Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23975 vulnerabilities in this category.

Critical: 1584 High: 12800 Medium: 8788 Low: 799 Information: 4
Vulnerability Name
CVE
CWE
Severity
Envoy Proxy Improper Null Termination Vulnerability (CVE-2025-66220)
CVE-2025-66220
CWE-170
High
XWikiplatform Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-66473)
CVE-2025-66473
CWE-770
High
Dolibarr Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2025-67486)
CVE-2025-67486
CWE-138
High
Jenkins Improper Resource Shutdown or Release Vulnerability (CVE-2025-67635)
CVE-2025-67635
CWE-404
High
Tornado Uncontrolled Resource Consumption Vulnerability (CVE-2025-67725)
CVE-2025-67725
CWE-400
High
Tornado Uncontrolled Resource Consumption Vulnerability (CVE-2025-67726)
CVE-2025-67726
CWE-400
High
React Deserialization of Untrusted Data Vulnerability (CVE-2025-67779)
CVE-2025-67779
CWE-502
High
Next.js Deserialization of Untrusted Data Vulnerability (CVE-2025-67779)
CVE-2025-67779
CWE-502
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-67847)
CVE-2025-67847
CWE-94
High
Moodle Improper Handling of Insufficient Permissions or Privileges Vulnerability (CVE-2025-67848)
CVE-2025-67848
CWE-280
High
Moodle Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2025-67851)
CVE-2025-67851
CWE-1236
High
Moodle Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-67853)
CVE-2025-67853
CWE-307
High
Craft CMS Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (CVE-2025-68454)
CVE-2025-68454
CWE-138
High
Craft CMS Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2025-68455)
CVE-2025-68455
CWE-470
High
Roundcube Improper Encoding or Escaping of Output Vulnerability (CVE-2025-68460)
CVE-2025-68460
CWE-116
High
phpMyFAQ Exposure of Sensitive Information Through Data Queries Vulnerability (CVE-2025-69200)
CVE-2025-69200
CWE-202
High
OpenSSL Out-of-bounds Write Vulnerability (CVE-2025-69419)
CVE-2025-69419
CWE-787
High
OpenSSL Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2025-69420)
CVE-2025-69420
CWE-754
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2025-69421)
CVE-2025-69421
CWE-476
High
MongoDb Use After Free Vulnerability (CVE-2025-6706)
CVE-2025-6706
CWE-416
High
MongoDb CVE-2025-6709 Vulnerability (CVE-2025-6709)
CVE-2025-6709
-
High
MongoDb Uncontrolled Recursion Vulnerability (CVE-2025-6710)
CVE-2025-6710
CWE-674
High
MongoDb Excessive Iteration Vulnerability (CVE-2025-6714)
CVE-2025-6714
CWE-834
High
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-70810)
CVE-2025-70810
CWE-352
High
Sqlite Improper Clearing of Heap Memory Before Release ('Heap Inspection') Vulnerability (CVE-2025-70873)
CVE-2025-70873
CWE-244
High
Jboss EAP Improper Resource Shutdown or Release Vulnerability (CVE-2025-9784)
CVE-2025-9784
CWE-404
High
TYPO3 Deserialization of Untrusted Data Vulnerability (CVE-2026-0859)
CVE-2026-0859
CWE-502
High
axios : Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-101898)
CVE-2026-101898
CWE-918
High
axios : Uncontrolled Resource Consumption Vulnerability (CVE-2026-101901)
CVE-2026-101901
CWE-400
High
axios : Inefficient Regular Expression Complexity Vulnerability (CVE-2026-101903)
CVE-2026-101903
CWE-1333
High
axios : Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-101905)
CVE-2026-101905
CWE-441
High
axios : Uncontrolled Resource Consumption Vulnerability (CVE-2026-101906)
CVE-2026-101906
CWE-400
High
axios : Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-101907)
CVE-2026-101907
CWE-441
High
axios : Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') V (CVE-2026-101909)
CVE-2026-101909
CWE-1321
High
LimeSurvey Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scriptin (CVE-2026-102626)
CVE-2026-102626
CWE-707
High
TornadoWebServer Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability (CVE-2026-103262)
CVE-2026-103262
CWE-409
High
EspoCRM Insufficiently Protected Credentials Vulnerability (CVE-2026-105833)
CVE-2026-105833
CWE-522
High
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-10051)
CVE-2026-10051
CWE-200
High
MOVEit Transfer Improper Neutralization of Special Elements in Data Query Logic Vulnerability (CVE-2026-10698)
CVE-2026-10698
CWE-138
High
MOVEit Transfer Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2026-10699)
CVE-2026-10699
CWE-401
High
Sqlite Heap-based Buffer Overflow Vulnerability (CVE-2026-11822)
CVE-2026-11822
CWE-122
High
Sqlite Heap-based Buffer Overflow Vulnerability (CVE-2026-11824)
CVE-2026-11824
CWE-122
High
MongoDb Use After Free Vulnerability (CVE-2026-11933)
CVE-2026-11933
CWE-416
High
MongoDb Reliance on Untrusted Inputs in a Security Decision Vulnerability (CVE-2026-13059)
CVE-2026-13059
CWE-807
High
MongoDb Heap-based Buffer Overflow Vulnerability (CVE-2026-13072)
CVE-2026-13072
CWE-122
High
MongoDb Out-of-bounds Read Vulnerability (CVE-2026-13077)
CVE-2026-13077
CWE-125
High
MongoDb Missing Authorization Vulnerability (CVE-2026-13078)
CVE-2026-13078
CWE-862
High
MediaWiki Improper Input Validation Vulnerability (CVE-2026-13706)
CVE-2026-13706
CWE-20
High
MediaWiki Session Fixation Vulnerability (CVE-2026-13707)
CVE-2026-13707
CWE-384
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-14662)
CVE-2026-14662
CWE-190
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-14664)
CVE-2026-14664
CWE-122
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-14668)
CVE-2026-14668
CWE-843
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-14669)
CVE-2026-14669
CWE-122
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-14670)
CVE-2026-14670
CWE-122
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-14671)
CVE-2026-14671
CWE-843
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-14676)
CVE-2026-14676
CWE-122
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-14677)
CVE-2026-14677
CWE-190
High
PostgreSQL Stack-based Buffer Overflow Vulnerability (CVE-2026-14679)
CVE-2026-14679
CWE-121
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-14680)
CVE-2026-14680
CWE-843
High
Django External Control of File Name or Path Vulnerability (CVE-2026-15307)
CVE-2026-15307
CWE-73
High
Python CVE-2026-15308 Vulnerability (CVE-2026-15308)
CVE-2026-15308
-
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-15741)
CVE-2026-15741
CWE-138
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-15742)
CVE-2026-15742
CWE-190
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-16238)
CVE-2026-16238
CWE-843
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-16239)
CVE-2026-16239
CWE-843
High
PostgreSQL Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2026-18408)
CVE-2026-18408
CWE-829
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-19385)
CVE-2026-19385
CWE-122
High
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2026-1285)
CVE-2026-1285
CWE-407
High
Jetty Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2026-1605)
CVE-2026-1605
CWE-401
High
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1847)
CVE-2026-1847
CWE-770
High
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1848)
CVE-2026-1848
CWE-770
High
MongoDb Uncontrolled Recursion Vulnerability (CVE-2026-1849)
CVE-2026-1849
CWE-674
High
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1850)
CVE-2026-1850
CWE-770
High
SharePoint Untrusted Search Path Vulnerability (CVE-2026-20943)
CVE-2026-20943
CWE-426
High
SharePoint Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-20947)
CVE-2026-20947
CWE-138
High