| 114612 | NAKIVO Backup & Replication < 11.0.0.88174 Arbitrary File Read | Web App Scanning | Component Vulnerability | 3/3/2025 | 3/3/2025 | high |
| 113221 | VMware Workspace ONE Access / VMware Identity Manager Server-Side Template Injection | Web App Scanning | Component Vulnerability | 4/21/2022 | 4/21/2022 | critical |
| 114042 | Adobe ColdFusion Remote Code Execution | Web App Scanning | Component Vulnerability | 10/5/2023 | 3/25/2024 | critical |
| 114950 | CrushFTP < 10.8.5 / 11.x < 11.3.4_23 Race Condition | Web App Scanning | Component Vulnerability | 9/3/2025 | 9/3/2025 | critical |
| 98528 | Social Warfare Plugin for WordPress < 3.5.3 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/8/2019 | 3/14/2023 | medium |
| 114935 | Advantive Veracore < 2025.1.1.3 SQL Injection | Web App Scanning | Component Vulnerability | 8/5/2025 | 8/5/2025 | high |
| 114977 | ProjectSend < r1720 Improper Authorization | Web App Scanning | Component Vulnerability | 10/3/2025 | 10/3/2025 | critical |
| 114381 | Apache Hugegraph 1.0.0 < 1.3.0 Remote Command Execution | Web App Scanning | Component Vulnerability | 7/18/2024 | 7/29/2024 | critical |
| 114214 | ConnectWise ScreenConnect < 23.9.8 Authentication Bypass | Web App Scanning | Component Vulnerability | 2/21/2024 | 2/27/2024 | critical |
| 114551 | Roundcube Webmail < 1.4.14 Cross-Site-Scripting | Web App Scanning | Component Vulnerability | 1/17/2025 | 1/17/2025 | medium |
| 112726 | Apache Struts 2.3.5 < 2.3.32 / 2.5.x < 2.5.10.1 Remote Code Execution (S2-045 / S2-046) | Web App Scanning | Component Vulnerability | 3/30/2021 | 12/19/2024 | critical |
| 114384 | Progress Kemp LoadMaster Remote Command Execution | Web App Scanning | Component Vulnerability | 7/22/2024 | 7/22/2024 | critical |
| 113311 | Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 31 / 9.0.0 < 9.0.0 Patch 24 Command Injection | Web App Scanning | Component Vulnerability | 7/18/2022 | 7/18/2022 | high |
| 115003 | Fortra GoAnywhere MFT License Servlet Deserialization Vulnerability | Web App Scanning | Component Vulnerability | 10/21/2025 | 10/21/2025 | critical |
| 98252 | WordPress 4.5.x < 4.5.5 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 11/5/2018 | 3/14/2023 | critical |
| 98255 | WordPress 4.2.x < 4.2.11 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 11/5/2018 | 3/14/2023 | critical |
| 98259 | WordPress 3.8.x < 3.8.17 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 11/5/2018 | 3/14/2023 | critical |
| 113903 | Adobe ColdFusion ComponentFilter Remote Code Execution | Web App Scanning | Component Vulnerability | 5/31/2023 | 10/5/2023 | critical |
| 114197 | Openfire Path Traversal | Web App Scanning | Component Vulnerability | 2/7/2024 | 2/7/2024 | high |
| 114923 | Microsoft SharePoint Remote Code Execution | Web App Scanning | Component Vulnerability | 7/24/2025 | 10/7/2025 | critical |
| 115004 | Zimbra Collaboration 10.1.x < 10.1.5 Stored Cross-Site Scripting | Web App Scanning | Component Vulnerability | 10/21/2025 | 10/21/2025 | medium |
| 113015 | Apache 2.4.49 < 2.4.51 Path Traversal | Web App Scanning | Component Vulnerability | 10/8/2021 | 3/14/2023 | critical |
| 115019 | Adobe Commerce / Magento Insecure Deserialization (SessionReaper) | Web App Scanning | Component Vulnerability | 10/24/2025 | 10/24/2025 | critical |
| 114060 | Apache Tomcat 11.0.0-M1 < 11.0.0-M12 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 10/12/2023 | 10/30/2023 | medium |
| 114554 | Roundcube Webmail 1.5.x < 1.5.8 Multiples Vulnerabilities | Web App Scanning | Component Vulnerability | 1/17/2025 | 1/17/2025 | critical |
| 113014 | Apache 2.4.49 < 2.4.50 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 10/6/2021 | 3/14/2023 | high |
| 113044 | GitLab 11.9.x < 13.8.8 / 13.9.x < 13.9.6 / 13.10.x < 13.10.3 Remote Code Execution | Web App Scanning | Component Vulnerability | 11/9/2021 | 3/23/2022 | critical |
| 114056 | Atlassian Confluence 8.x < 8.3.3 Privilege Escalation | Web App Scanning | Component Vulnerability | 10/5/2023 | 11/7/2023 | critical |
| 114300 | PHP CGI Argument Injection Remote Code Execution | Web App Scanning | Web Applications | 6/14/2024 | 6/14/2024 | critical |
| 114656 | Apache Tomcat 11.0.0-M1 < 11.0.3 Remote Code Execution | Web App Scanning | Component Vulnerability | 3/12/2025 | 3/12/2025 | critical |
| 114658 | Apache Tomcat 9.0.0-M1 < 9.0.99 Remote Code Execution | Web App Scanning | Component Vulnerability | 3/12/2025 | 3/12/2025 | critical |
| 114912 | XWiki Platform SolrSearch Macro Remote Code Execution | Web App Scanning | Component Vulnerability | 7/10/2025 | 7/10/2025 | critical |
| 98216 | Drupal < 7.58 / 8.x < 8.3.9 / 8.4.x < 8.4.6 / 8.5.x < 8.5.1 Remote Code Execution | Web App Scanning | Component Vulnerability | 5/22/2018 | 9/7/2021 | critical |
| 98564 | Drupal 8.5.x < 8.5.1 Remote Code Execution Vulnerability | Web App Scanning | Component Vulnerability | 11/5/2018 | 3/14/2023 | critical |
| 98567 | Drupal 8.2.x < 8.5.1 Remote Code Execution Vulnerability | Web App Scanning | Component Vulnerability | 11/5/2018 | 3/14/2023 | critical |
| 98569 | Drupal 8.0.x < 8.5.1 Remote Code Execution Vulnerability | Web App Scanning | Component Vulnerability | 11/5/2018 | 3/14/2023 | critical |
| 501772 | Rockwell Automation Stratix and ArmorStratix Switches Improper Input Validation (CVE-2018-0172) | Tenable OT Security | Tenable.ot | 11/15/2023 | 8/9/2025 | high |
| 502504 | Qnap QTS Cross-site Scripting (CVE-2018-19943) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502412 | Synology DiskStation Manager Sudo Off-by-one Error (CVE-2021-3156) | Tenable OT Security | Tenable.ot | 10/1/2024 | 10/1/2024 | high |
| 502552 | Qnap QTS Improper Input Validation (CVE-2019-7193) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 502811 | Cisco Products Uncontrolled Resource Consumption (CVE-2023-44487) | Tenable OT Security | Tenable.ot | 1/6/2025 | 10/16/2025 | high |
| 501771 | Rockwell Automation Stratix Industrial Managed Ethernet Switch 7Pk Errors (CVE-2018-0155) | Tenable OT Security | Tenable.ot | 11/15/2023 | 9/4/2024 | high |
| 500605 | Siemens SIMATIC CP 1543-1 Improper Input Validation (CVE-2016-8562) | Tenable OT Security | Tenable.ot | 3/15/2022 | 3/10/2025 | high |
| 502506 | Qnap QTS Command Injection (CVE-2020-2509) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 503437 | Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use of Uninitialized Resource (CVE-2024-50302) | Tenable OT Security | Tenable.ot | 10/27/2025 | 10/30/2025 | medium |
| 502519 | Qnap QTS Bash OS Command Injection (CVE-2014-6271) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 501773 | Rockwell Automation Stratix and ArmorStratix Switches Improper Input Validation (CVE-2018-0174) | Tenable OT Security | Tenable.ot | 11/15/2023 | 8/9/2025 | high |
| 501769 | Rockwell Automation Stratix and ArmorStratix Switches Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2018-0167) | Tenable OT Security | Tenable.ot | 11/15/2023 | 8/9/2025 | high |
| 501767 | Rockwell Automation Stratix and ArmorStratix Switches Improper Input Validation (CVE-2018-0158) | Tenable OT Security | Tenable.ot | 11/15/2023 | 8/9/2025 | high |
| 503813 | Siemens SIMATIC Devices Stack-based Buffer Overflow (CVE-2023-4911) | Tenable OT Security | Tenable.ot | 10/29/2025 | 10/30/2025 | high |
