Plugins Search

IDNameProductFamilyPublishedUpdatedSeverity
25708paFileDB includes/search.php categories Parameter SQL InjectionNessusCGI abuses7/16/20074/11/2022
high
25736Expose for Joomla! File Upload RCENessusCGI abuses7/19/20075/14/2025
critical
26059Mambo / Joomla! Multiple Components 'mosConfig_live_site' Parameter Remote File IncludeNessusCGI abuses9/17/20074/22/2026
high
26070Apache Tomcat Sample App cal2.jsp 'time' Parameter XSS (CVE-2006-7196)NessusCGI abuses : XSS9/24/20079/29/2025
medium
26199Original inc/exif.inc.php exif_prog Parameter Arbitrary Command ExecutionNessusCGI abuses10/3/20074/11/2022
medium
277584WatchGuard Firebox OS 2025.1 / 12.x < 12.11.4 / 12.5.x < 12.5.13 / 11.x Out of Bounds Write VulnerabilityNessusCGI abuses12/5/202512/17/2025
critical
278109Mattermost Server 10.5.x <= 10.5.12 / 10.11.x <= 10.11.4 / 10.12.x <= 10.12.1 / 11.0.x <= 11.0.2 Multiple Vulnerabilities (CVE-2025-12421, MMSA-2025-00526, CVE-2025-12756)NessusCGI abuses12/10/20252/26/2026
critical
278111Mattermost Server 10.5.x <= 10.5.12 / 10.11.x <= 10.11.4 Improper Access Control (MMSA-2025-00517)NessusCGI abuses12/10/20253/2/2026
medium
278112WordPress Plugin 'Sneeit Framework' < 8.4 Code ExecutionNessusCGI abuses12/10/20252/25/2026
critical
27841SNMP GETBULK Large max-repetitions Remote DoSNessusSNMP11/9/200711/8/2023
high
28289Ability Mail Server < 2.61 Multiple Remote DoSNessusSMTP problems11/21/20074/11/2022
medium
24899RWCards Component for Joomla! 'category_id' Parameter SQLiNessusCGI abuses3/27/20075/14/2025
medium
24900TYPOlight < 2.2.5 Unspecified VulnerabilityNessusCGI abuses3/27/20074/11/2022
high
264629Adobe Experience Manager < 6.5.23 (GRANITE-61551 Hotfix) / 6.5 LTS SP1 (GRANITE-61551 Hotfix) Multiple Security feature bypass (APSB25-90)NessusMisc.9/12/20251/21/2026
high
265889Apache Solr < 9.8.0 ConfigSet Privilege Escalation via <lib> Injection (CVE-2025-24814)NessusCGI abuses9/25/20259/25/2025
medium
269973Kibana 7.0.x <= 7.17.29 / 8.0.x <= 8.18.7 / 8.19.x <= 8.19.3 / 9.0.x <= 9.0.6 / 9.1.x <= 9.1.3 XSS (ESA-2025-16)NessusCGI abuses10/10/20251/21/2026
high
270137Oracle E-Business Suite Information (CVE-2025-61884)NessusMisc.10/13/202510/20/2025
high
26914BrightStor Hierarchical Storage Manager < r11.6 Multiple Remote VulnerabilitiesNessusWindows10/4/200711/15/2018
critical
26924Cart32 c32web.exe ImageName Traversal Arbitrary File AccessNessusCGI abuses10/5/20074/11/2022
medium
265962Fortra FileCatalyst 5.1.6 < 5.2.0 build 130 Unrestricted File Upload (fi-2025-010)NessusMisc.9/26/20259/26/2025
high
266219Mattermost Server 10.10.x < 10.10.2 / 10.11.0 Missing Authorization (MMSA-2025-00513)NessusCGI abuses9/30/20251/21/2026
medium
290254Cisco Meraki Multiple Vulnerabilities (cisco-sa-snort3-dcerpc-vulns-J9HNF4tH)NessusCISCO1/16/20262/6/2026
medium
29927eggBlog index.php eggblogpassword Parameter Cookie SQL InjectionNessusCGI abuses1/12/20084/11/2022
medium
299394Mattermost Server 10.11.x <= 10.11.9 / 11.0.x <= 11.2.x Improper Access Control (MMSA-2025-00549)NessusCGI abuses2/18/20264/30/2026
low
299400ArcGIS Server < 11.3 Multiple Vulnerabilities (2025 Update 1)NessusCGI abuses2/18/20262/24/2026
high
29980Solaris 10 ICMP Packet Handling DoSNessusDenial of Service1/15/20081/14/2021
high
299888SolarWinds Serv-U 15.5.4 Multiple VulnerabilitiesNessusFTP2/24/20262/27/2026
high
30053Kayako SupportSuite syncml/index.php Direct Request Remote Information DisclosureNessusCGI abuses1/23/20084/11/2022
medium
304688Grafana 8.0.0 < 11.6.14 / 12.0.0 < 12.1.10 / 12.2.0 < 12.2.8 / 12.3.0 < 12.3.6 / 12.4.0 < 12.4.2 DoS (CVE-2026-27879)NessusWeb Servers4/2/20264/6/2026
medium
301859Zabbix 6.0.x < 6.0.41 / 7.0.x < 7.0.18 / 7.4.x < 7.4.2 Unauthorized Object Creation (ZBX-27567)NessusCGI abuses3/11/20264/30/2026
medium
303586Kibana 8.x < 8.19.13 / 9.x < 9.2.7 / 9.3.x < 9.3.2 DoS (ESA-2026-20)NessusCGI abuses3/25/20264/30/2026
medium
303450MantisBT 2.28.x < 2.28.2 Timeline Tag Name XSS (GHSA-73vx-49mv-v8w5)NessusCGI abuses : XSS3/24/20263/27/2026
high
303510IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.4 (7267347)NessusWeb Servers3/25/20265/29/2026
medium
30208Ipswitch WS_FTP Server Manager /WSFTPSVR/FTPLogServer/LogViewer.asp Authentication BypassNessusCGI abuses2/8/20081/19/2021
medium
305155FortiClient EMS 7.4.x Reverse Proxy Header Spoofing Auth Bypass (CVE-2026-35616)NessusMisc.4/7/20268/10/2026
critical
27054HP Linux Imaging and Printing Project (hplip) hpssd from Address Command InjectionNessusGain a shell remotely10/15/20077/12/2018
high
271690Dell Storage Manager Authentication Bypass (CVE-2025-43995)NessusMisc.10/27/20259/10/2026
critical
25461JFFNMS auth.php Multiple Parameter SQL InjectionNessusCGI abuses6/12/20074/11/2022
high
25492Firebird DataBase Server fbserver.exe p_cnct_count Value Remote OverflowNessusDatabases6/13/20074/11/2022
critical
275783Samsung MagicINFO Server Path Traversal RCE (CVE-2025-54443)NessusMisc.11/19/20259/10/2026
critical
275889HP LaserJet Pro Printers Information Disclosure (HPSBPI04074)NessusMisc.11/20/20253/12/2026
medium
271810Mattermost Server 10.5.x < 10.5.11 / 10.10.x < 10.10.3 / 10.11.x 10.11.2 / 10.12.0 Multiple Vulnerabilities (MMSA-2025-00507, MMSA-2025-00508)NessusCGI abuses10/28/20251/21/2026
high
271812Ghost CMS 5.42.1 - Path Traversal (CVE-2023-32235)NessusCGI abuses10/28/20259/10/2026
high
271923Dotnetnuke < 10.1.1 Stored cross-site-scripting (XSS) via SVG upload (CVE-2025-64094)NessusCGI abuses10/28/20252/24/2026
medium
272736Liferay Portal 7.2.0 < 7.4.3.112 XSSNessusCGI abuses : XSS11/5/202511/7/2025
medium
272737Liferay Portal 7.4.3.8 < 7.4.3.112 XSSNessusCGI abuses : XSS11/5/202511/7/2025
medium
274363Gladinet CentreStack <= 16.7.10368.56560 Local File InclusionNessusCGI abuses11/7/202511/7/2025
high
275165Apple TV < 26.1 Multiple Vulnerabilities (125637)NessusMisc.11/12/202511/12/2025
medium
27523LiteSpeed Web Server MIME Type Injection Null Byte Script Source Code DisclosureNessusCGI abuses10/23/20071/19/2021
medium
29251MySQL Community Server 5.0 < 5.0.51 RENAME TABLE Symlink System Table OverwriteNessusDatabases12/10/200711/15/2018
high