Plugins Search

IDNameProductFamilyPublishedUpdatedSeverity
76874TimThumb 'timthumb.php' WebShot 'src' Parameter Remote Command ExecutionNessusCGI abuses7/28/20144/22/2026
medium
78109MediaWiki < 1.19.20 / 1.22.12 / 1.23.5 'includes/OutputPage.php' XSSNessusCGI abuses : XSS10/9/20145/14/2025
low
81319DNN (DotNetNuke) < 7.4.0 Unspecified Persistent XSSNessusCGI abuses : XSS2/12/20155/14/2025
medium
84877Juniper NSM < 2012.2R9 Apache HTTP Server Multiple Vulnerabilities (JSA10685)NessusMisc.7/20/20154/11/2022
medium
85513Apache Tomcat JK Connector 1.2.x < 1.2.41 JkUnmount Directive Handling Remote Information DisclosureNessusWeb Servers8/18/20154/11/2022
medium
85580Apache ActiveMQ Blob Message Directory TraversalNessusCGI abuses8/21/20154/22/2026
medium
87502ISC BIND 9.x < 9.9.8-P2 / 9.10.x < 9.10.3-P2 Response Parsing Class Attribute Handling DoSNessusDNS12/18/20154/27/2020
high
88488Cisco Unified Computing System Manager CGI RCE (CSCur90888)NessusCISCO1/29/201611/20/2019
critical
89114VMware ESX Multiple Vulnerabilities (VMSA-2009-0008) (remote check)NessusMisc.3/3/20161/6/2021
critical
89661VMware ESX / ESXi Authentication Service and Third-Party Libraries Multiple Vulnerabilities (VMSA-2013-0001) (remote check)NessusMisc.3/4/201611/15/2018
critical
90628Oracle iPlanet Web Server 7.0.x < 7.0.23 NSS ASN.1 Decoder RCE (April 2016 CPU)NessusWeb Servers4/21/201611/20/2019
critical
31656Apache < 2.0.55 Multiple VulnerabilitiesNessusWeb Servers3/26/20086/29/2018
high
33849PHP < 4.4.9 Multiple VulnerabilitiesNessusCGI abuses8/8/20085/26/2025
high
33900VERITAS Storage Foundation NULL NTLMSSP Authentication Bypass (SYM08-015)NessusWindows8/15/20084/11/2022
critical
34029Kayako SupportSuite < 3.30.01 Multiple VulnerabilitiesNessusCGI abuses8/22/20084/11/2022
medium
34044PowerDNS Recursor 3.x < 3.1.6 DNS Predictable Transaction ID (TRXID) Cache PoisoningNessusDNS8/25/20087/24/2018
medium
61733TikiWiki unserialize() Function Arbitrary Code ExecutionNessusCGI abuses8/30/20124/11/2022
high
63687Google Doc Embedder Plugin for WordPress 'File' Parameter Traversal Arbitrary File DisclosureNessusCGI abuses1/24/20135/14/2025
medium
64714Oracle Application Express (Apex) Unspecified Issues (pre 2.2.1)NessusWeb Servers2/20/20136/12/2020
critical
64990Drupal 7.x < 7.20 On-Demand Image Derivative Generation Handling Resource Exhaustion DoSNessusCGI abuses3/4/20134/11/2022
medium
44945Cisco ASA 5500 Series Adaptive Security Appliance NTLMv1 Authentication Bypass (cisco-sa-20100217-asa)NessusFirewalls3/1/20103/23/2026
high
46222Cacti < 0.8.7f Multiple Input Validation VulnerabilitiesNessusCGI abuses5/4/20105/14/2025
high
47158MySQL Community Server < 5.1.48 Denial of ServiceNessusDatabases6/29/201011/15/2018
low
303510IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.4 (7267347)NessusWeb Servers3/25/20265/29/2026
medium
86425SolarWinds Log and Event Manager < 6.2.0 Multiple Remote Command Execution VulnerabilitiesNessusCGI abuses10/19/20151/19/2021
high
89725Jenkins < 1.642.2 / 1.650 Java Object Deserialization RCENessusGeneral3/7/20165/14/2025
critical
91993MySQL 5.5.x < 5.5.50 Multiple Vulnerabilities (July 2016 CPU)NessusDatabases7/20/20161/30/2026
high
91997MySQL 5.7.x < 5.7.13 Multiple VulnerabilitiesNessusDatabases7/20/20161/30/2026
high
70497Zabbix < 1.8.18rc1 / 2.0.9rc1 / 2.1.7 Multiple SQL InjectionsNessusCGI abuses10/18/20135/14/2025
medium
72185Cisco TelePresence Video Communication Server SIP DoSNessusCISCO1/28/20144/11/2022
high
72336Emerson Network Power Avocent MergePoint Unity KVM Switch < 1.14 / 1.18 download.php filename Parameter Directory TraversalNessusMisc.2/5/201411/26/2019
medium
31789OTRS SOAP Interface Unauthenticated Object ManipulationNessusCGI abuses4/8/20084/11/2022
high
153402Drupal 8.9.x < 8.9.19 / 9.1.x < 9.1.13 / 9.2.x < 9.2.6 Multiple Vulnerabilities (drupal-2021-09-15)NessusCGI abuses9/15/20214/11/2022
critical
19227Phpauction <= 2.5 Multiple VulnerabilitiesNessusCGI abuses7/20/20059/29/2025
high
33125Skype file: URI Handling Security Bypass Arbitrary Code Execution (uncredentialed check)NessusWindows6/6/20084/11/2022
high
33445trixbox Dashboard user/index.php langChoice Parameter Local File InclusionNessusCGI abuses7/9/20084/11/2022
high
35659IBM WebSphere Application Server 6.1 < Fix Pack 21 Multiple FlawsNessusWeb Servers2/12/20098/6/2018
medium
39007IBM DB2 < 9.5 Fix Pack 4 Multiple VulnerabilitiesNessusDatabases6/3/20094/11/2022
medium
39447Apache Tomcat RequestDispatcher Directory Traversal Arbitrary File AccessNessusCGI abuses6/18/20095/6/2024
medium
81492Tivoli Storage Manager Server Unauthorized Access VulnerabilityNessusMisc.2/24/20154/11/2022
medium
83053WordPress < 3.7.6 / 3.8.6 / 3.9.4 / 4.1.2 Multiple VulnerabilitiesNessusCGI abuses4/24/20155/14/2025
medium
213326Fortra FileCatalyst Direct Directory Traversal (CVE-2024-25154) (Version Check)NessusMisc.12/23/20241/23/2025
medium
122237ISC BIND Assertion Failure VulnerabilityNessusDNS2/15/201910/31/2019
high
10669A1Stats Multiple Script Traversal Arbitrary File AccessNessusCGI abuses5/14/20011/19/2021
medium
117588Apple TV < 12 Multiple VulnerabilitiesNessusMisc.9/18/20188/6/2024
high
16086IBProArcade index.php Arcade Module gameid Parameter SQL InjectionNessusCGI abuses1/2/20051/19/2021
high
19522AutoLinks Pro 'al_initialize.php alpath Parameter Remote File InclusionNessusCGI abuses8/29/20051/19/2021
medium
64459Samba < 3.5.21 / 3.6.12 / 4.0.2 SWAT Multiple VulnerabilitiesNessusMisc.2/4/201311/15/2018
medium
128177Cisco TelePresence VCS / Expressway Series < 12.5 REST API Server-Side Request Forgery VulnerabilityNessusCISCO8/27/20194/11/2022
medium
20241Google Search Appliance proxystylesheet Parameter Multiple Remote Vulnerabilities (XSS, Code Exec, ID)NessusCGI abuses11/22/20051/19/2021
high