| 271243 | Oracle Primavera P6 Enterprise Project Portfolio Management (2025 年 10 月 CPU) | Nessus | CGI abuses | 2025/10/23 | 2025/10/23 | high |
| 271368 | Multi-Router Looking Glass (MRLG) 緩衝區溢位弱點 (CVE-2014-3931) | Nessus | CGI abuses | 2025/10/24 | 2025/10/25 | critical |
| 272044 | ArcGIS Server 11.3 / 11.4 / 11.5 SQLi (CVE-2025-57870) | Nessus | CGI abuses | 2025/10/30 | 2025/10/30 | critical |
| 265756 | Dotnetnuke < 10.1.0 使用 url 進行設定檔反射式跨網站指令碼 (XSS) (CVE-2025-59821) | Nessus | CGI abuses | 2025/9/24 | 2026/1/21 | medium |
| 265948 | Dell Data Domain OS 命令插入 (DSA-2025-159) | Nessus | CGI abuses | 2025/9/26 | 2025/9/26 | high |
| 266405 | VMware vCenter Server 7.0.x < 7.0 U3w / 8.0.x < 8.0 U3g SMTP 標頭插入 (VMSA-2025-0016) | Nessus | Misc. | 2025/10/2 | 2025/10/3 | high |
| 267930 | CyberPanel < 2.3.8 RCE Direct Check (CVE-2024-51567) | Nessus | Misc. | 2025/10/7 | 2025/10/8 | critical |
| 27535 | IBM Lotus Domino IMAP 服務信箱名稱溢位 | Nessus | Gain a shell remotely | 2007/10/24 | 2022/4/7 | high |
| 275453 | SAP NetWeaver AS Java 資訊洩漏 (3643603) | Nessus | Web Servers | 2025/11/14 | 2025/11/14 | medium |
| 275454 | SAP NetWeaver AS ABAP 缺少授權檢查 (3643337) | Nessus | Web Servers | 2025/11/14 | 2025/11/14 | medium |
| 31726 | Sympa 格式錯誤的 Content-Type 標頭遠端 DoS | Nessus | CGI abuses | 2008/4/1 | 2022/4/11 | medium |
| 31732 | McAfee Common Management Agent < 3.6.0.595 UDP 封包處理格式字串 | Nessus | CGI abuses | 2008/4/3 | 2021/1/19 | high |
| 31738 | Apache-SSL ExpandCert() 函式憑證處理任意環境變數操控 | Nessus | Web Servers | 2008/4/3 | 2018/11/15 | high |
| 315661 | ISC BIND 9.11.0 < 9.18.49 / 9.11.3-S1 < 9.18.49-S1 / 9.18.0 < 9.18.49 / 9.18.11-S1 < 9.18.49-S1 / 9.20.0 < 9.20.23 / 9.20.9-S1 < 9.20.23-S1 / 9.21.0 < 9.21.22 宣告失敗 （cve-2026-5946） | Nessus | DNS | 2026/5/20 | 2026/5/26 | high |
| 31643 | DNN (DotNetNuke) 升級處理程序驗證金鑰產生弱點權限提升 | Nessus | CGI abuses | 2008/3/25 | 2025/5/14 | high |
| 31646 | Joomla! 自訂頁面 'cpage' 參數本機檔案引入 | Nessus | CGI abuses | 2008/3/25 | 2026/4/22 | high |
| 31648 | Microsoft IIS webhits.dll Hit-Highlighting 驗證繞過 | Nessus | Web Servers | 2008/3/25 | 2018/7/12 | medium |
| 32080 | WordPress index.php 'cat' 參數本機檔案引入 | Nessus | CGI abuses | 2008/4/29 | 2025/5/14 | medium |
| 32135 | Asterisk SIP 遠端驗證繞過 | Nessus | Misc. | 2008/5/7 | 2022/4/11 | medium |
| 318179 | Cisco 應用程式原則基礎架構控制器 DoS （cisco-sa-apic-dos-rNus8EFw） | Nessus | CISCO | 2026/6/2 | 2026/6/5 | medium |
| 31862 | Veritas Storage Foundation 多個服務遠端 DoS (SYM08-004) | Nessus | Denial of Service | 2008/4/15 | 2018/11/15 | low |
| 321516 | Mattermost 伺服器 10.11.x < 10.11.14 / 11.4.x < 11.4.4 / 11.5.x < 11.5.2 弱點 （MMSA-2026-00597） | Nessus | CGI abuses | 2026/6/18 | 2026/6/24 | medium |
| 321519 | Drupal 10.5.x < 10.5.12 / 10.6.x < 10.6.11 / 11.2.x < 11.2.14 / 11.3.x < 11.3.12 多個弱點 (drupal-2026-06-17) | Nessus | CGI abuses | 2026/6/18 | 2026/7/23 | medium |
| 318666 | Exim 4.88 < 4.99.4 資訊揭露 | Nessus | SMTP problems | 2026/6/4 | 2026/6/9 | medium |
| 318722 | Kibana 9.3.x < 9.3.3 SSRF （ESA-2026-40） | Nessus | CGI abuses | 2026/6/4 | 2026/6/8 | high |
| 318725 | Kibana 8.x < 8.19.16 DoS （ESA-2026-39） | Nessus | CGI abuses | 2026/6/4 | 2026/6/8 | medium |
| 318806 | Oracle 電子商務套件 （2026 年 5 月 CSPU） | Nessus | Misc. | 2026/6/5 | 2026/8/26 | high |
| 278526 | Unraid < 6.8.1 多個弱點 | Nessus | CGI abuses | 2025/12/12 | 2025/12/17 | critical |
| 278978 | Kibana 7.0.x < 8.19.8 / 9.0.x < 9.1.8 / 9.2.x < 9.2.2 XSS (ESA-2025-28) | Nessus | CGI abuses | 2025/12/17 | 2026/2/23 | medium |
| 27585 | Simple Machines Forum Search.php SQL 插入 | Nessus | CGI abuses | 2007/10/28 | 2022/4/11 | medium |
| 275872 | Kibana 8.12.x < 8.19.7 / 9.1.x < 9.1.7 / 9.2.x < 9.2.1 (ESA-2025-24) | Nessus | CGI abuses | 2025/11/20 | 2026/3/12 | medium |
| 286265 | ServiceNow Platform Jelly 範本插入 (CVE-2024-4879) | Nessus | CGI abuses | 2026/1/15 | 2026/2/11 | critical |
| 286268 | Gogs <= 0.13.3 多個弱點 | Nessus | Misc. | 2026/1/15 | 2026/2/19 | critical |
| 288281 | SAP NetWeaver AS ABAP 缺少授權檢查 (3688703) | Nessus | Web Servers | 2026/1/16 | 2026/2/10 | high |
| 29835 | Site@School Slideshow_full.php patches_name 參數 SQL 插入 | Nessus | CGI abuses | 2008/1/4 | 2021/1/19 | medium |
| 29854 | Bitweaver wiki/edit.php Suck_url 參數遍歷原始程式碼洩漏 | Nessus | CGI abuses | 2008/1/7 | 2022/4/11 | medium |
| 29868 | RunCMS Newbb_plus 模組標頭 SQL 插入 | Nessus | CGI abuses | 2008/1/7 | 2022/4/11 | medium |
| 298816 | ISC BIND 9.20.0 < 9.20.9 / 9.21.0 < 9.21.8 宣告失敗 (cve-2025-40775) | Nessus | DNS | 2026/2/12 | 2026/2/12 | high |
| 29897 | PortalApp forums.asp sortby 參數 SQL 插入 | Nessus | CGI abuses | 2008/1/9 | 2022/4/11 | high |
| 29924 | SAP DB / MaxDB Cons 程式任意命令執行 | Nessus | Databases | 2008/1/11 | 2022/4/11 | high |
| 29925 | IBM Lotus Domino < 7.0.2 FP3 不明 DoS | Nessus | Denial of Service | 2008/1/11 | 2022/4/11 | high |
| 29926 | Sun Java System Identity Manager 多個 XSS | Nessus | CGI abuses : XSS | 2008/1/11 | 2022/4/11 | medium |
| 299364 | WordPress「LA Studio Element Kit for Elementor」plugin < 1.6.0 透過後門程式造成未經驗證的權限提升 | Nessus | CGI abuses | 2026/2/18 | 2026/2/19 | critical |
| 305940 | SonicWall SMA 1000 系列 <= 12.4.3-03245 / 12.5.x <= 12.5.0-02283 多個弱點 (SNWLID-2026-0003) | Nessus | CGI abuses | 2026/4/10 | 2026/4/14 | high |
| 305982 | Dotnetnuke < 10.2.2 所有新安裝的 HostGUID 相同 (CVE-2026-40306) | Nessus | CGI abuses | 2026/4/10 | 2026/5/5 | medium |
| 306393 | Adobe Connect <= 12.10 多個弱點 (APSB26-37) | Nessus | CGI abuses | 2026/4/14 | 2026/5/5 | critical |
| 306602 | Drupal 10.5.x < 10.5.9 / 10.6.x < 10.6.7 / 11.2.x < 11.2.11 / 11.3.x < 11.3.7 多個弱點 (drupal-2026-04-15) | Nessus | CGI abuses | 2026/4/16 | 2026/4/20 | medium |
| 304390 | Metabase Enterprise < 1.54.22 / 1.55.x < 1.55.22 / 1.56.x < 1.56.22 / 1.57.x < 1.57.16 / 1.58.x < 1.58.10 / 1.59.x < 1.59.4 RCE (GHSA-fppj-vcm3-w229) | Nessus | CGI abuses | 2026/3/31 | 2026/4/1 | high |
| 304687 | Grafana 9.3.0 < 11.6.14 / 12.0.012.1.10 < 12.2.812.2.0 / 12.3.0 [] < [] / < 12.3.6 / 12.4.0 < 12.4.2 資訊洩漏 (CVE-2026-27877) | Nessus | Web Servers | 2026/4/2 | 2026/4/6 | high |
| 29981 | X7 Chat index.php day 參數 SQL 插入 | Nessus | CGI abuses | 2008/1/15 | 2022/4/11 | high |
