Acunetix Web Vulnerability Scanner vulnerabilities

CVE-2014-2994 [CRITICAL] CWE-119 CVE-2014-2994: Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remo Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (src attribute).

CVE-2015-4027 [HIGH] CWE-264 CVE-2015-4027: The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan.

CVE-2017-11673 [CRITICAL] CWE-20 CVE-2017-11673: Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of se Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed PRE file, related to a "User Mode Write AV starting at reporter!madTraceProcess."

CVE-2007-0120 [LOW] CVE-2007-0120: Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to c Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service (application crash) via multiple HTTP requests containing invalid Content-Length values.

CVE-2017-11674 [MEDIUM] CWE-119 CVE-2017-11674: Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file, related to a "Read Access Violation starting at reporter!madTraceProcess."