| 25766 | CA Multiple Products Message Queuing Server (Cam.exe) Remote Overflow | Nessus | Gain a shell remotely | 7/26/2007 | 6/27/2018 | high |
| 258075 | Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.2 / 10.10.0 (MMSA-2025-00500) | Nessus | CGI abuses | 8/28/2025 | 1/21/2026 | medium |
| 25811 | LinPHA include/img_view.class.php order parameter SQL Injection | Nessus | CGI abuses | 7/30/2007 | 4/11/2022 | high |
| 25953 | Timbuktu Detection (UDP) | Nessus | Service detection | 8/30/2007 | 11/22/2019 | info |
| 26024 | PostgreSQL Server Detection | Nessus | Service detection | 9/14/2007 | 9/24/2025 | info |
| 26056 | AWStats is Openly Accessible | Nessus | CGI abuses | 9/14/2007 | 4/11/2022 | info |
| 26069 | IceWarp Merak Mail Server < 9.0.0 BODY Element XSS | Nessus | CGI abuses : XSS | 9/24/2007 | 4/11/2022 | medium |
| 26072 | ADOdb Lite adodb-perf-module.inc.php last_module Parameter Arbitrary Code Execution | Nessus | CGI abuses | 9/24/2007 | 9/29/2025 | medium |
| 261465 | Kibana 9.0.x < 9.0.6 / 9.1.x < 9.1.3 Incorrect Authorization (ESA-2025-13) | Nessus | CGI abuses | 9/5/2025 | 1/21/2026 | medium |
| 261501 | ManageEngine ServiceDesk Plus MSP < 14.9 Build 14940 Privilege Escalation | Nessus | CGI abuses | 9/5/2025 | 9/5/2025 | high |
| 261505 | Cisco Evolved Programmable Network Manager Information Disclosure (cisco-sa-epnm-info-dis-zhPPMfgz) | Nessus | CISCO | 9/5/2025 | 9/5/2025 | medium |
| 261766 | Metabase 0.41.x < 0.41.9 / 0.42.x < 0.42.6 / 0.43.x < 0.43.7 / 0.44.x < 0.44.5 / 1.41.x < 1.41.9 / 1.42.x < 1.42.6 / 1.43.x < 1.43.7 / 1.44.x < 1.44.5 | Nessus | CGI abuses | 9/9/2025 | 9/9/2025 | high |
| 261778 | TYPO3 9.0.0 < 9.5.55 ELTS / 10.0.0 < 10.4.54 ELTS / 11.0.0 < 11.5.48 ELTS / 12.0.0 < 12.4.37 / 13.0.0 < 13.4.18 (TYPO3-CORE-SA-2025-021) | Nessus | CGI abuses | 9/9/2025 | 9/9/2025 | medium |
| 261784 | TYPO3 11.0.0 < 11.5.48 ELTS / 12.0.0 < 12.4.37 / 13.0.0 < 13.4.18 (TYPO3-CORE-SA-2025-023) | Nessus | CGI abuses | 9/9/2025 | 9/9/2025 | medium |
| 264900 | Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.4 / 10.10.x < 10.10.1 / 10.11.0 Improper Validation (MMSA-2025-00506) | Nessus | CGI abuses | 9/16/2025 | 1/21/2026 | medium |
| 264901 | Mattermost Server 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.4 / 10.10.x < 10.10.1 / 10.11.0 Path Traversal (MMSA-2025-00501) | Nessus | CGI abuses | 9/16/2025 | 1/21/2026 | medium |
| 271960 | IBM App Connect Enterprise runtime lack of authorization (IWA) (7249061) | Nessus | Misc. | 10/29/2025 | 10/31/2025 | medium |
| 27575 | TikiWiki < 1.9.8.2 Multiple Scripts Local File Inclusion | Nessus | CGI abuses | 10/26/2007 | 4/11/2022 | medium |
| 275844 | Mattermost Server 10.5.x < 10.5.12 / 10.11.x 10.11.4 / 10.12.x < 10.12.1 / 11.0.0 Multiple Vulnerabilities (MMSA-2025-00541, MMSA-2025-00492) | Nessus | CGI abuses | 11/20/2025 | 3/12/2026 | medium |
| 275845 | Mattermost Server < 11.0.0 Multiple Vulnerabilities (MMSA-2024-00337, MMSA-2025-00493, MMSA-2025-00540) | Nessus | CGI abuses | 11/20/2025 | 3/12/2026 | high |
| 27597 | Module Builder DownloadModule Traversal Arbitrary File Disclosure | Nessus | CGI abuses | 10/31/2007 | 4/11/2022 | medium |
| 27619 | Firefly Media Server webserver.c ws_addarg Function /xml-rpc Authorization Header Remote Format String | Nessus | Gain a shell remotely | 11/3/2007 | 11/15/2018 | high |
| 277601 | rConfig RCE (CVE-2020-10221) | Nessus | CGI abuses | 12/5/2025 | 12/17/2025 | high |
| 27802 | HP OpenView Client Configuration Manager Default Credentials | Nessus | CGI abuses | 11/7/2007 | 1/19/2021 | high |
| 27855 | IBM Domino Detection (uncredentialed check) | Nessus | Service detection | 11/10/2007 | 9/24/2025 | info |
| 279127 | PHP 8.3.x < 8.3.29 Multiple Vulnerabilities | Nessus | CGI abuses | 12/18/2025 | 2/23/2026 | high |
| 279128 | PHP 8.5.x < 8.5.1 Multiple Vulnerabilities | Nessus | CGI abuses | 12/18/2025 | 2/23/2026 | high |
| 279274 | PHP 8.2.x < 8.2.30 Multiple Vulnerabilities | Nessus | CGI abuses | 12/18/2025 | 2/23/2026 | high |
| 280123 | Mattermost Server 10.11.x < 10.11.8 / 10.12.x < 10.12.4 / 11.0.x <= 11.0.6 / 11.1.x <= 11.1.1 Improper Authentication (MMSA-2025-00555) | Nessus | CGI abuses | 12/29/2025 | 2/24/2026 | high |
| 28181 | PHP < 5.2.5 Multiple Vulnerabilities | Nessus | CGI abuses | 11/12/2007 | 5/26/2025 | medium |
| 28290 | OpenBase Detection | Nessus | Service detection | 11/21/2007 | 4/11/2022 | info |
| 28292 | OSSIM Server Detection | Nessus | Service detection | 11/26/2007 | 4/11/2022 | info |
| 28293 | GWExtranet gwextranet/scp.dll Multiple Parameter Traversal Local File Inclusion | Nessus | CGI abuses | 11/26/2007 | 4/11/2022 | medium |
| 29225 | NetScaler Web Management ws/generic_api_call.pl standalone Parameter XSS | Nessus | CGI abuses : XSS | 12/6/2007 | 4/11/2022 | medium |
| 29314 | MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894) (uncredentialed check) | Nessus | Windows | 12/12/2007 | 11/15/2018 | critical |
| 29697 | ipMonitor Encoded Traversal Arbitrary File Access | Nessus | Web Servers | 12/13/2007 | 6/12/2020 | medium |
| 29727 | CUPS SNMP Back End (backend/snmp.c) asn1_get_string Function Crafted SNMP Response Remote Overflow | Nessus | Misc. | 12/19/2007 | 11/15/2018 | high |
| 29745 | WordPress 'query.php' is_admin() Function Information Disclosure | Nessus | CGI abuses | 12/23/2007 | 5/14/2025 | medium |
| 29829 | CMS Made Simple modules/TinyMCE/content_css.php templateid Parameter SQL Injection | Nessus | CGI abuses | 1/2/2008 | 4/7/2022 | high |
| 29834 | Atlassian JIRA 500page.jsp XSS | Nessus | CGI abuses : XSS | 1/3/2008 | 5/14/2025 | medium |
| 29895 | IceWarp Mail Server admin/index.html message Parameter XSS | Nessus | CGI abuses : XSS | 1/9/2008 | 4/11/2022 | medium |
| 29929 | netOctopus Agent Detection (TCP) | Nessus | Service detection | 1/14/2008 | 4/11/2022 | info |
| 29994 | LANDesk Management Agent Detection | Nessus | Service detection | 1/17/2008 | 11/22/2019 | info |
| 30052 | boastMachine mail.php id Parameter SQL Injection | Nessus | CGI abuses | 1/23/2008 | 4/11/2022 | high |
| 30056 | ManageEngine Applications Manager Invalid URL Remote Information Disclosure | Nessus | CGI abuses | 1/26/2008 | 1/19/2021 | medium |
| 30057 | nagios-statd Daemon Detection | Nessus | Service detection | 1/26/2008 | 4/11/2022 | info |
| 30107 | CandyPress Store admin/utilities_ConfigHelp.asp helpfield Parameter SQL Injection | Nessus | CGI abuses | 1/28/2008 | 4/11/2022 | high |
| 30108 | vTiger CRM Directory File Disclosure | Nessus | CGI abuses | 1/28/2008 | 4/11/2022 | medium |
| 30123 | Citadel SMTP makeuserkey Function RCPT TO Command Remote Overflow | Nessus | SMTP problems | 1/29/2008 | 7/6/2018 | high |
| 30129 | WordPress AdServe 'adclick.php' 'id' Parameter SQL Injection | Nessus | CGI abuses | 1/30/2008 | 5/14/2025 | high |
