CVE-2014-2994

CVE-2014-2994 describes a stack-based buffer overflow in the Acunetix Web Vulnerability Scanner (WVS) 8, build 20120704. The vulnerability is triggered by processing an HTML file containing an IMG element with a very long URL in the src attribute, allowing remote attackers to execute arbitrary co...

CVE-2015-4027

CVE-2015-4027 affects Acunetix Web Vulnerability Scanner (WVS) 10, specifically the AcuWVSSchedulerv10 service. The bug enables a local user to escalate privileges by manipulating a command parameter in the reporttemplate property within a params JSON object passed to api/addScan. This is a local...

CVE-2007-0120

CVE-2007-0120 affects Acunetix Web Vulnerability Scanner (WVS) version 4.0 Build 20060717 and earlier. The vulnerability is a denial of service caused by remote attackers sending multiple HTTP requests with invalid Content-Length values, leading to an application crash. Public details in the conn...

CVE-2017-11673

CVE-2017-11673 involves Reporter.exe in Acunetix 8, where a malformed PRE file can allow remote code execution or cause an application crash (DoS). The issue is tied to a User Mode Write AV starting at reporter!madTraceProcess. Available connected records confirm Acunetix 8 as the affected produc...

CVE-2017-11674

CVE-2017-11674 affects Reporter.exe in Acunetix 8. A malformed PRE file triggers a Read Access Violation in reporter!madTraceProcess, leading to an application crash and DoS. Exploitation details, affected versions beyond Acunetix 8, and remediation are not provided in the connected documents. No...