| 271365 | Oracle E-Business Suite (October 2025 CPU) | Nessus | Misc. | 10/24/2025 | 2/24/2026 | critical |
| 271392 | Oracle MySQL Cluster 8.0.x < 8.0.44 (October 2025 CPU) | Nessus | Databases | 10/24/2025 | 2/24/2026 | critical |
| 264900 | Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.4 / 10.10.x < 10.10.1 / 10.11.0 Improper Validation (MMSA-2025-00506) | Nessus | CGI abuses | 9/16/2025 | 1/21/2026 | medium |
| 264901 | Mattermost Server 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.4 / 10.10.x < 10.10.1 / 10.11.0 Path Traversal (MMSA-2025-00501) | Nessus | CGI abuses | 9/16/2025 | 1/21/2026 | medium |
| 31051 | osCommerce Customer Testimonials customer_testimonials.php testimonial_id Parameter SQL Injection | Nessus | CGI abuses | 2/13/2008 | 4/11/2022 | high |
| 310722 | Control iD iDSecure Improper Authentication (CVE-2025-49851) | Nessus | SCADA | 4/28/2026 | 9/10/2026 | high |
| 31299 | Centreon include/doc/get_image.php 'img' Parameter Traversal Arbitrary File Access | Nessus | CGI abuses | 2/28/2008 | 4/22/2026 | medium |
| 315201 | MantisBT 1.3.0 < 2.28.2 Move Attachments Admin Page Stored XSS (GHSA-7mqj-8gj2-cg59) | Nessus | CGI abuses : XSS | 5/18/2026 | 5/19/2026 | high |
| 315204 | MantisBT 2.11.0 < 2.28.2 Font Family Preference XSS (GHSA-j3v9-553h-x28j) | Nessus | CGI abuses : XSS | 5/18/2026 | 5/28/2026 | high |
| 315205 | MantisBT 2.26.1 < 2.28.2 Private Issue Monitoring Authorization Bypass (GHSA-ggw7-9675-6v4v) | Nessus | CGI abuses | 5/18/2026 | 5/19/2026 | medium |
| 315207 | MantisBT 1.0.0 < 2.28.2 Dynamic Custom Textarea Field Reflected XSS (GHSA-j7v9-f46r-2rp4) | Nessus | CGI abuses : XSS | 5/18/2026 | 6/2/2026 | medium |
| 315230 | Ivanti Virtual Traffic Manager (vTM) < 22.9R4 OS Command Injection (CVE-2026-8051) | Nessus | CGI abuses | 5/18/2026 | 5/20/2026 | high |
| 315734 | ISC BIND 9.18.36 < 9.18.49 / 9.18.36-S1 < 9.18.49-S1 / 9.20.8 < 9.20.23 / 9.20.9-S1 < 9.20.23-S1 / 9.21.7 < 9.21.22 Vulnerability (cve-2026-5950) | Nessus | DNS | 5/20/2026 | 5/26/2026 | medium |
| 31357 | eScan Server Management Console (eserv.exe) FTP Server Arbitrary File Download | Nessus | FTP | 3/7/2008 | 11/15/2018 | medium |
| 31116 | Dokeos main/inc/lib/events.lib.inc.php Referer HTTP Header SQL Injection | Nessus | CGI abuses | 2/19/2008 | 4/11/2022 | high |
| 31118 | Apache 2.2.x < 2.2.8 Multiple Vulnerabilities (XSS, DoS) | Nessus | Web Servers | 2/20/2008 | 6/29/2018 | medium |
| 31131 | CUPS < 1.3.6 process_browse_data() Function Double Free DoS | Nessus | Misc. | 2/21/2008 | 7/6/2018 | low |
| 31167 | Sniplets Plugin for WordPress execute.php 'text' Parameter Arbitrary Command Execution | Nessus | CGI abuses | 2/26/2008 | 5/14/2025 | high |
| 31608 | PHPAuction Multiple Script include_path Parameter File Inclusion | Nessus | CGI abuses | 3/19/2008 | 4/11/2022 | high |
| 31626 | Acajoom Component for Joomla! 'mailingid' Parameter SQLi | Nessus | CGI abuses | 3/19/2008 | 5/14/2025 | high |
| 31640 | MDaemon IMAP Server FETCH Command Remote Buffer Overflow | Nessus | Windows | 3/21/2008 | 4/11/2022 | high |
| 316488 | D-Link DCS-2530L < 1.07 and DCS-2670L < 2.03 Multiple Vulnerabilities | Nessus | CGI abuses | 5/22/2026 | 5/23/2026 | high |
| 316490 | Mattermost Server 11.5.x < 11.5.2 Missing Authorization (MMSA-2026-00645) | Nessus | CGI abuses | 5/22/2026 | 5/25/2026 | medium |
| 316491 | Mattermost Server 11.4.x <= 11.4.3 / 11.5.x <= 11.5.1 Origin Validation Error (MMSA-2026-00636) | Nessus | CGI abuses | 5/22/2026 | 5/25/2026 | medium |
| 313114 | PHP 8.3.x < 8.3.31 Multiple Vulnerabilities | Nessus | CGI abuses | 5/7/2026 | 5/15/2026 | critical |
| 314667 | Security Updates for Microsoft SQL Server (May 2026) (Remote) | Nessus | Misc. | 5/14/2026 | 5/15/2026 | high |
| 277601 | rConfig RCE (CVE-2020-10221) | Nessus | CGI abuses | 12/5/2025 | 12/17/2025 | high |
| 276746 | Grafana Enterprise SCIM Provisioning Privilege Escalation (CVE-2025-41115) | Nessus | Web Servers | 11/25/2025 | 3/3/2026 | critical |
| 276933 | Fluent Bit < 4.0.12 / 4.1.x < 4.1.1 Multiple Vulnerabilities | Nessus | Misc. | 12/1/2025 | 3/3/2026 | critical |
| 27575 | TikiWiki < 1.9.8.2 Multiple Scripts Local File Inclusion | Nessus | CGI abuses | 10/26/2007 | 4/11/2022 | medium |
| 27597 | Module Builder DownloadModule Traversal Arbitrary File Disclosure | Nessus | CGI abuses | 10/31/2007 | 4/11/2022 | medium |
| 27619 | Firefly Media Server webserver.c ws_addarg Function /xml-rpc Authorization Header Remote Format String | Nessus | Gain a shell remotely | 11/3/2007 | 11/15/2018 | high |
| 294982 | Oracle MySQL Cluster 8.4.x < 8.4.8 (January 2026 CPU) | Nessus | Databases | 1/22/2026 | 4/23/2026 | medium |
| 29314 | MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894) (uncredentialed check) | Nessus | Windows | 12/12/2007 | 11/15/2018 | critical |
| 29225 | NetScaler Web Management ws/generic_api_call.pl standalone Parameter XSS | Nessus | CGI abuses : XSS | 12/6/2007 | 4/11/2022 | medium |
| 26023 | Apache 2.2.x < 2.2.6 Multiple Vulnerabilities (DoS, XSS, Info Disc) | Nessus | Web Servers | 9/14/2007 | 6/29/2018 | medium |
| 26069 | IceWarp Merak Mail Server < 9.0.0 BODY Element XSS | Nessus | CGI abuses : XSS | 9/24/2007 | 4/11/2022 | medium |
| 26072 | ADOdb Lite adodb-perf-module.inc.php last_module Parameter Arbitrary Code Execution | Nessus | CGI abuses | 9/24/2007 | 9/29/2025 | medium |
| 25766 | CA Multiple Products Message Queuing Server (Cam.exe) Remote Overflow | Nessus | Gain a shell remotely | 7/26/2007 | 6/27/2018 | high |
| 258075 | Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.2 / 10.10.0 (MMSA-2025-00500) | Nessus | CGI abuses | 8/28/2025 | 1/21/2026 | medium |
| 25811 | LinPHA include/img_view.class.php order parameter SQL Injection | Nessus | CGI abuses | 7/30/2007 | 4/11/2022 | high |
| 25935 | SIDVault < 2.0f LDAP Server Malformed Search Request Buffer Overflow | Nessus | Gain a shell remotely | 8/28/2007 | 11/15/2018 | critical |
| 25626 | Kaspersky Anti-Spam Control Center Web Config aslic_status.cgi Directory Listing | Nessus | CGI abuses | 6/29/2007 | 1/19/2021 | high |
| 25662 | IBM Tivoli Storage Manager Multiple Remote Overflows | Nessus | Gain a shell remotely | 7/3/2007 | 4/11/2022 | critical |
| 261465 | Kibana 9.0.x < 9.0.6 / 9.1.x < 9.1.3 Incorrect Authorization (ESA-2025-13) | Nessus | CGI abuses | 9/5/2025 | 1/21/2026 | medium |
| 261505 | Cisco Evolved Programmable Network Manager Information Disclosure (cisco-sa-epnm-info-dis-zhPPMfgz) | Nessus | CISCO | 9/5/2025 | 9/5/2025 | medium |
| 261766 | Metabase 0.41.x < 0.41.9 / 0.42.x < 0.42.6 / 0.43.x < 0.43.7 / 0.44.x < 0.44.5 / 1.41.x < 1.41.9 / 1.42.x < 1.42.6 / 1.43.x < 1.43.7 / 1.44.x < 1.44.5 | Nessus | CGI abuses | 9/9/2025 | 9/9/2025 | high |
| 261778 | TYPO3 9.0.0 < 9.5.55 ELTS / 10.0.0 < 10.4.54 ELTS / 11.0.0 < 11.5.48 ELTS / 12.0.0 < 12.4.37 / 13.0.0 < 13.4.18 (TYPO3-CORE-SA-2025-021) | Nessus | CGI abuses | 9/9/2025 | 9/9/2025 | medium |
| 261784 | TYPO3 11.0.0 < 11.5.48 ELTS / 12.0.0 < 12.4.37 / 13.0.0 < 13.4.18 (TYPO3-CORE-SA-2025-023) | Nessus | CGI abuses | 9/9/2025 | 9/9/2025 | medium |
| 25683 | MDaemon Server DomainPOP Malformed Message DoS | Nessus | Windows | 7/10/2007 | 4/11/2022 | low |
