Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2024-32976)
CVE-2024-32976
CWE-835
High
SharePoint CVE-2024-32987 Vulnerability (CVE-2024-32987)
CVE-2024-32987
-
High
IBMHttpServer NULL Pointer Dereference Vulnerability (CVE-2026-8850)
CVE-2026-8850
CWE-476
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34007)
CVE-2024-34007
CWE-352
High
IBMHttpServer Untrusted Pointer Dereference Vulnerability (CVE-2026-8835)
CVE-2026-8835
CWE-822
High
IBMHttpServer Heap-based Buffer Overflow Vulnerability (CVE-2026-8834)
CVE-2026-8834
CWE-122
High
Drupal Core 8.8.x Cross-Site Scripting (8.8.0 - 8.8.5)
CVE-2020-11023
CWE-79
High
Drupal Core 8.8.x Cross-Site Scripting (8.8.0 - 8.8.3)
CVE-2020-9281
CWE-79
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34001)
CVE-2024-34001
CWE-352
High
MOVEit Transfer Incorrect Authorization Vulnerability (CVE-2026-8800)
CVE-2026-8800
CWE-863
High
MOVEit Transfer Authentication Bypass by Spoofing Vulnerability (CVE-2026-8651)
CVE-2026-8651
CWE-290
High
MOVEit Transfer Relative Path Traversal Vulnerability (CVE-2026-8650)
CVE-2026-8650
CWE-23
High
Drupal Core 8.8.x Cross-Site Request Forgery (8.8.0 - 8.8.7)
CVE-2020-13663
CWE-352
High
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-8609)
CVE-2026-8609
CWE-400
High
WordPress Same Origin Method Execution (SOME) Vulnerability (0.70 - 3.7.13)
CVE-2016-4566
CWE-79
High
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.17)
CVE-2017-5612
CWE-264
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65658)
CVE-2026-65658
CWE-502
High
Perl Out-of-bounds Write Vulnerability (CVE-2023-47038)
CVE-2023-47038
CWE-787
High
SugarCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-46815)
CVE-2023-46815
CWE-434
High
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46816)
CVE-2023-46816
CWE-94
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.23)
CVE-2019-16223
CWE-601
High
Squid Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2023-46847)
CVE-2023-46847
CWE-120
High
Squid Incorrect Conversion between Numeric Types Vulnerability (CVE-2023-46848)
CVE-2023-46848
CWE-681
High
OpenVPN AS Divide By Zero Vulnerability (CVE-2023-46849)
CVE-2023-46849
CWE-369
High
Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.15)
CVE-2021-33829
CWE-79
High
WordPress 4.2.x Cross-Site Request Forgery (4.2 - 4.2.22)
CVE-2019-9787
CWE-352
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.27)
CVE-2019-17675
CWE-918
High
Perl Out-of-bounds Write Vulnerability (CVE-2023-47039)
CVE-2023-47039
CWE-787
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.25)
CVE-2019-20043
CWE-269
High
Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.13)
CVE-2020-13672
CWE-79
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.28)
CVE-2019-20043
CWE-269
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.26)
CVE-2019-16223
CWE-601
High
WordPress 4.1.x Cross-Site Request Forgery (4.1 - 4.1.25)
CVE-2019-9787
CWE-352
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.26)
CVE-2019-16223
CWE-601
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.28)
CVE-2019-20043
CWE-269
High
Drupal Core 8.9.x Arbitrary File Overwrite (8.9.0 - 8.9.12)
CVE-2020-36193
CWE-73
High
Opencart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-47444)
CVE-2023-47444
CWE-94
High
CubeCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-47675)
CVE-2023-47675
CWE-138
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.27)
CVE-2019-17675
CWE-918
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.24)
CVE-2019-17675
CWE-918
High
Drupal Core 8.9.x Remote Code Execution (8.9.0 - 8.9.9)
CVE-2020-28949
CWE-434
High
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.27)
CVE-2019-16223
CWE-601
High
GibbonEdu Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-45880)
CVE-2023-45880
CWE-22
High
WordPress 4.5.x Cross-Site Request Forgery (4.5 - 4.5.16)
CVE-2019-9787
CWE-352
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.19)
CVE-2019-17675
CWE-918
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.18)
CVE-2019-16223
CWE-601
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.20)
CVE-2019-20043
CWE-269
High
qdPM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-45855)
CVE-2023-45855
CWE-22
High
Drupal Core 8.x.x Arbitrary File Overwrite (8.0.0 - 8.7.14)
CVE-2020-36193
CWE-73
High
WordPress 4.4.x Cross-Site Request Forgery (4.4 - 4.4.17)
CVE-2019-9787
CWE-352
High
Drupal Core 8.9.x Remote Code Execution (8.9.0 - 8.9.8)
CVE-2020-13671
CWE-434
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.21)
CVE-2019-20043
CWE-269
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.19)
CVE-2019-16223
CWE-601
High
Squid NULL Pointer Dereference Vulnerability (CVE-2023-46728)
CVE-2023-46728
CWE-476
High
Werkzeug WSGI Out-of-bounds Write Vulnerability (CVE-2023-46136)
CVE-2023-46136
CWE-787
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.20)
CVE-2019-17675
CWE-918
High
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-46242)
CVE-2023-46242
CWE-352
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46243)
CVE-2023-46243
CWE-94
High
XWiki Incorrect Authorization Vulnerability (CVE-2023-46244)
CVE-2023-46244
CWE-863
High
WordPress 4.3.x Cross-Site Request Forgery (4.3 - 4.3.18)
CVE-2019-9787
CWE-352
High
Next.js CVE-2023-46298 Vulnerability (CVE-2023-46298)
CVE-2023-46298
-
High
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-46589)
CVE-2023-46589
-
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-46695)
CVE-2023-46695
CWE-770
High
Squid Improper Certificate Validation Vulnerability (CVE-2023-46724)
CVE-2023-46724
CWE-295
High
WordPress 4.0.x Cross-Site Request Forgery (4.0 - 4.0.25)
CVE-2019-9787
CWE-352
High
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.28)
CVE-2019-17675
CWE-918
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.18)
CVE-2019-17675
CWE-918
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50721)
CVE-2023-50721
CWE-94
High
OpenSSL CVE-2023-4807 Vulnerability (CVE-2023-4807)
CVE-2023-4807
-
High
Grafana CVE-2023-4822 Vulnerability (CVE-2023-4822)
CVE-2023-4822
-
High
WordPress 3.7.x Cross-Site Request Forgery (3.7 - 3.7.28)
CVE-2019-9787
CWE-352
High
WordPress Denial of Service Vulnerability (0.70 - 3.6.1)
CVE-2018-6389
CWE-400
High
Pega Infinity Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-50168)
CVE-2023-50168
CWE-611
High
Squid Uncontrolled Recursion Vulnerability (CVE-2023-50269)
CVE-2023-50269
CWE-674
High
WordPress Cross-Domain Flash Injection Vulnerability (0.70 - 3.6.1)
CVE-2018-5776
CWE-269
High