Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
WebLogic Improper Access Control Vulnerability (CVE-2026-60529)
CVE-2026-60529
CWE-284
High
Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-58281)
CVE-2024-58281
CWE-434
High
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-58282)
CVE-2024-58282
CWE-434
High
Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-58341)
CVE-2024-58341
CWE-138
High
Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability (CVE-2024-53271)
CVE-2024-53271
CWE-670
High
Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability (CVE-2024-53269)
CVE-2024-53269
CWE-670
High
PHP Improper Encoding or Escaping of Output Vulnerability (CVE-2024-5585)
CVE-2024-5585
CWE-116
High
Next.js Improper Authorization Vulnerability (CVE-2026-64642)
CVE-2026-64642
CWE-285
High
Chamilo Deserialization of Untrusted Data Vulnerability (CVE-2024-47886)
CVE-2024-47886
CWE-502
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-48311)
CVE-2024-48311
CWE-352
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-65324)
CVE-2026-65324
CWE-400
High
SharePoint Missing Authentication for Critical Function Vulnerability (CVE-2026-64921)
CVE-2026-64921
CWE-306
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-64901)
CVE-2026-64901
CWE-502
High
Piwigo Use of Insufficiently Random Values Vulnerability (CVE-2024-48928)
CVE-2024-48928
CWE-330
High
SharePoint CVE-2024-49068 Vulnerability (CVE-2024-49068)
CVE-2024-49068
-
High
SharePoint CVE-2024-49070 Vulnerability (CVE-2024-49070)
CVE-2024-49070
-
High
Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-49767)
CVE-2024-49767
CWE-770
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2024-50305)
CVE-2024-50305
CWE-20
High
Next.js Excessive Iteration Vulnerability (CVE-2026-64641)
CVE-2026-64641
CWE-834
High
Tornado Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-52804)
CVE-2024-52804
CWE-770
High
SharePoint Improper Input Validation Vulnerability (CVE-2026-63520)
CVE-2026-63520
CWE-20
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-63514)
CVE-2026-63514
CWE-502
High
Next.js Incorrect Authorization Vulnerability (CVE-2024-51479)
CVE-2024-51479
CWE-863
High
Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51484)
CVE-2024-51484
CWE-352
High
Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51485)
CVE-2024-51485
CWE-352
High
Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-51486)
CVE-2024-51486
CWE-707
High
Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51487)
CVE-2024-51487
CWE-352
High
Craft CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-52291)
CVE-2024-52291
CWE-22
High
Craft CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-52293)
CVE-2024-52293
CWE-22
High
SharePoint Improper Authentication Vulnerability (CVE-2026-62827)
CVE-2026-62827
CWE-287
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60528)
CVE-2026-60528
CWE-284
High
ZenCart Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2024-5762)
CVE-2024-5762
CWE-829
High
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58181)
CVE-2026-58181
CWE-121
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58187)
CVE-2026-58187
CWE-787
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60196)
CVE-2026-60196
CWE-284
High
Oracle Database Server Improper Privilege Management Vulnerability (CVE-2026-60175)
CVE-2026-60175
CWE-269
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60153)
CVE-2026-60153
CWE-306
High
MOVEit Transfer Unverified Password Change Vulnerability (CVE-2025-11235)
CVE-2025-11235
CWE-620
High
e107 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-11941)
CVE-2025-11941
CWE-22
High
Jetty Sensitive Information in Resource Not Removed Before Reuse Vulnerability (CVE-2026-5795)
CVE-2026-5795
CWE-226
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-59173)
CVE-2026-59173
CWE-400
High
SharePoint Improper Authorization Vulnerability (CVE-2026-58277)
CVE-2026-58277
CWE-285
High
Apache Traffic Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-58189)
CVE-2026-58189
CWE-918
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58188)
CVE-2026-58188
CWE-787
High
MongoDb Reachable Assertion Vulnerability (CVE-2025-13644)
CVE-2025-13644
CWE-617
High
MongoDb Heap-based Buffer Overflow Vulnerability (CVE-2025-0755)
CVE-2025-0755
CWE-122
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2026-58186)
CVE-2026-58186
CWE-20
High
PHP Out-of-bounds Read Vulnerability (CVE-2025-14177)
CVE-2025-14177
CWE-125
High
PHP Integer Overflow or Wraparound Vulnerability (CVE-2025-14178)
CVE-2025-14178
CWE-190
High
PHP NULL Pointer Dereference Vulnerability (CVE-2025-14180)
CVE-2025-14180
CWE-476
High
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2025-14550)
CVE-2025-14550
CWE-407
High
MongoDb Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2025-14847)
CVE-2025-14847
CWE-130
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58184)
CVE-2026-58184
CWE-787
High
OpenSSL Out-of-bounds Write Vulnerability (CVE-2025-15467)
CVE-2025-15467
CWE-787
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2026-58183)
CVE-2026-58183
CWE-20
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-58182)
CVE-2026-58182
CWE-400
High
MongoDb Operation on a Resource after Expiration or Release Vulnerability (CVE-2025-10060)
CVE-2025-10060
CWE-672
High
WordPress Ultimate Member Plugin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-0308)
CVE-2025-0308
CWE-138
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60527)
CVE-2026-60527
CWE-284
High
ProjectSend Use of Insufficiently Random Values Vulnerability (CVE-2024-7659)
CVE-2024-7659
CWE-330
High
OpenSSL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2024-6119)
CVE-2024-6119
CWE-843
High
Python Inefficient Regular Expression Complexity Vulnerability (CVE-2024-6232)
CVE-2024-6232
CWE-1333
High
Oracle HTTP Server Improper Privilege Management Vulnerability (CVE-2026-60454)
CVE-2026-60454
CWE-269
High
Oracle HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-60431)
CVE-2026-60431
CWE-200
High
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-60415)
CVE-2026-60415
CWE-200
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60343)
CVE-2026-60343
CWE-284
High
PostgreSQL Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2024-7348)
CVE-2024-7348
CWE-367
High
MongoDb CVE-2024-7553 Vulnerability (CVE-2024-7553)
CVE-2024-7553
-
High
Python Inefficient Regular Expression Complexity Vulnerability (CVE-2024-7592)
CVE-2024-7592
CWE-1333
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60313)
CVE-2026-60313
CWE-306
High
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2024-7708)
CVE-2024-7708
CWE-400
High
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2024-9823)
CVE-2024-9823
CWE-400
High
Jboss EAP CVE-2024-7885 Vulnerability (CVE-2024-7885)
CVE-2024-7885
-
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60312)
CVE-2026-60312
CWE-306
High
Payara Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-8215)
CVE-2024-8215
CWE-707
High