2024-43425
CWE-94
High
Drupal Core 8.6.x Directory Traversal (8.6.0 - 8.6.15)
CVE-2019-11831
CWE-22
High
PostgreSQL UNIX Symbolic Link (Symlink) Following Vulnerability (CVE-2026-6475)
CVE-2026-6475
CWE-61
High
Django CVE-2024-41990 Vulnerability (CVE-2024-41990)
CVE-2024-41990
-
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-6473)
CVE-2026-6473
CWE-190
High
Drupal Core 8.7.0 Directory Traversal (8.7.0)
CVE-2019-11831
CWE-22
High
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40748)
CVE-2024-40748
CWE-707
High
Joomla Other Vulnerability (CVE-2024-40749)
CVE-2024-40749
-
High
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-40898)
CVE-2024-40898
CWE-918
High
PrestaShop Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-41651)
CVE-2024-41651
CWE-918
High
Craft CMS Improper Authentication Vulnerability (CVE-2024-41800)
CVE-2024-41800
CWE-287
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-66808)
CVE-2026-66808
CWE-502
High
Django CVE-2024-41989 Vulnerability (CVE-2024-41989)
CVE-2024-41989
-
High
Django Improper Validation of Specified Quantity in Input Vulnerability (CVE-2024-41991)
CVE-2024-41991
CWE-1284
High
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-43394)
CVE-2024-43394
CWE-918
High
Drupal Core 8.6.x Remote Code Execution (8.6.0 - 8.6.9)
CVE-2019-6340
CWE-94
High
Drupal Core 8.6.x Multiple Vulnerabilities (8.6.0 - 8.6.14)
CVE-2019-10911
CWE-264
High
Drupal Core 8.6.x Multiple Vulnerabilities (8.6.0 - 8.6.5)
CVE-2019-6339
CWE-915
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2024-42516)
CVE-2024-42516
CWE-20
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-66805)
CVE-2026-66805
CWE-502
High
LimeSurvey Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-42902)
CVE-2024-42902
CWE-94
High
Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2026-66299)
CVE-2026-66299
CWE-400
High
Jenkins Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2024-43044)
CVE-2024-43044
CWE-754
High
Artifactory Improper Privilege Management Vulnerability (CVE-2026-66015)
CVE-2026-66015
CWE-269
High
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-43204)
CVE-2024-43204
CWE-918
High
Drupal Core 7.x Security Bypass (7.0 - 7.68)
-
CWE-264
High
Opencart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-36694)
CVE-2024-36694
CWE-94
High
WordPress 'post.php' Cross-Site Scripting Vulnerability (1.5)
-
CWE-79
High
WordPress Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-31210)
CVE-2024-31210
CWE-434
High
SharePoint CVE-2024-30043 Vulnerability (CVE-2024-30043)
CVE-2024-30043
-
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2024-30044)
CVE-2024-30044
CWE-502
High
SharePoint CVE-2024-30100 Vulnerability (CVE-2024-30100)
CVE-2024-30100
-
High
Envoy Proxy Detection of Error Condition Without Action Vulnerability (CVE-2024-30255)
CVE-2024-30255
CWE-390
High
Contao Insufficient Session Expiration Vulnerability (CVE-2024-30262)
CVE-2024-30262
CWE-613
High
Chamilo Incorrect Authorization Vulnerability (CVE-2024-30616)
CVE-2024-30616
CWE-863
High
MediaWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-8857)
CVE-2026-8857
CWE-94
High