| 26015 | Hexamail 服务器 pop3 服务 USER 命令远程溢出 | Nessus | Windows | 2007/9/11 | 2018/7/12 | critical |
| 26057 | lighttpd mod_fastcgi HTTP 请求头远程溢出 | Nessus | Web Servers | 2007/9/17 | 2018/7/13 | medium |
| 265752 | Dotnetnuke < 10.1.0 通过查询参数在匿名客户端上加载未使用的主题 (CVE-2025-59535) | Nessus | CGI abuses | 2025/9/23 | 2026/1/21 | medium |
| 266292 | Joomla 4.0.x < 4.4.14 / 5.0.x < 5.3.4 Joomla 5.3.4 安全和缺陷补丁版本 (5936-joomla-5-3-4-security-bugfix-release) | Nessus | CGI abuses | 2025/9/30 | 2026/1/21 | high |
| 271393 | Oracle MySQL Cluster 8.4.x < 8.4.7 2025 年 10 月 CPU | Nessus | Databases | 2025/10/24 | 2026/2/24 | critical |
| 271394 | Oracle MySQL Cluster 9.x.x < 9.5.0 2025 年 10 月 CPU | Nessus | Databases | 2025/10/24 | 2026/2/24 | critical |
| 270349 | Adobe Connect <= 12.9 多种漏洞 (APSB25-70) | Nessus | CGI abuses | 2025/10/14 | 2026/4/30 | critical |
| 275612 | SolarWinds Serv-U 15.5.3 多种漏洞 | Nessus | FTP | 2025/11/18 | 2026/3/3 | critical |
| 27598 | Perdition IMAPD IMAP 标签远程格式字符串任意代码执行 | Nessus | Gain a shell remotely | 2007/11/1 | 2018/11/15 | high |
| 272042 | Squid < 7.2 信息泄露 (SQUID-2025:2) | Nessus | Firewalls | 2025/10/30 | 2026/7/29 | critical |
| 282478 | MongoDB 未经认证未初始化的堆内存泄漏 (MongoBleed)CVE-2025-14847直接检查 | Nessus | CGI abuses | 2026/1/8 | 2026/9/10 | high |
| 28333 | Ruby on Rails 多种方法会话固定 | Nessus | Web Servers | 2007/11/28 | 2022/4/11 | medium |
| 278110 | Mattermost Server 10.5.x <= 10.5.12 / 10.11.x <= 10.11.4 / 10.12.x <= 10.12.1 / 11.0.x <= 11.0.3 不当身份验证 (MMSA-2025-00547) | Nessus | CGI abuses | 2025/12/10 | 2026/2/27 | critical |
| 27856 | IBM Lotus Domino < 6.5.6 FP2 多个漏洞 | Nessus | Gain a shell remotely | 2007/11/10 | 2022/4/11 | critical |
| 28376 | Rendezvous < 8.0.0 构建的数据包远程 DoS | Nessus | Denial of Service | 2007/12/2 | 2020/9/21 | high |
| 28227 | IBM DB2 < 9 Fix Pack 4 多个漏洞 | Nessus | Databases | 2007/11/16 | 2022/4/11 | critical |
| 29726 | PeerCast servhs.cpp handshakeHTTP 函数 SOURCE 请求远程溢出 | Nessus | Peer-To-Peer File Sharing | 2007/12/18 | 2018/11/15 | high |
| 297827 | Dotnetnuke < 9.13.10 / 10.0.x < 10.02.00 通过模块标题存储的 XSS (CVE-2026-24838) | Nessus | CGI abuses | 2026/2/4 | 2026/4/30 | medium |
| 297830 | Dotnetnuke 9.0.x < 9.13.10 / 10.0.x < 10.02.00 模块的页眉和页脚中的潜在 XSS 漏洞 (CVE-2026-24784] | Nessus | CGI abuses | 2026/2/4 | 2026/2/6 | medium |
| 298241 | SmarterMail < 100.0.9511 通过 ConnectToHub API 实现未经身份验证的 RCE(CVE-2026-24423) | Nessus | CGI abuses | 2026/2/6 | 2026/2/27 | critical |
| 317392 | Mattermost 服务器 10.11.x < 10.11.15 / 11.4.x < 11.4.5 / 11.5.x < 11.5.4 / 11.6.x < 11.6.1 路径遍历 （MMSA-2026-00640） | Nessus | CGI abuses | 2026/5/28 | 2026/6/1 | critical |
| 31800 | “root”帐户的默认密码 (dottie) | Nessus | Default Unix Accounts | 2008/4/11 | 2022/4/11 | critical |
| 318064 | ManageEngine ADSelfService Plus < Build 6525 经验证的 RCE | Nessus | CGI abuses | 2026/5/31 | 2026/9/18 | high |
| 313113 | PHP 8.2.x < 8.2.31 多个漏洞 | Nessus | CGI abuses | 2026/5/7 | 2026/5/15 | critical |
| 316827 | Joomla < / < Joomla 6.1.1 > 5.4.6 安全和缺陷补丁版本 （5954-joomla-6-1-1-5-4-6-security-bugfix-release） 6.1.16.0.x5.4.63.0.x | Nessus | CGI abuses | 2026/5/26 | 2026/5/29 | medium |
| 31683 | 多个供应商 NIS rpc.ypupdated YP 映射更新任意远程命令执行 | Nessus | RPC | 2008/3/28 | 2020/6/12 | high |
| 314315 | Cisco Prime Infrastructure 信息泄露 （cisco-sa-pi-unauth-infodiscl-LFnLgmey） | Nessus | CISCO | 2026/5/12 | 2026/5/15 | medium |
| 315203 | MantisBT 2.23.0 < 2.28.2 隐私缺陷注释附件内容泄漏 （GHSA-pw5x-2mf9-3xc8） | Nessus | CGI abuses | 2026/5/18 | 2026/5/19 | high |
| 315662 | ISC BIND 9.20.0 < 9.20.23 / 9.20.9-S1 < 9.20.23-S1 / 9.21.0 < 9.21.22 漏洞 (cve-2026-5947) | Nessus | DNS | 2026/5/20 | 2026/5/26 | medium |
| 327410 | Mitel 6800 / 6900 / 6900w 系列 SIP 电话参数注入漏洞 （CVE-2024-41710） | Nessus | Misc. | 2026/7/16 | 2026/7/17 | high |
| 327605 | SAP NetWeaver AS Java XSS in 配置向导 （3748227） | Nessus | Web Servers | 2026/7/17 | 2026/7/20 | high |
| 320859 | SAP NetWeaver AS ABAP 内存损坏 (3717897) | Nessus | Web Servers | 2026/6/12 | 2026/6/15 | critical |
| 320860 | SAP NetWeaver AS Java 反射型 XSS （3723655） | Nessus | Web Servers | 2026/6/12 | 2026/6/15 | medium |
| 321187 | Pi-Hole Web 6.x < 6.4.2 （核心）本地权限升级 （CVE-2026-41489） | Nessus | CGI abuses | 2026/6/16 | 2026/6/17 | high |
| 32121 | Sun Java System Directory Server bind-dn 远程权限升级 | Nessus | Misc. | 2008/5/1 | 2018/11/15 | medium |
| 32137 | MySQL 4.1 < 4.1.24 MyISAM 创建表格权限检查绕过 | Nessus | Databases | 2008/5/9 | 2018/7/16 | low |
| 32138 | MySQL Enterprise Server 5.0 < 5.0.60 MyISAM CREATE TABLE 权限检查绕过 | Nessus | Databases | 2008/5/9 | 2018/7/16 | low |
| 321514 | Mattermost 服务器10.11.x< 10.11.16 / 11.5.x < 11.5.5 / 11.6.x < 11.6.2 多个漏洞 （MMSA-2026-00616 / / MMSA-2026-00649 / MMSA-2026-00661MMSA-2026-00662MMSA-2026-00655MMSA-2026-00656 ） MMSA-2026-00665 | Nessus | CGI abuses | 2026/6/18 | 2026/9/18 | high |
| 321523 | Joomla! 扩展“JCE”< 2.9.99.5 远程代码执行 | Nessus | CGI abuses | 2026/6/18 | 2026/9/18 | critical |
| 32316 | Gentoo Linux /etc/conf.d/firebird 上的 Firebird 调用 ISC_PASSWORD 认证绕过 | Nessus | Databases | 2008/5/14 | 2022/4/11 | high |
| 32194 | SAP MaxDB 多种漏洞 | Nessus | Databases | 2008/5/9 | 2022/4/11 | critical |
| 322276 | IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.7 （7277536） | Nessus | Web Servers | 2026/6/24 | 2026/7/15 | high |
| 326283 | Kibana 8.x < 8.16.3 / 8.17.x < 8.17.2 授权绕过 （ESA-2026-51） | Nessus | CGI abuses | 2026/7/10 | 2026/8/24 | medium |
| 328875 | IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.8 DoS （7280695） | Nessus | Web Servers | 2026/7/22 | 2026/8/5 | high |
| 329320 | Grafana Labs 12.4.0 < 12.4.4 / 13.0.0 < 13.0.2 多个漏洞 | Nessus | Web Servers | 2026/7/24 | 2026/7/27 | medium |
| 324980 | PHP 8.3.x < 8.3.32 多个漏洞 | Nessus | CGI abuses | 2026/7/3 | 2026/7/18 | medium |
| 34729 | ClamAV < 0.94.1 get_unicode_name() 差一缓冲区溢出 | Nessus | Gain a shell remotely | 2008/11/10 | 2018/11/15 | high |
| 347960 | IBM Cognos Analytics 12.0.4 < 12.0.4 FP3 / 12.1.x < 12.1.3 FP2 多种漏洞 （7287209） | Nessus | CGI abuses | 2026/9/18 | 2026/9/21 | high |
| 349674 | PHP 8.5.x < 8.5.11 多个漏洞 | Nessus | CGI abuses | 2026/9/24 | 2026/10/2 | medium |
| 351486 | Kibana 8.x < 8.19.22 / 9.0.x < 9.4.7 / 9.5.x < 9.5.3 缺少授权 （ESA-2026-139） | Nessus | CGI abuses | 2026/9/30 | 2026/10/2 | medium |
