| 25705 | Sun Java System Directory Server Multiple Vulnerabilities | Nessus | Gain a shell remotely | 7/12/2007 | 11/15/2018 | high |
| 25711 | MailMarshal Spam Quarantine Interface Arbitrary Account Password Retrieval | Nessus | CGI abuses | 7/18/2007 | 4/11/2022 | high |
| 25935 | SIDVault < 2.0f LDAP Server Malformed Search Request Buffer Overflow | Nessus | Gain a shell remotely | 8/28/2007 | 11/15/2018 | critical |
| 25289 | Tomcat Sample App hello.jsp 'test' Parameter XSS | Nessus | CGI abuses : XSS | 5/21/2007 | 4/11/2022 | medium |
| 25296 | eScan < 9.0.718.1 MicroWorld Agent service (MWAGENT.EXE) Command Decryption Overflow | Nessus | Windows | 5/24/2007 | 11/15/2018 | critical |
| 25368 | PHP < 5.2.3 Multiple Vulnerabilities | Nessus | CGI abuses | 6/2/2007 | 5/26/2025 | high |
| 25766 | CA Multiple Products Message Queuing Server (Cam.exe) Remote Overflow | Nessus | Gain a shell remotely | 7/26/2007 | 6/27/2018 | high |
| 25493 | XOOPS XFSection Module modify.php dir_module Parameter Remote File Inclusion | Nessus | CGI abuses | 6/14/2007 | 6/1/2022 | high |
| 297849 | ManageEngine OpManager Stored XSS in Subnet Details (CVE-2025-9226) | Nessus | CGI abuses | 2/4/2026 | 2/6/2026 | medium |
| 298040 | FreePBX 13.x < 13.0.197.14 / 14.x < 14.0.13.12 / 15.x < 15.0.16.27 Remote Admin Authentication Bypass | Nessus | CGI abuses | 2/5/2026 | 2/6/2026 | critical |
| 29829 | CMS Made Simple modules/TinyMCE/content_css.php templateid Parameter SQL Injection | Nessus | CGI abuses | 1/2/2008 | 4/7/2022 | high |
| 29834 | Atlassian JIRA 500page.jsp XSS | Nessus | CGI abuses : XSS | 1/3/2008 | 5/14/2025 | medium |
| 29855 | MS07-063: Vulnerability in SMBv2 Could Allow Remote Code Execution (942624) (uncredentialed check) | Nessus | Windows | 1/7/2008 | 1/26/2022 | critical |
| 297197 | Grafana Labs 10.2.0 < 11.6.9+security-01 / 12.0.0 < 12.0.8+security-01 / 12.1.0 < 12.1.5+security-01 / 12.2.0 < 12.2.3+security-01 / 12.3.0 < 12.3.1+security-01 Privilege Escalation (CVE-2026-21721) | Nessus | Web Servers | 1/30/2026 | 4/30/2026 | high |
| 297198 | Grafana Labs 3.0.0 < 11.6.9+security-01 / 12.0.0 < 12.0.8+security-01 / 12.1.0 < 12.1.5+security-01 / 12.2.0 < 12.2.3+security-01 / 12.3.0 < 12.3.1+security-01 DoS (CVE-2026-21720) | Nessus | Web Servers | 1/30/2026 | 4/30/2026 | high |
| 297229 | Oracle APEX Sample Applications (Brookstrut) (CVE-2026-21931) | Nessus | Web Servers | 1/30/2026 | 2/3/2026 | medium |
| 29727 | CUPS SNMP Back End (backend/snmp.c) asn1_get_string Function Crafted SNMP Response Remote Overflow | Nessus | Misc. | 12/19/2007 | 11/15/2018 | high |
| 294982 | Oracle MySQL Cluster 8.4.x < 8.4.8 (January 2026 CPU) | Nessus | Databases | 1/22/2026 | 4/23/2026 | medium |
| 29996 | MyBB forumdisplay.php 'sortby' Parameter Arbitrary PHP Code Execution | Nessus | CGI abuses | 1/17/2008 | 5/14/2025 | high |
| 300293 | IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.3 (7261761) | Nessus | Web Servers | 3/2/2026 | 3/20/2026 | critical |
| 30052 | boastMachine mail.php id Parameter SQL Injection | Nessus | CGI abuses | 1/23/2008 | 4/11/2022 | high |
| 30056 | ManageEngine Applications Manager Invalid URL Remote Information Disclosure | Nessus | CGI abuses | 1/26/2008 | 1/19/2021 | medium |
| 298815 | ISC BIND 9.18.40 < 9.18.44 / 9.18.40-S1 < 9.18.44-S1 / 9.20.13 < 9.20.18 / 9.20.13-S1 < 9.20.18-S1 / 9.21.12 < 9.21.17 Vulnerability (cve-2025-13878) | Nessus | DNS | 2/12/2026 | 2/12/2026 | high |
| 29895 | IceWarp Mail Server admin/index.html message Parameter XSS | Nessus | CGI abuses : XSS | 1/9/2008 | 4/11/2022 | medium |
| 298972 | Neo4j < 5.26.21 Information Disclosure Vulnerability (CVE-2026-1622) | Nessus | CGI abuses | 2/13/2026 | 2/16/2026 | medium |
| 297831 | Dotnetnuke 9.0.x < 9.13.10 / 10.0.x < 10.2.0 Stored XSS in Module Deletion Confirmation Modal (CVE-2026-24837) | Nessus | CGI abuses | 2/4/2026 | 2/6/2026 | medium |
| 31720 | eggBlog _lib/user.php eb_login Function Cookie Handling SQL Injection | Nessus | CGI abuses | 4/1/2008 | 4/11/2022 | medium |
| 317393 | Mattermost Server 10.11.x < 10.11.17 / 11.5.x < 11.5.5 / 11.6.x < 11.6.2 Improper Authorization (MMSA-2026-00629) | Nessus | CGI abuses | 5/28/2026 | 6/1/2026 | medium |
| 32031 | Firefly Media Server ws_getpostvars Function Content-Length Header HTTP Request Handling Overflow | Nessus | Gain a shell remotely | 4/23/2008 | 7/11/2018 | high |
| 31860 | HP OpenView Network Node Manager OpenView5.exe Action Parameter Traversal Arbitrary File Access | Nessus | CGI abuses | 4/15/2008 | 1/19/2021 | medium |
| 31863 | Novell eDirectory Host Environment Service (dhost.exe) HTTP Connection Header DoS | Nessus | Denial of Service | 4/16/2008 | 11/15/2018 | high |
| 318691 | PHP 8.5.x < 8.5.7 Multiple Vulnerabilities | Nessus | CGI abuses | 6/4/2026 | 6/4/2026 | medium |
| 318721 | Kibana 8.x < 8.19.16 / 9.0.x < 9.3.5 Multiple Vulnerabilities (ESA-2026-30 / ESA-2026-33 / ESA-2026-34 / ESA-2026-36) | Nessus | CGI abuses | 6/4/2026 | 6/8/2026 | high |
| 318724 | Kibana 8.x < 8.19.16 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 Multiple Vulnerabilities (ESA-2026-35 / ESA-2026-38) | Nessus | CGI abuses | 6/4/2026 | 6/8/2026 | medium |
| 315201 | MantisBT 1.3.0 < 2.28.2 Move Attachments Admin Page Stored XSS (GHSA-7mqj-8gj2-cg59) | Nessus | CGI abuses : XSS | 5/18/2026 | 5/19/2026 | high |
| 315204 | MantisBT 2.11.0 < 2.28.2 Font Family Preference XSS (GHSA-j3v9-553h-x28j) | Nessus | CGI abuses : XSS | 5/18/2026 | 5/28/2026 | high |
| 315205 | MantisBT 2.26.1 < 2.28.2 Private Issue Monitoring Authorization Bypass (GHSA-ggw7-9675-6v4v) | Nessus | CGI abuses | 5/18/2026 | 5/19/2026 | medium |
| 315207 | MantisBT 1.0.0 < 2.28.2 Dynamic Custom Textarea Field Reflected XSS (GHSA-j7v9-f46r-2rp4) | Nessus | CGI abuses : XSS | 5/18/2026 | 6/2/2026 | medium |
| 315230 | Ivanti Virtual Traffic Manager (vTM) < 22.9R4 OS Command Injection (CVE-2026-8051) | Nessus | CGI abuses | 5/18/2026 | 5/20/2026 | high |
| 315734 | ISC BIND 9.18.36 < 9.18.49 / 9.18.36-S1 < 9.18.49-S1 / 9.20.8 < 9.20.23 / 9.20.9-S1 < 9.20.23-S1 / 9.21.7 < 9.21.22 Vulnerability (cve-2026-5950) | Nessus | DNS | 5/20/2026 | 5/26/2026 | medium |
| 31787 | SmarterMail Subject Field XSS | Nessus | CGI abuses : XSS | 4/7/2008 | 4/7/2022 | medium |
| 31790 | Site Sift Listings detail.php id Parameter SQL Injection | Nessus | CGI abuses | 4/8/2008 | 4/11/2022 | high |
| 320855 | SAP NetWeaver AS ABAP Missing Authorization Check (3735546) | Nessus | Web Servers | 6/12/2026 | 6/15/2026 | high |
| 320856 | SAP NetWeaver AS Java Apache Log4j Vulnerability (3726899) | Nessus | Web Servers | 6/12/2026 | 7/17/2026 | medium |
| 320858 | SAP NetWeaver AS ABAP XML Signature Wrapping in SAML Authentication (3746332) | Nessus | Web Servers | 6/12/2026 | 6/15/2026 | critical |
| 36051 | Xlight FTP Server Authentication SQL Injection | Nessus | FTP | 3/31/2009 | 7/11/2018 | high |
| 34769 | Dropbear SSH Server svr_ses.childpidsize Remote Overflow | Nessus | Misc. | 11/13/2008 | 1/22/2026 | high |
| 35661 | SquirrelMail HTTPS Session Cookie Secure Flag Weakness | Nessus | CGI abuses | 2/12/2009 | 4/11/2022 | medium |
| 35688 | Sun Java System Directory Server 6.x < 6.3.1 LDAP JDBC Backend DoS | Nessus | Denial of Service | 2/13/2009 | 9/2/2020 | medium |
| 35749 | Moodle Forum 'post.php' Unauthorized Post Deletion CSRF | Nessus | CGI abuses | 2/27/2009 | 5/14/2025 | medium |
