Plugins Search

IDNameProductFamilyPublishedUpdatedSeverity
315201MantisBT 1.3.0 < 2.28.2 Move Attachments Admin Page Stored XSS (GHSA-7mqj-8gj2-cg59)NessusCGI abuses : XSS5/18/20265/19/2026
high
315204MantisBT 2.11.0 < 2.28.2 Font Family Preference XSS (GHSA-j3v9-553h-x28j)NessusCGI abuses : XSS5/18/20265/28/2026
high
315205MantisBT 2.26.1 < 2.28.2 Private Issue Monitoring Authorization Bypass (GHSA-ggw7-9675-6v4v)NessusCGI abuses5/18/20265/19/2026
medium
315207MantisBT 1.0.0 < 2.28.2 Dynamic Custom Textarea Field Reflected XSS (GHSA-j7v9-f46r-2rp4)NessusCGI abuses : XSS5/18/20266/2/2026
medium
315230Ivanti Virtual Traffic Manager (vTM) < 22.9R4 OS Command Injection (CVE-2026-8051)NessusCGI abuses5/18/20265/20/2026
high
315734ISC BIND 9.18.36 < 9.18.49 / 9.18.36-S1 < 9.18.49-S1 / 9.20.8 < 9.20.23 / 9.20.9-S1 < 9.20.23-S1 / 9.21.7 < 9.21.22 Vulnerability (cve-2026-5950)NessusDNS5/20/20265/26/2026
medium
31787SmarterMail Subject Field XSSNessusCGI abuses : XSS4/7/20084/7/2022
medium
31790Site Sift Listings detail.php id Parameter SQL InjectionNessusCGI abuses4/8/20084/11/2022
high
320855SAP NetWeaver AS ABAP Missing Authorization Check (3735546)NessusWeb Servers6/12/20266/15/2026
high
320856SAP NetWeaver AS Java Apache Log4j Vulnerability (3726899)NessusWeb Servers6/12/20267/17/2026
medium
320858SAP NetWeaver AS ABAP XML Signature Wrapping in SAML Authentication (3746332)NessusWeb Servers6/12/20266/15/2026
critical
36051Xlight FTP Server Authentication SQL InjectionNessusFTP3/31/20097/11/2018
high
34769Dropbear SSH Server svr_ses.childpidsize Remote OverflowNessusMisc.11/13/20081/22/2026
high
35661SquirrelMail HTTPS Session Cookie Secure Flag WeaknessNessusCGI abuses2/12/20094/11/2022
medium
35688Sun Java System Directory Server 6.x < 6.3.1 LDAP JDBC Backend DoSNessusDenial of Service2/13/20099/2/2020
medium
35749Moodle Forum 'post.php' Unauthorized Post Deletion CSRFNessusCGI abuses2/27/20095/14/2025
medium
35750PHP < 5.2.9 Multiple VulnerabilitiesNessusCGI abuses2/27/20095/26/2025
medium
35587phpSlash fields Parameter PHP Code InjectionNessusCGI abuses2/4/20094/11/2022
high
35628Openfire < 3.6.3 Multiple VulnerabilitiesNessusCGI abuses2/9/20091/19/2021
medium
35655TYPO3 'jumpUrl' Mechanism Information DisclosureNessusCGI abuses2/12/20095/14/2025
medium
36133IBM WebSphere Application Server 7.0 < Fix Pack 3NessusWeb Servers4/10/20098/6/2018
high
36161IBM WebSphere Application Server < 6.1.0.23 Multiple FlawsNessusWeb Servers4/15/20098/6/2018
high
358456Wind River VxWorks 7 < 26.09 Multiple VulnerabilitiesNessusMisc.10/1/202610/2/2026
high
35777Default Password (toor) for 'root' AccountNessusDefault Unix Accounts3/5/20094/11/2022
critical
349787PHP 8.2.x < 8.2.34 Multiple VulnerabilitiesNessusCGI abuses9/24/202610/2/2026
medium
343973SAP NetWeaver Information Disclosure (3750721)NessusWeb Servers9/9/20269/11/2026
medium
34412MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695) (uncredentialed check)NessusWindows10/15/20088/5/2020
critical
34419PhpWebGallery comments.php sort_by Parameter SQL InjectionNessusCGI abuses10/15/20084/11/2022
high
344301Kibana 8.x < 8.19.17 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 Path Traversal (ESA-2026-159)NessusCGI abuses9/9/20269/10/2026
medium
344303Kibana 7.x / 8.x < 8.19.16 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 Path Traversal (ESA-2026-160)NessusCGI abuses9/9/20269/10/2026
high
344311Kibana 9.4.x < 9.4.6 / 9.5.x < 9.5.1 Incorrect Authorization (ESA-2026-122)NessusCGI abuses9/9/20269/10/2026
medium
344320Kibana 9.4.x < 9.4.5 Missing Authorization (ESA-2026-147)NessusCGI abuses9/9/20269/10/2026
medium
344322Kibana 7.x / 8.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 Missing Authorization (ESA-2026-144)NessusCGI abuses9/9/20269/10/2026
medium
34433Apache mod_proxy_ftp Directory Component Wildcard Character Globbing XSSNessusWeb Servers10/16/20084/11/2022
medium
34265ProFTPD Command Truncation Cross-Site Request ForgeryNessusFTP9/23/20083/27/2020
medium
34293MailWatch for MailScanner mailscanner/docs.php doc Parameter Traversal Local File InclusionNessusCGI abuses9/26/20084/11/2022
medium
344586MikroTik RouterOS 7.20 < 7.23.4 / 7.24.x < 7.24.2 WebFig Unauthenticated File Read (CVE-2026-67281)NessusMisc.9/10/20269/28/2026
high
34311MS08-040: Microsoft SQL Server Multiple Privilege Escalation (941203) (uncredentialed check)NessusWindows9/29/20084/11/2022
critical
61393MySQL Authentication Protocol Token Comparison Casting Failure Password BypassNessusDatabases8/2/20123/27/2019
medium
61435Symantec Web Gateway Multiple Script Shell Command Execution (SYM12-011)NessusCGI abuses8/6/20121/19/2021
critical
61459IBM WebSphere Application Server 8.0 < Fix Pack 4 Multiple VulnerabilitiesNessusWeb Servers8/9/201212/4/2019
medium
61488IBM WebSphere Portal Dojo Module URI Traversal Arbitrary File AccessNessusCGI abuses8/10/20121/19/2021
medium
61493Sielco Sistemi Winlog Arbitrary File DisclosureNessusSCADA8/10/20127/14/2025
medium
61648Scrutinizer < 9.5.2 Multiple VulnerabilitiesNessusCGI abuses8/23/20121/19/2021
high
61650Bugzilla < 3.6.10 / 4.0.7 / 4.2.2 / 4.3.2 Multiple Information DisclosuresNessusCGI abuses8/23/20124/11/2022
medium
62046WordPress < 3.4.2 Multiple VulnerabilitiesNessusCGI abuses9/12/20125/14/2025
medium
62101Apache 2.2.x < 2.2.23 Multiple VulnerabilitiesNessusWeb Servers9/14/20126/29/2018
high
62182Cisco Prime Security Manager Log Retention DoS (cisco-sa-20120912-asacx)NessusCGI abuses9/18/20121/19/2021
high
62203Default Password (user) for 'user' AccountNessusDefault Unix Accounts9/19/20124/11/2022
critical
62312phpMyAdmin server_sync.php Backdoor (PMASA-2012-5)NessusCGI abuses9/26/20124/11/2022
high