| 297197 | Grafana Labs 10.2.0 < 11.6.9+security-01 / 12.0.0 < 12.0.8+security-01 / 12.1.0 < 12.1.5+security-01 / 12.2.0 < 12.2.3+security-01 / 12.3.0 < 12.3.1+security-01 Privilege Escalation (CVE-2026-21721) | Nessus | Web Servers | 1/30/2026 | 4/30/2026 | high |
| 297198 | Grafana Labs 3.0.0 < 11.6.9+security-01 / 12.0.0 < 12.0.8+security-01 / 12.1.0 < 12.1.5+security-01 / 12.2.0 < 12.2.3+security-01 / 12.3.0 < 12.3.1+security-01 DoS (CVE-2026-21720) | Nessus | Web Servers | 1/30/2026 | 4/30/2026 | high |
| 297229 | Oracle APEX Sample Applications (Brookstrut) (CVE-2026-21931) | Nessus | Web Servers | 1/30/2026 | 2/3/2026 | medium |
| 29727 | CUPS SNMP Back End (backend/snmp.c) asn1_get_string Function Crafted SNMP Response Remote Overflow | Nessus | Misc. | 12/19/2007 | 11/15/2018 | high |
| 29829 | CMS Made Simple modules/TinyMCE/content_css.php templateid Parameter SQL Injection | Nessus | CGI abuses | 1/2/2008 | 4/7/2022 | high |
| 29834 | Atlassian JIRA 500page.jsp XSS | Nessus | CGI abuses : XSS | 1/3/2008 | 5/14/2025 | medium |
| 29855 | MS07-063: Vulnerability in SMBv2 Could Allow Remote Code Execution (942624) (uncredentialed check) | Nessus | Windows | 1/7/2008 | 1/26/2022 | critical |
| 25483 | Linux Kernel Netfilter *_conntrack_proto_sctp.c sctp_new Function Unknown Chunk Type Remote DoS | Nessus | Denial of Service | 6/12/2007 | 7/14/2018 | medium |
| 25493 | XOOPS XFSection Module modify.php dir_module Parameter Remote File Inclusion | Nessus | CGI abuses | 6/14/2007 | 6/1/2022 | high |
| 25548 | FuseTalk index.cfm txForumID Parameter SQL Injection | Nessus | CGI abuses | 6/20/2007 | 4/11/2022 | high |
| 25553 | FuseTalk Multiple Script XSS | Nessus | CGI abuses : XSS | 6/21/2007 | 4/11/2022 | medium |
| 25420 | Symantec Veritas Storage Foundation Scheduler Service (VxSchedService.exe) Remote Code Execution | Nessus | Gain a shell remotely | 6/4/2007 | 8/6/2018 | high |
| 25289 | Tomcat Sample App hello.jsp 'test' Parameter XSS | Nessus | CGI abuses : XSS | 5/21/2007 | 4/11/2022 | medium |
| 25198 | MySQL Crafted IF Clause Divide-by-zero NULL Dereference DoS | Nessus | Databases | 5/10/2007 | 7/16/2018 | medium |
| 25368 | PHP < 5.2.3 Multiple Vulnerabilities | Nessus | CGI abuses | 6/2/2007 | 5/26/2025 | high |
| 25169 | RunCMS < 1.5.3 debug_show.php Multiple Vulnerabilities | Nessus | CGI abuses | 5/8/2007 | 6/1/2022 | high |
| 25170 | Advanced Guestbook index.php lang Cookie Parameter Path Disclosure | Nessus | CGI abuses | 5/9/2007 | 4/11/2022 | medium |
| 25171 | Trend Micro ServerProtect AgRpcCln.dll Buffer Overflow | Nessus | Windows | 5/9/2007 | 11/15/2018 | critical |
| 258075 | Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.2 / 10.10.0 (MMSA-2025-00500) | Nessus | CGI abuses | 8/28/2025 | 1/21/2026 | medium |
| 25811 | LinPHA include/img_view.class.php order parameter SQL Injection | Nessus | CGI abuses | 7/30/2007 | 4/11/2022 | high |
| 26023 | Apache 2.2.x < 2.2.6 Multiple Vulnerabilities (DoS, XSS, Info Disc) | Nessus | Web Servers | 9/14/2007 | 6/29/2018 | medium |
| 25626 | Kaspersky Anti-Spam Control Center Web Config aslic_status.cgi Directory Listing | Nessus | CGI abuses | 6/29/2007 | 1/19/2021 | high |
| 25662 | IBM Tivoli Storage Manager Multiple Remote Overflows | Nessus | Gain a shell remotely | 7/3/2007 | 4/11/2022 | critical |
| 25683 | MDaemon Server DomainPOP Malformed Message DoS | Nessus | Windows | 7/10/2007 | 4/11/2022 | low |
| 25705 | Sun Java System Directory Server Multiple Vulnerabilities | Nessus | Gain a shell remotely | 7/12/2007 | 11/15/2018 | high |
| 280123 | Mattermost Server 10.11.x < 10.11.8 / 10.12.x < 10.12.4 / 11.0.x <= 11.0.6 / 11.1.x <= 11.1.1 Improper Authentication (MMSA-2025-00555) | Nessus | CGI abuses | 12/29/2025 | 2/24/2026 | high |
| 28181 | PHP < 5.2.5 Multiple Vulnerabilities | Nessus | CGI abuses | 11/12/2007 | 5/26/2025 | medium |
| 304689 | Grafana 8.1.0 < 11.6.14 / 12.0.0 < 12.1.10 / 12.2.0 < 12.2.8 / 12.3.0 < 12.3.6 / 12.4.0 < 12.4.2 DoS (CVE-2026-28375) | Nessus | Web Servers | 4/2/2026 | 4/6/2026 | medium |
| 300912 | Kibana 8.x < 8.19.12 / 9.2.x < 9.2.6 / 9.3.x < 9.3.1 (ESA_2026_13) | Nessus | CGI abuses | 3/5/2026 | 4/30/2026 | high |
| 30107 | CandyPress Store admin/utilities_ConfigHelp.asp helpfield Parameter SQL Injection | Nessus | CGI abuses | 1/28/2008 | 4/11/2022 | high |
| 30108 | vTiger CRM Directory File Disclosure | Nessus | CGI abuses | 1/28/2008 | 4/11/2022 | medium |
| 30150 | VNCviewer in Listen Mode Detection | Nessus | Service detection | 2/4/2008 | 4/11/2022 | info |
| 300293 | IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.3 (7261761) | Nessus | Web Servers | 3/2/2026 | 3/20/2026 | critical |
| 30052 | boastMachine mail.php id Parameter SQL Injection | Nessus | CGI abuses | 1/23/2008 | 4/11/2022 | high |
| 30056 | ManageEngine Applications Manager Invalid URL Remote Information Disclosure | Nessus | CGI abuses | 1/26/2008 | 1/19/2021 | medium |
| 303190 | Dell iDRAC9 < 7.00.00.174 / 7.10.90.00 Information Disclosure (DSA-2026-113) | Nessus | CGI abuses | 3/20/2026 | 5/8/2026 | medium |
| 303449 | MantisBT < 2.28.1 SOAP API Authentication Bypass (GHSA-phrq-pc6r-f6gh) | Nessus | CGI abuses | 3/24/2026 | 3/27/2026 | critical |
| 101397 | DNN (DotNetNuke) 5.2.0 < 9.1.1 Multiple Vulnerabilities | Nessus | CGI abuses | 7/12/2017 | 5/14/2025 | high |
| 104631 | PHP 5.6.x < 5.6.32 Multiple Vulnerabilities | Nessus | CGI abuses | 11/16/2017 | 5/26/2025 | critical |
| 105371 | Atlassian Bamboo 6.1.x < 6.1.6 / 6.2.x < 6.2.5 Incorrect Permission Check RCE | Nessus | CGI abuses | 12/19/2017 | 11/11/2025 | critical |
| 106490 | pfSense < 2.1.4 Multiple Vulnerabilities (SA-14_08 - SA-14_12) | Nessus | CGI abuses | 1/31/2018 | 4/5/2019 | medium |
| 133359 | Oracle Primavera Unifier Multiple Vulnerabilities (Jan 2020 CPU) | Nessus | CGI abuses | 1/30/2020 | 3/28/2024 | critical |
| 139082 | Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX276688) (Direct Check) | Nessus | CGI abuses | 7/30/2020 | 8/10/2026 | medium |
| 139457 | vBulletin CVE-2019-16759 Bypass Remote Code Execution (CVE-2020-17496) (direct check) | Nessus | CGI abuses | 8/10/2020 | 5/14/2025 | critical |
| 141810 | WordPress Loginizer plugin < 1.6.4 blind SQLi (CVE-2020-27615) | Nessus | CGI abuses | 10/22/2020 | 5/14/2025 | critical |
| 211454 | Pulse Connect Secure < 9.1R18.7 / < 22.7R2.1 Multiple Vulnerabilities (000096001) | Nessus | Misc. | 11/15/2024 | 12/13/2024 | critical |
| 216915 | Fluent Bit Multiple Vulnerabilities | Nessus | Misc. | 2/27/2025 | 1/21/2026 | high |
| 21785 | Webmin 'miniserv.pl' Arbitrary File Disclosure | Nessus | CGI abuses | 6/30/2006 | 4/22/2026 | medium |
| 22268 | PHP < 4.4.3 / 5.1.4 Multiple Vulnerabilities | Nessus | CGI abuses | 8/25/2006 | 5/26/2025 | high |
| 181479 | Apache Solr < 8.6.0 Information Disclosure (CVE-2020-13941) | Nessus | CGI abuses | 9/15/2023 | 9/18/2023 | high |
