| 115053 | Adobe Experience Manager (AEM) QueryBuilder Feed Servlet Detected | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | info |
| 115052 | Adobe Experience Manager (AEM) CRX Namespace Editor Panel Detected | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | medium |
| 115056 | Adobe Experience Manager (AEM) Sling User Information Servlet Exposure | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | medium |
| 115059 | Adobe Experience Manager (AEM) Felix Console Default Credentials | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | high |
| 115070 | Adobe Experience Manager (AEM) < 6.5.23.0 XML External Entity | Web App Scanning | Component Vulnerability | 12/8/2025 | 12/8/2025 | medium |
| 115071 | Apache 2.4.x < 2.4.66 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 12/8/2025 | 12/8/2025 | high |
| 115073 | Apache Tika < 3.2.2 XML External Entity | Web App Scanning | Component Vulnerability | 12/11/2025 | 12/11/2025 | critical |
| 115069 | React Server Components 19.0 / 19.1.0 / 19.1.1 / 19.2.0 Remote Code Execution (React2Shell) | Web App Scanning | Component Vulnerability | 12/4/2025 | 12/11/2025 | critical |
| 115060 | Adobe Experience Manager (AEM) CRX Content Explorer | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | info |
| 115066 | Adobe Experience Manager (AEM) Merge Metadata Servlet Detected | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | info |
| 115054 | Adobe Experience Manager (AEM) Custom Scripts Listing Detection | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | medium |
| 115062 | Third-Party Service Secret Disclosure | Web App Scanning | Data Exposure | 12/4/2025 | 5/5/2026 | high |
| 115063 | AI Service Secret Disclosure | Web App Scanning | Data Exposure | 12/4/2025 | 4/3/2026 | high |
| 115077 | Gladinet CentreStack < 16.4.10315.56368 Insecure Deserialization | Web App Scanning | Component Vulnerability | 12/17/2025 | 12/17/2025 | critical |
| 115047 | GFI KerioControl < 9.4.5 HTTP Response Splitting | Web App Scanning | Component Vulnerability | 12/4/2025 | 12/4/2025 | high |
| 115048 | Adobe Experience Manager (AEM) Login Panel Detected | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | info |
| 115050 | Adobe Experience Manager (AEM) Sling Login Panel Detected | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | info |
| 115058 | Adobe Experience Manager (AEM) Debugging Client Libraries Exposure | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | info |
| 115067 | Adobe Experience Manager (AEM) Unauthenticated Cache Purge | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | info |
| 115072 | Adobe Experience Manager (AEM) Forms Login Panel Detected | Web App Scanning | Web Applications | 12/11/2025 | 12/11/2025 | info |
| 115057 | Adobe Experience Manager (AEM) Querybuilder Internal Path Read | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | medium |
| 115061 | Adobe Experience Manager (AEM) Dispatcher Bypass | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | high |
| 115079 | Kubernetes Configuration Detected | Web App Scanning | Data Exposure | 12/17/2025 | 12/17/2025 | medium |
| 115075 | GeoServer < 2.25.6 / 2.26.x < 2.26.2 XML External Entity | Web App Scanning | Component Vulnerability | 12/11/2025 | 12/11/2025 | critical |
| 115080 | Atlassian Jira 10.3.x < 10.3.13 XML External Entity Injection | Web App Scanning | Component Vulnerability | 12/17/2025 | 12/17/2025 | critical |
| 115055 | Adobe Experience Manager (AEM) CRX Search Endpoint Exposure | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | medium |
| 115065 | Adobe Experience Manager (AEM) QueryBuilder JCR Hashed Password Disclosure | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | high |
| 115068 | Adobe Experience Manager (AEM) Groovy Console | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | critical |
| 115051 | Sneeit Framework Plugin for WordPress < 8.4 Remote Code Execution | Web App Scanning | Component Vulnerability | 12/4/2025 | 12/4/2025 | critical |
| 115078 | Gladinet CentreStack / Triofox < 16.12.10420.56791 Hardcoded Credentials | Web App Scanning | Component Vulnerability | 12/17/2025 | 12/17/2025 | high |
| 115082 | Astro < 5.15.8 Reflected Cross-Site Scripting | Web App Scanning | Component Vulnerability | 12/17/2025 | 12/17/2025 | medium |
| 115081 | Atlassian Jira 11.x < 11.2.0 XML External Entity Injection | Web App Scanning | Component Vulnerability | 12/17/2025 | 12/17/2025 | critical |
| 115076 | Gladinet Triofox < 16.7.10368.56560 Improper Access Control | Web App Scanning | Component Vulnerability | 12/17/2025 | 12/17/2025 | critical |
| 115049 | Adobe Experience Manager (AEM) CRX Package Manager Panel Detected | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | info |
| 115064 | Adobe Experience Manager (AEM) QueryBuilder JCR Role Disclosure | Web App Scanning | Web Applications | 12/4/2025 | 12/4/2025 | medium |
| 115074 | Drupal JSON:API User Enumeration | Web App Scanning | Web Applications | 12/11/2025 | 12/11/2025 | medium |
| 504822 | Qnap QTS and QuTS hero Path Traversal (CVE-2025-33032) | Tenable OT Security | Tenable.ot | 12/9/2025 | 2/25/2026 | medium |
| 504827 | Qnap QTS and QuTS hero Command Injection (CVE-2025-30264) | Tenable OT Security | Tenable.ot | 12/9/2025 | 2/25/2026 | high |
| 504833 | Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2024-50396) | Tenable OT Security | Tenable.ot | 12/11/2025 | 2/24/2026 | high |
| 504841 | Qnap QTS and QuTS hero Improper Neutralization of CRLF Sequences (CVE-2024-48868) | Tenable OT Security | Tenable.ot | 12/11/2025 | 2/24/2026 | high |
| 504843 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2024-37042) | Tenable OT Security | Tenable.ot | 12/11/2025 | 2/24/2026 | medium |
| 504849 | Qnap QTS and QuTS hero Improper Handling of URL Encoding (CVE-2024-48866) | Tenable OT Security | Tenable.ot | 12/11/2025 | 2/24/2026 | low |
| 504851 | Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37049) | Tenable OT Security | Tenable.ot | 12/11/2025 | 2/24/2026 | medium |
| 504853 | Honeywell Multiple Industrial Printers Improper Privilege Management (CVE-2017-5671) | Tenable OT Security | Tenable.ot | 12/16/2025 | 2/23/2026 | high |
| 504859 | Konica Bizhub Multifunction Printers Firmware Tamper Detection Feature Bypass (CVE-2021-20872) | Tenable OT Security | Tenable.ot | 12/19/2025 | 9/21/2026 | medium |
| 504861 | Konica Bizhub Multifunction Printers Cross-site Request Forgery (CVE-2025-5885) | Tenable OT Security | Tenable.ot | 12/19/2025 | 2/20/2026 | medium |
| 504863 | Konica Bizhub Multifunction Printers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2021-20869) | Tenable OT Security | Tenable.ot | 12/19/2025 | 2/20/2026 | medium |
| 504820 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-30272) | Tenable OT Security | Tenable.ot | 12/9/2025 | 2/25/2026 | medium |
| 504821 | Qnap QTS and QuTS hero Path Traversal (CVE-2025-30271) | Tenable OT Security | Tenable.ot | 12/9/2025 | 2/25/2026 | medium |
| 504824 | Qnap QTS and QuTS hero Out-of-Bounds Write (CVE-2025-30273) | Tenable OT Security | Tenable.ot | 12/9/2025 | 2/25/2026 | high |
