| 236972 | TYPO3 9.0.0 < 9.5.51 ELTS / 10.0.0 < 10.4.50 ELTS / 11.0.0 < 11.5.44 ELTS / 12.0.0 < 12.4.31 / 13.0.0 < 13.4.12 (TYPO3-CORE-SA-2025-011) | Nessus | CGI abuses | 5/20/2025 | 5/20/2025 | low |
| 23724 | Etomite CMS index.php id Parameter SQL Injection | Nessus | CGI abuses | 11/23/2006 | 4/11/2022 | medium |
| 24322 | DevTrack Web Service UserName Field SQL Injection | Nessus | CGI abuses | 2/9/2007 | 1/19/2021 | high |
| 243239 | NUUO NVRmini2 <= 3.11.x Unrestricted Upload RCE | Nessus | Misc. | 7/31/2025 | 7/31/2025 | critical |
| 23927 | PHP-Update blog.php Variable Overwriting Arbitrary Code Execution | Nessus | CGI abuses | 12/20/2006 | 4/11/2022 | high |
| 23937 | IBM DB2 < 8.1 Fix Pack 14 Multiple Vulnerabilities | Nessus | Databases | 12/23/2006 | 4/11/2022 | medium |
| 24266 | Drupal Comment Module comment_form_add_preview() Function Arbitrary Code Execution | Nessus | CGI abuses | 2/1/2007 | 4/11/2022 | medium |
| 242965 | Pi-Hole Web 4.3.2 < 4.3.3 RCE | Nessus | CGI abuses | 7/29/2025 | 7/29/2025 | high |
| 29187 | Plumtree Portal User Object User Enumeration | Nessus | CGI abuses | 12/4/2007 | 4/11/2022 | medium |
| 29216 | Squid < 2.6.STABLE18 Cache Update Reply Unspecified DoS | Nessus | Firewalls | 12/4/2007 | 11/15/2018 | medium |
| 29219 | Mort Bay Jetty Dump Servlet (webapps/test/jsp/dump.jsp) XSS | Nessus | CGI abuses : XSS | 12/5/2007 | 4/11/2022 | medium |
| 29221 | NetScaler Web Management Interface IP Address Cookie Information Disclosure | Nessus | Web Servers | 12/6/2007 | 9/29/2025 | medium |
| 29852 | Mort Bay Jetty URL Multiple Slash Character Information Disclosure | Nessus | CGI abuses | 1/7/2008 | 4/11/2022 | medium |
| 298817 | ISC BIND 9.16.0 < 9.18.41 / 9.16.8-S1 < 9.18.41-S1 / 9.18.0 < 9.18.41 / 9.18.11-S1 < 9.18.41-S1 / 9.20.0 < 9.20.15 / 9.20.9-S1 < 9.20.15-S1 / 9.21.0 < 9.21.14 Vulnerability (cve-2025-40780) | Nessus | DNS | 2/12/2026 | 2/12/2026 | high |
| 298819 | ISC BIND 9.11.0 < 9.18.41 / 9.11.3-S1 < 9.18.41-S1 / 9.18.0 < 9.18.41 / 9.18.11-S1 < 9.18.41-S1 / 9.20.0 < 9.20.15 / 9.20.9-S1 < 9.20.15-S1 / 9.21.0 < 9.21.14 Vulnerability (cve-2025-40778) | Nessus | DNS | 2/12/2026 | 2/12/2026 | high |
| 298971 | Neo4j < 2026.01 XSS Vulnerability (CVE-2026-1337) | Nessus | CGI abuses | 2/13/2026 | 3/2/2026 | low |
| 29722 | Centreon 'fileOreonConf' Parameter File Include Vulnerabilities | Nessus | CGI abuses | 12/17/2007 | 4/22/2026 | high |
| 29726 | PeerCast servhs.cpp handshakeHTTP Function SOURCE Request Remote Overflow | Nessus | Peer-To-Peer File Sharing | 12/18/2007 | 11/15/2018 | high |
| 29728 | RaidenHTTPD workspace.php ulang Parameter Local File Inclusion | Nessus | CGI abuses | 12/19/2007 | 1/19/2021 | high |
| 297827 | Dotnetnuke < 9.13.10 / 10.0.x < 10.02.00 Stored XSS via Module Title (CVE-2026-24838) | Nessus | CGI abuses | 2/4/2026 | 4/30/2026 | medium |
| 297830 | Dotnetnuke 9.0.x < 9.13.10 / 10.0.x < 10.02.00 Potential XSS vulnerability in modules' header and footer (CVE-2026-24784) | Nessus | CGI abuses | 2/4/2026 | 2/6/2026 | medium |
| 296366 | Oracle Primavera Gateway (January 2026 CPU) | Nessus | CGI abuses | 1/23/2026 | 4/30/2026 | medium |
| 29800 | PMOS Help Desk form.php Arbitrary Code Execution | Nessus | CGI abuses | 12/26/2007 | 4/11/2022 | high |
| 298241 | SmarterMail < 100.0.9511 Unauthenticated RCE via ConnectToHub API (CVE-2026-24423) | Nessus | CGI abuses | 2/6/2026 | 2/27/2026 | critical |
| 310111 | Mattermost Server 10.11.x < 10.11.13 Improper Validation (MMSA-2026-00603) | Nessus | CGI abuses | 4/24/2026 | 4/24/2026 | low |
| 306168 | Dotnetnuke < 10.2.2 Stored cross-site-scripting (XSS) via SVG upload (CVE-2026-40321) | Nessus | CGI abuses | 4/13/2026 | 4/13/2026 | high |
| 306390 | Adobe Experience Manager 6.0 < 11.8 Multiple Arbitrary code execution (APSB26-34) | Nessus | Misc. | 4/14/2026 | 4/20/2026 | medium |
| 304686 | Grafana 12.1.0 < 12.1.10 / 12.2.0 < 12.2.8 / 12.3.0 < 12.3.6 / 12.4.0 < 12.4.2 DoS (CVE-2026-27880) | Nessus | Web Servers | 4/2/2026 | 4/6/2026 | high |
| 303596 | ISC BIND 9.20.0 < 9.20.21 / 9.20.9-S1 < 9.20.21-S1 / 9.21.0 < 9.21.20 Vulnerability (cve-2026-3591) | Nessus | DNS | 3/25/2026 | 3/27/2026 | medium |
| 303598 | ISC BIND 9.20.0 < 9.20.21 / 9.20.9-S1 < 9.20.21-S1 / 9.21.0 < 9.21.20 Vulnerability (cve-2026-3119) | Nessus | DNS | 3/25/2026 | 3/27/2026 | medium |
| 303601 | Atlassian Bamboo 9.6.x < 9.6.24 / 10.x < 10.2.16 / 11.x / 12.x < 12.1.3 Multiple Vulnerabilities | Nessus | CGI abuses | 3/25/2026 | 3/27/2026 | high |
| 305145 | Cisco Nexus Dashboard Server-Side Request Forgery (cisco-sa-nd-ssrf-NAen4O7r) | Nessus | CISCO | 4/7/2026 | 4/30/2026 | medium |
| 306732 | SAP NetWeaver AS ABAP Open Redirect (3692004) | Nessus | Web Servers | 4/16/2026 | 4/20/2026 | medium |
| 31117 | ProjectPier index.php Multiple Parameter XSS | Nessus | CGI abuses : XSS | 2/19/2008 | 4/11/2022 | medium |
| 31134 | ListManager < 9.3b / 9.2c / 8.95d Multiple Vulnerabilities | Nessus | CGI abuses | 2/22/2008 | 1/19/2021 | medium |
| 311428 | Dell iDRAC10 < 1.30.10.50 Insufficiently Protected Credentials (DSA-2026-187) | Nessus | CGI abuses | 5/1/2026 | 5/4/2026 | high |
| 316827 | Joomla 3.0.x < 5.4.6 / 6.0.x < 6.1.1 Joomla 6.1.1 & 5.4.6 Security & Bugfix Release (5954-joomla-6-1-1-5-4-6-security-bugfix-release) | Nessus | CGI abuses | 5/26/2026 | 5/29/2026 | medium |
| 31683 | Multiple Vendor NIS rpc.ypupdated YP Map Update Arbitrary Remote Command Execution | Nessus | RPC | 3/28/2008 | 6/12/2020 | high |
| 317392 | Mattermost Server 10.11.x < 10.11.15 / 11.4.x < 11.4.5 / 11.5.x < 11.5.4 / 11.6.x < 11.6.1 Path Traversal (MMSA-2026-00640) | Nessus | CGI abuses | 5/28/2026 | 6/1/2026 | critical |
| 315203 | MantisBT 2.23.0 < 2.28.2 Private Bugnote Attachment Content Leak (GHSA-pw5x-2mf9-3xc8) | Nessus | CGI abuses | 5/18/2026 | 5/19/2026 | high |
| 315662 | ISC BIND 9.20.0 < 9.20.23 / 9.20.9-S1 < 9.20.23-S1 / 9.21.0 < 9.21.22 Vulnerability (cve-2026-5947) | Nessus | DNS | 5/20/2026 | 5/26/2026 | medium |
| 314315 | Cisco Prime Infrastructure Information Disclosure (cisco-sa-pi-unauth-infodiscl-LFnLgmey) | Nessus | CISCO | 5/12/2026 | 5/15/2026 | medium |
| 313113 | PHP 8.2.x < 8.2.31 Multiple Vulnerabilities | Nessus | CGI abuses | 5/7/2026 | 5/15/2026 | critical |
| 31650 | my_gallery Plugin for e107 dload.php file Parameter Arbitrary File PHP Source Disclosure | Nessus | CGI abuses | 3/26/2008 | 5/14/2025 | medium |
| 31800 | Default Password (dottie) for 'root' Account | Nessus | Default Unix Accounts | 4/11/2008 | 4/11/2022 | critical |
| 318064 | ManageEngine ADSelfService Plus < Build 6525 Authenticated RCE | Nessus | CGI abuses | 5/31/2026 | 9/18/2026 | high |
| 32030 | XOOPS Article Module article.php id Parameter SQL Injection | Nessus | CGI abuses | 4/23/2008 | 4/11/2022 | high |
| 34729 | ClamAV < 0.94.1 get_unicode_name() Off-by-One Buffer Overflow | Nessus | Gain a shell remotely | 11/10/2008 | 11/15/2018 | high |
| 337682 | VMware ESX 8.0 / 9.0 / 9.1 Out-of-Bounds Read (VMSA-2026-0006) | Nessus | Misc. | 8/18/2026 | 8/20/2026 | high |
| 34162 | MySQL Enterprise Server 5.0 < 5.0.66 Empty Bit-String Literal Token SQL Statement DoS | Nessus | Databases | 9/11/2008 | 11/15/2018 | medium |
