Atomicorp WAF Research Notes
Research Update - 2026-07-02
Atomicorp WAF Research Notes document selected engineering observations, testing results, attack-pattern analysis, and WAF rule interactions.
The entries published in this update represent research notes produced during ongoing analysis activities.
These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.
Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.
Presence means a positive research finding was published. Absence means no conclusion should be drawn.
CVE Notes Published in This Update
| CVE | Vulnerability Name | Rules Observed |
|---|---|---|
| CVE-2013-5755 | Yealink VoIP Phone SIP-T38G - Remote Command Execution | 344370 , 390724 , 390726 , 392647 |
| CVE-2014-8877 | WordPress Plugin CM Download Manager 2.0.0 - Code Injection | 340087 , 340095 , 390726 , 392301 , 392647 , 392648 |
| CVE-2019-4013 | IBM Bigfix Platform 9.5.9.62 - Arbitrary File Upload | 392301 |
| CVE-2012-1259 | Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities | 340003 , 340147 , 340148 , 340156 , 341245 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 , 390727 , 392301 , 392648 |
| CVE-2013-2681 | Cisco Linksys E4200 - Multiple Vulnerabilities | 392301 |
| CVE-2013-7137 | Burden 1.8 - Authentication Bypass | 390727 , 392301 , 392648 |
| CVE-2014-8673 | SO Planning 1.32 - Multiple Vulnerabilities | 331028 , 340016 , 340017 , 340144 , 340155 , 340156 , 340157 , 340159 , 341155 , 341245 , 344363 , 344370 , 360147 , 360148 , 360153 , 390726 , 392647 |
| CVE-2014-9148 | Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities | 340007 , 340156 , 341145 , 344360 , 380026 , 380122 , 390709 , 390720 , 390726 , 392647 |
| CVE-2015-3933 | GeniXCMS 0.0.3 - 'register.php' SQL Injection | 331028 , 331702 , 340016 , 340017 , 340155 , 340157 , 340159 , 341155 , 341245 , 344365 , 360147 , 360148 , 360152 , 380026 , 390720 , 390724 , 390726 , 392647 |
| CVE-2015-4664 | Xceedium Xsuite - Multiple Vulnerabilities | 320464 , 320465 , 333141 , 340023 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 347198 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2015-4667 | Xceedium Xsuite - Multiple Vulnerabilities | 320464 , 320465 , 333141 , 340023 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 347198 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2015-6970 | Bosch Security Systems Dinion NBN-498 - Web Interface XML Injection | 390726 , 392301 , 392647 , 392648 |
| CVE-2016-6600 | WebNMS Framework Server 5.2/5.2 SP1 - Multiple Vulnerabilities | 390727 , 392301 , 392648 |
| CVE-2016-6602 | WebNMS Framework Server 5.2/5.2 SP1 - Multiple Vulnerabilities | 390727 , 392301 , 392648 |
| CVE-2016-6603 | WebNMS Framework Server 5.2/5.2 SP1 - Multiple Vulnerabilities | 390727 , 392301 , 392648 |
| CVE-2016-9682 | Sonicwall Secure Remote Access 8.1.0.2-14sv - Command Injection | 390727 , 392301 , 392648 |
| CVE-2017-17970 | Muviko 1.1 - SQL Injection | 340016 , 340017 , 340144 , 340156 , 340157 , 340159 , 341245 , 360147 , 360148 , 380026 , 380122 , 390727 , 392301 , 392648 |
| CVE-2017-17976 | PerfexCRM 1.9.7 - Arbitrary File Upload | 392301 |
| CVE-2017-17999 | RISE 1.9 - 'search' SQL Injection | 341245 , 380026 , 380122 , 390724 |
| CVE-2017-18001 | Trustwave SWG 11.8.0.27 - SSH Unauthorized Access | 330039 , 330791 , 340152 |
| CVE-2018-11535 | Sitemakin SLAC 1.0 - 'my_item_search' SQL Injection | 331028 , 340016 , 340155 , 340157 , 340159 , 341155 , 341245 , 342259 , 344370 , 345493 , 360147 , 360148 , 380026 |
| CVE-2018-12596 | Ektron CMS 9.20 SP2 - Improper Access Restrictions | 390727 , 392301 , 392648 |
| CVE-2018-15534 | Geutebrueck re_porter 7.8.974.20 - Credential Disclosure | 390727 , 392301 , 392648 |
| CVE-2018-18923 | Ticketly 1.0 - 'kind_id' SQL Injection | 340156 , 380122 |
| CVE-2018-7538 | Tuleap 9.17.99.189 - Blind SQL Injection | 341245 , 344370 , 380026 , 380122 |
| CVE-2018-7841 | Schneider Electric U.Motion Builder 1.3.4 - 'track_import_export.php object_id' Unauthenticated Command Injection | 344364 , 344366 |
| CVE-2018-9160 | SickRage < v2018.03.09 - Clear-Text Credentials HTTP Response | 390727 , 392301 , 392648 |
| CVE-2019-16693 | phpIPAM 1.4 - SQL-Injection | 340016 , 340017 , 340157 |
| CVE-2019-1935 | Cisco UCS Director_ Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilities | 344362 , 344363 , 344370 , 345493 , 350147 , 360151 , 390724 , 390727 , 392301 , 392648 |
| CVE-2019-1937 | Cisco UCS Director_ Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilities | 344362 , 344363 , 344370 , 345493 , 350147 , 360151 , 390724 , 390727 , 392301 , 392648 |
| CVE-2019-19740 | Octeth Oempro 4.8 - 'CampaignID' SQL Injection | 392301 |
| CVE-2020-18662 | Gnuboard5 5.3.2.8 - SQL Injection | 344366 , 380122 |
| CVE-2020-24193 | Daily Tracker System 1.0 - Authentication Bypass | 340145 , 340156 , 341145 , 345493 , 390572 |
| CVE-2020-25494 | SCO Openserver 5.0.7 - 'outputform' Command Injection | 344364 , 344366 |
| CVE-2020-35545 | Spotweb 1.4.9 - 'search' SQL Injection | 340016 , 341245 , 380026 , 380122 |
| CVE-2021-3278 | Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass | 340156 , 345493 |
| CVE-2021-40617 | openSIS Community Edition 8.0 - SQL Injection | 340145 , 340156 , 341145 , 341245 , 390727 , 392301 , 392648 |
| CVE-2021-42325 | Froxlor 0.10.29.1 - SQL Injection (Authenticated) | 344370 , 350147 , 390724 |
| CVE-2021-43140 | Simple Subscription Website 1.0 - SQLi Authentication Bypass | 340145 , 340156 , 341145 , 345493 , 390572 |
| CVE-2021-44567 | RosarioSIS 7.6 - SQL Injection | 392301 |
| CVE-2022-0332 | Moodle 3.11.4 - SQL Injection | 340017 , 340157 , 341245 , 344361 , 360147 , 360148 , 380026 , 390727 , 392301 , 392648 |
| CVE-2022-2840 | Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi | 340016 , 340017 , 340144 , 341155 , 360147 , 360148 , 380122 |
| CVE-2022-34128 | GLPI Cartography Plugin v6.0.0 - Unauthenticated Remote Code Execution (RCE) | 392301 |
| CVE-2022-38580 | X-Skipper-Proxy v0.13.237 - Server Side Request Forgery (SSRF) | 337110 , 390727 , 392301 , 392648 , 398022 |
| CVE-2022-40347 | Intern Record System v1.0 - SQL Injection (Unauthenticated) | 331028 , 340016 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 390572 , 393655 |
| CVE-2023-0938 | Music Gallery Site v1.0 - SQL Injection on music_list.php | 340016 , 340017 , 340157 , 340159 , 360147 , 360148 , 390727 , 392301 , 392648 |
| CVE-2023-33362 | Piwigo 13.6.0 - SQL Injection | 390727 , 392301 , 392648 |
| CVE-2024-24495 | Daily Habit Tracker 1.0 - SQL Injection | 341245 , 344366 , 380026 , 380122 , 390727 , 392301 , 392648 |
| CVE-2024-53584 | OpenPanel 0.3.4 - OS Command Injection | 340023 , 344360 , 344361 , 344363 |
| CVE-2019-16383 | MOVEit Transfer 11.1.1 - 'token' Unauthenticated SQL Injection | 344366 , 361149 , 380026 , 380122 |
| CVE-2017-14611 | Cockpit CMS 0.4.4 < 0.5.5 - Server-Side Request Forgery | 390727 , 392301 , 392648 |
| CVE-2018-9302 | Cockpit CMS 0.4.4 < 0.5.5 - Server-Side Request Forgery | 390727 , 392301 , 392648 |
| CVE-2021-27828 | In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection | 392301 |
| CVE-2021-37593 | PEEL Shopping 9.3.0 - 'id' Time-based SQL Injection | 340016 , 380026 , 380122 , 390727 , 392301 , 392648 |
| CVE-2024-53537 | OpenPanel 0.3.4 - Directory Traversal | 340007 |
| CVE-2013-5758 | Yealink VoIP Phone SIP-T38G - Privilege Escalation | 330925 , 344360 , 344370 , 390724 , 390726 , 392647 |
| CVE-2014-5308 | TestLink 1.9.11 - Multiple SQL Injections | 350147 , 390726 , 392647 |
| CVE-2019-7671 | Prima Access Control 2.3.35 - 'HwName' Persistent Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390726 , 392647 |
| CVE-2014-8356 | ZHONE < S3.0.501 - Multiple Vulnerabilities | 390726 , 392301 , 392647 , 392648 |
| CVE-2014-8357 | ZHONE < S3.0.501 - Multiple Vulnerabilities | 390726 , 392301 , 392647 , 392648 |
| CVE-2014-9118 | ZHONE < S3.0.501 - Multiple Vulnerabilities | 390726 , 392301 , 392647 , 392648 |
| CVE-2015-0104 | IBM Tivoli Service Automation Manager 7.2.4 - Remote Code Execution | 392301 |
| CVE-2015-4117 | Vesta Control Panel 0.9.8 - OS Command Injection | 344370 |
| CVE-2016-4808 | Web2py 2.14.5 - Multiple Vulnerabilities | 344360 , 344364 , 344366 , 344370 |
| CVE-2017-5799 | HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion | 390726 , 392301 , 392647 , 392648 |
| CVE-2017-9413 | Subsonic 6.1.1 - Server-Side Request Forgery | 390726 , 392301 , 392647 , 392648 |
| CVE-2018-11442 | EasyService Billing 1.0 - Cross-Site Request Forgery | 340147 , 340148 , 340149 , 341245 , 341256 , 342259 , 344361 , 344362 , 344363 , 344370 , 345490 , 345493 , 350147 |
| CVE-2018-11445 | EasyService Billing 1.0 - Cross-Site Request Forgery | 340147 , 340148 , 340149 , 341245 , 341256 , 342259 , 344361 , 344362 , 344363 , 344370 , 345490 , 345493 , 350147 |
| CVE-2018-15142 | OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actions | 340029 , 344360 , 344370 , 360152 , 390709 |
| CVE-2018-15884 | RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin) | 350147 |
| CVE-2018-5406 | KACE System Management Appliance (SMA) < 9.0.270 - Multiple Vulnerabilities | 390727 , 392301 , 392648 |
| CVE-2019-9189 | Prima Access Control 2.3.35 - Arbitrary File Upload | 342259 , 344360 , 344363 , 344364 , 344366 , 350147 , 390724 , 390726 , 392647 |
| CVE-2020-25760 | Visitor Management System in PHP 1.0 - SQL Injection (Authenticated) | 390727 , 392301 , 392648 |
| CVE-2020-5192 | Hospital Management System 4.0 - 'searchdata' SQL Injection | 331028 , 340016 , 340017 , 340144 , 340157 , 345493 , 360147 , 360148 , 390727 , 392301 , 392648 |
| CVE-2020-5504 | phpMyAdmin 5.0.0 - SQL Injection | 340145 , 340156 , 341145 , 390727 , 392301 , 392648 |
| CVE-2020-6010 | WordPress Plugin LearnPress 3.2.6.7 - 'current_items' SQL Injection (Authenticated) | 341245 , 345493 , 380026 , 380122 |
| CVE-2020-7991 | Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password) | 340147 , 340148 , 342259 , 345490 , 345493 , 346755 , 350147 , 350148 , 398001 |
| CVE-2022-28080 | Royal Event Management System 1.0 - 'todate' SQL Injection (Authenticated) | 330791 , 340016 , 340017 , 340144 , 340145 , 340152 , 340156 , 340157 , 341145 , 341245 , 345493 , 360147 , 360148 , 390572 |
| CVE-2023-0903 | Employee Task Management System v1.0 - SQL Injection on edit-task.php | 340016 , 340017 , 340157 , 340159 , 341245 , 360147 , 360148 |
| CVE-2023-0904 | Employee Task Management System v1.0 - SQL Injection on (task-details.php?task_id=?) | 340016 , 340017 , 340157 , 340159 , 341245 , 360147 , 360148 |
| CVE-2023-0912 | Auto Dealer Management System v1.0 - SQL Injection | 340016 , 340017 , 340157 , 340159 , 360147 , 360148 |
| CVE-2023-0913 | Auto Dealer Management System v1.0 - SQL Injection in sell_vehicle.php | 340016 , 340017 , 340157 , 340159 , 360147 , 360148 |
| CVE-2023-0915 | Auto Dealer Management System v1.0 - SQL Injection on manage_user.php | 340016 , 340017 , 340157 , 340159 , 360147 , 360148 |
| CVE-2023-0962 | Music Gallery Site v1.0 - SQL Injection on page Master.php | 340016 , 340017 , 340157 , 340159 , 360147 , 360148 , 390727 , 392301 , 392648 |
| CVE-2023-7137 | Client Details System 1.0 - SQL Injection | 331028 , 340016 , 340017 , 340144 , 340156 , 340157 , 344364 , 344366 , 344370 , 360147 , 360148 , 360151 , 380026 , 380122 |
| CVE-2024-36597 | AEGON LIFE v1.0 Life Insurance Management System - SQL injection vulnerability. | 340145 , 340156 , 341145 , 390572 |
| CVE-2024-9054 | Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection | 392301 |
| CVE-2013-2678 | Cisco Linksys E4200 - Multiple Vulnerabilities | 392301 |
| CVE-2016-1337 | Cisco EPC 3928 - Multiple Vulnerabilities | 333141 , 340147 , 340148 , 340149 , 341256 , 342259 , 344363 , 346755 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2015-4669 | Xceedium Xsuite - Multiple Vulnerabilities | 320464 , 320465 , 333141 , 340023 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 347198 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2019-20499 | D-Link DWL-2600AP - Multiple OS Command Injection | 330791 , 340152 , 344361 , 344363 , 344364 , 344366 , 390726 , 392647 |
| CVE-2019-20500 | D-Link DWL-2600AP - Multiple OS Command Injection | 330791 , 340152 , 344361 , 344363 , 344364 , 344366 , 390726 , 392647 |
| CVE-2019-20501 | D-Link DWL-2600AP - Multiple OS Command Injection | 330791 , 340152 , 344361 , 344363 , 344364 , 344366 , 390726 , 392647 |
| CVE-2023-46022 | Blood Bank 1.0 - 'bid' SQLi | 340016 , 340017 , 340144 , 340157 , 340159 , 341245 , 360147 , 360148 , 390727 , 392301 , 392648 |
| CVE-2016-3473 | Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection | 330791 , 340152 , 344370 , 344372 , 380018 , 390704 , 392301 |
| CVE-2024-43687 | Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting (XSS) | 392301 |
| CVE-2011-4448 | WikkaWiki 1.3.2 - Multiple Vulnerabilities | 331702 , 340007 , 344360 , 344361 , 344362 , 344363 , 344370 , 360152 , 390715 , 390726 , 392647 |
| CVE-2011-4899 | WordPress Core 3.3.1 - Multiple Vulnerabilities | 340147 , 340148 , 344370 , 346755 , 381209 , 381210 , 390727 , 392301 , 392648 |
| CVE-2013-0249 | cURL - Buffer Overflow (PoC) | 390727 , 392301 , 392648 |
| CVE-2013-2680 | Cisco Linksys E4200 - Multiple Vulnerabilities | 392301 |
| CVE-2013-5639 | Gnew 2013.1 - Multiple Vulnerabilities (2) | 344360 , 390727 , 392301 , 392648 |
| CVE-2013-5640 | Gnew 2013.1 - Multiple Vulnerabilities (2) | 344360 , 390727 , 392301 , 392648 |
| CVE-2013-5694 | Opsview pre 4.4.1 - Blind SQL Injection | 344370 , 390704 , 390726 , 392647 |
| CVE-2013-6041 | Webuzo 2.1.3 - Multiple Vulnerabilities | 333140 , 333141 , 340149 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 350148 , 390726 , 392647 |
| CVE-2014-6389 | PHPCompta/NOALYSS 6.7.1 5638 - Remote Command Execution | 340128 , 344363 , 350147 , 380018 , 390726 , 392301 , 392647 , 392648 |
| CVE-2014-8675 | SO Planning 1.32 - Multiple Vulnerabilities | 331028 , 340016 , 340017 , 340144 , 340155 , 340156 , 340157 , 340159 , 341155 , 341245 , 344363 , 344370 , 360147 , 360148 , 360153 , 390726 , 392647 |
| CVE-2014-9145 | Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities | 340007 , 340156 , 341145 , 344360 , 380026 , 380122 , 390709 , 390720 , 390726 , 392647 |
| CVE-2014-9147 | Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities | 340007 , 340156 , 341145 , 344360 , 380026 , 380122 , 390709 , 390720 , 390726 , 392647 |
| CVE-2014-9215 | PBBoard CMS 3.0.1 - SQL Injection | 340095 , 340213 , 344363 , 344370 , 360153 , 380026 , 390724 , 390726 , 392647 |
| CVE-2014-9464 | Microweber CMS 0.95 - SQL Injection | 390726 , 392301 , 392647 , 392648 |
| CVE-2015-1400 | NPDS CMS REvolution-13 - SQL Injection | 334168 , 390726 , 391213 , 392647 |
| CVE-2015-1518 | RedaxScript CMS 2.2.0 - SQL Injection | 334073 , 341245 , 344363 , 344364 , 344365 , 344370 , 350147 , 360152 , 360153 , 380026 , 390724 , 390726 , 392647 |
| CVE-2015-2080 | Inductive Automation Ignition 7.8.1 - Remote Leakage Of Shared Buffers | 344361 , 344363 , 344364 , 344365 , 390724 |
| CVE-2015-2824 | WordPress Plugin Simple Ads Manager - Multiple SQL Injections | 344361 , 344363 , 344364 , 344366 , 344370 , 360152 , 360153 , 380026 , 390720 , 390724 , 390726 , 390904 , 392647 |
| CVE-2015-6401 | Cisco EPC 3928 - Multiple Vulnerabilities | 333141 , 340147 , 340148 , 340149 , 341256 , 342259 , 344363 , 346755 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2016-1328 | Cisco EPC 3928 - Multiple Vulnerabilities | 333141 , 340147 , 340148 , 340149 , 341256 , 342259 , 344363 , 346755 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2016-1336 | Cisco EPC 3928 - Multiple Vulnerabilities | 333141 , 340147 , 340148 , 340149 , 341256 , 342259 , 344363 , 346755 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2016-4309 | Symphony CMS 2.6.7 - Session Fixation | 390727 , 392301 , 392648 |
| CVE-2016-4806 | Web2py 2.14.5 - Multiple Vulnerabilities | 344360 , 344364 , 344366 , 344370 |
| CVE-2017-14523 | Wonder CMS 2.3.1 - 'Host' Header Injection | 392301 |
| CVE-2017-5850 | OpenBSD HTTPd < 6.0 - Memory Exhaustion Denial of Service | 390727 , 392301 , 392648 |
| CVE-2017-6190 | D-Link DWR-116 / DWR-116A1 - Arbitrary File Download | 347009 , 390727 , 392648 |
| CVE-2018-7171 | TwonkyMedia Server 7.0.11-8.5 - Directory Traversal | 390727 , 392301 , 392648 |
| CVE-2019-19731 | Roxy Fileman 1.4.5 - Directory Traversal | 340007 |
| CVE-2021-37589 | Virtua Software Cobranca 12S - SQLi | 340156 , 341145 , 341245 |
| CVE-2022-34127 | GLPI 4.0.2 - Unauthenticated Local File Inclusion on Manageentities plugin | 340007 , 344360 |
| CVE-2023-0905 | Employee Task Management System v1.0 - Broken Authentication | 344365 , 344370 , 345493 , 350147 |
| CVE-2023-40279 | OpenClinic GA 5.247.01 - Path Traversal (Authenticated) | 340007 , 390727 , 392301 , 392648 |
| CVE-2023-6063 | WP Fastest Cache 1.2.2 - Unauthenticated SQL Injection | 340016 , 341245 , 380026 , 380122 |
| CVE-2017-15643 | Ikraus Anti Virus 2.16.7 - Remote Code Execution | 390727 , 392301 , 392648 |
| CVE-2017-9355 | Subsonic 6.1.1 - XML External Entity Injection | 390726 , 392301 , 392647 , 392648 |
| CVE-2018-1002000 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2019-18396 | Technicolor TD5130.2 - Remote Command Execution | 344361 , 344363 |
| CVE-2019-1936 | Cisco UCS Director_ Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilities | 344362 , 344363 , 344370 , 345493 , 350147 , 360151 , 390724 , 390727 , 392301 , 392648 |
| CVE-2020-20969 | PluckCMS 4.7.10 - Unrestricted File Upload | 340035 , 390727 , 392301 , 392648 |
| CVE-2023-1211 | phpIPAM 1.5.1 - SQL Injection | 341245 , 344366 , 344370 , 380026 , 380122 |
| CVE-2024-41357 | phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS) | 340147 , 340148 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2024-10758 | NEWS-BUZZ News Management System 1.0 - SQL Injection | 341245 , 344363 , 345493 , 380026 , 380122 |
| CVE-2011-4449 | WikkaWiki 1.3.2 - Multiple Vulnerabilities | 331702 , 340007 , 344360 , 344361 , 344362 , 344363 , 344370 , 360152 , 390715 , 390726 , 392647 |
| CVE-2011-4452 | WikkaWiki 1.3.2 - Multiple Vulnerabilities | 331702 , 340007 , 344360 , 344361 , 344362 , 344363 , 344370 , 360152 , 390715 , 390726 , 392647 |
| CVE-2012-0286 | stoneware webnetwork6 - Multiple Vulnerabilities | 390726 , 392301 , 392647 , 392648 |
| CVE-2012-3350 | Webmatic 3.1.1 - Blind SQL Injection | 341245 , 390727 , 392301 , 392648 |
| CVE-2014-0864 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | 392301 |
| CVE-2015-5161 | Zend Framework 2.4.2 - PHP FPM XML eXternal Entity Injection | 344372 , 390727 , 392301 , 392648 |
| CVE-2012-1258 | Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities | 340003 , 340147 , 340148 , 340156 , 341245 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 , 390727 , 392301 , 392648 |
| CVE-2012-4240 | Group Office Calendar - '/calendar/json.php' SQL Injection | 340016 , 340157 , 341245 , 360147 , 360148 |
| CVE-2014-7176 | Enalean Tuleap 7.4.99.5 - Blind SQL Injection | 390726 , 392301 , 392647 , 392648 |
| CVE-2017-3546 | Oracle PeopleSoft - Server-Side Request Forgery | 390727 , 392301 , 392648 |
| CVE-2017-6338 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities | 340147 , 340148 , 342259 , 345493 , 346755 , 350148 , 390724 |
| CVE-2017-6339 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities | 340147 , 340148 , 342259 , 345493 , 346755 , 350148 , 390724 |
| CVE-2018-15140 | OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actions | 340029 , 344360 , 344370 , 360152 , 390709 |
| CVE-2018-15141 | OpenEMR 5.0.1.3 - (Authenticated) Arbitrary File Actions | 340029 , 344360 , 344370 , 360152 , 390709 |
| CVE-2018-5404 | KACE System Management Appliance (SMA) < 9.0.270 - Multiple Vulnerabilities | 390727 , 392301 , 392648 |
| CVE-2018-7690 | Fortify Software Security Center (SSC) 17.10/17.20/18.10 - Information Disclosure | 390727 , 392301 , 392648 |
| CVE-2018-9038 | Monstra CMS 3.0.4 - Arbitrary Folder Deletion | 390727 , 392301 , 392648 |
| CVE-2019-12616 | phpMyAdmin 4.8 - Cross-Site Request Forgery | 390727 , 392301 , 392648 |
| CVE-2019-3778 | Spring Security OAuth - Open Redirector | 390703 , 390727 , 392301 , 392648 |
| CVE-2019-7439 | JioFi 4G M2S 1.0.2 - Denial of Service | 340147 , 340148 , 341256 , 342259 , 350147 , 350148 |
| CVE-2021-24405 | WordPress Plugin Easy Cookie Policy 1.6.2 - Broken Access Control to Stored XSS | 346755 , 390585 , 390726 , 392647 |
| CVE-2021-34369 | Accela Civic Platform 21.1 - 'contactSeqNumber' Insecure Direct Object References (IDOR) | 390727 , 392301 , 392648 |
| CVE-2022-34125 | GLPI Activity v3.1.0 - Authenticated Local File Inclusion on Activity plugin | 340007 , 344360 |
| CVE-2025-55911 | ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF) | 340162 , 344370 , 398001 |
| CVE-2011-4450 | WikkaWiki 1.3.2 - Multiple Vulnerabilities | 331702 , 340007 , 344360 , 344361 , 344362 , 344363 , 344370 , 360152 , 390715 , 390726 , 392647 |
| CVE-2017-9640 | Automated Logic WebCTRL 6.1 - Path Traversal / Arbitrary File Write | 390727 , 390904 , 392301 , 392648 |
| CVE-2024-7801 | Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection | 392301 |
| CVE-2012-1260 | Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities | 340003 , 340147 , 340148 , 340156 , 341245 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 , 390727 , 392301 , 392648 |
| CVE-2012-1261 | Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities | 340003 , 340147 , 340148 , 340156 , 341245 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 , 390585 , 390727 , 392301 , 392648 |
| CVE-2012-5193 | Bitweaver 2.8.1 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 380026 |
| CVE-2013-2679 | Cisco Linksys E4200 - Multiple Vulnerabilities | 392301 |
| CVE-2013-2684 | Cisco Linksys E4200 - Multiple Vulnerabilities | 392301 |
| CVE-2015-4668 | Xceedium Xsuite - Multiple Vulnerabilities | 320464 , 320465 , 333141 , 340023 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 347198 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2017-15687 | Logitech Media Server - Cross-Site Scripting | 340099 , 341099 , 346755 , 347198 |
| CVE-2017-3133 | Fortinet FortiOS < 5.6.0 - Cross-Site Scripting | 340147 , 340148 , 341256 , 341266 , 342259 , 344370 , 346755 , 347198 , 350147 , 350148 , 390727 , 392301 , 392648 |
| CVE-2017-5798 | HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion | 390726 , 392301 , 392647 , 392648 |
| CVE-2017-6443 | EPSON TMNet WebConfig 1.00 - Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2017-9979 | QuantaStor Software Defined Storage < 4.3.1 - Multiple Vulnerabilities | 330791 , 340152 , 392301 |
| CVE-2018-12111 | Canon PrintMe EFI - Cross-Site Scripting | 340099 , 340147 , 341099 , 346755 , 347198 |
| CVE-2018-16833 | ManageEngine Desktop Central 10.0.271 - Cross-Site Scripting | 333141 , 342259 , 350147 , 350148 |
| CVE-2018-17310 | RICOH MP C1803 JPN Printer - Cross-Site Scripting | 350147 |
| CVE-2018-17313 | RICOH MP C1803 JPN Printer - Cross-Site Scripting | 350147 |
| CVE-2018-17587 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | 340147 , 341266 , 342259 |
| CVE-2018-17588 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | 340147 , 341266 , 342259 |
| CVE-2018-17590 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | 340147 , 341266 , 342259 |
| CVE-2018-17591 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | 340147 , 341266 , 342259 |
| CVE-2018-17593 | Airties AIR5342 1.0.0.18 - Cross-Site Scripting | 340147 , 341266 , 342259 |
| CVE-2018-19933 | Bolt CMS < 3.6.2 - Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2018-20503 | SirsiDynix e-Library 3.5.x - Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2018-7203 | TwonkyMedia Server 7.0.11-8.5 - Persistent Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2019-11398 | UliCMS 2019.1 'Spitting Lama' - Persistent Cross-Site Scripting | 340247 , 340248 , 342259 , 344370 , 346755 |
| CVE-2019-11844 | RICOH SP 4520DN Printer - HTML Injection | 350147 |
| CVE-2019-11845 | RICOH SP 4510DN Printer - HTML Injection | 350147 |
| CVE-2019-14427 | Ultimate Loan Manager 2.0 - Cross-Site Scripting | 345493 , 390585 |
| CVE-2019-18859 | Digi AnywhereUSB 14 - Reflective Cross-Site Scripting | 340147 , 341266 , 346755 , 390727 , 392301 , 392648 |
| CVE-2019-1943 | CISCO Small Business 200 / 300 / 500 Switches - Multiple Vulnerabilities | 390727 , 392301 , 392648 |
| CVE-2019-7438 | JioFi 4G M2S 1.0.2 - 'mask' Cross-Site Scripting | 340149 , 341256 , 342259 , 344361 , 344364 , 344370 , 350147 |
| CVE-2019-9553 | Bolt CMS 3.6.4 - Cross-Site Scripting | 340148 , 341256 , 346755 |
| CVE-2019-9591 | ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities | 340003 , 340147 , 341266 , 342259 , 390585 , 390727 , 392301 , 392648 |
| CVE-2019-9592 | ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities | 340003 , 340147 , 341266 , 342259 , 390585 , 390727 , 392301 , 392648 |
| CVE-2019-9593 | ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities | 340003 , 340147 , 341266 , 342259 , 390585 , 390727 , 392301 , 392648 |
| CVE-2020-15599 | Victor CMS 1.0 - 'user_firstname' Persistent Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 345493 , 346755 , 350148 |
| CVE-2020-24609 | Savsoft Quiz 5 - Stored Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2020-5191 | Hospital Management System 4.0 - Persistent Cross-Site Scripting | 342259 , 345493 |
| CVE-2021-24245 | WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS) | 333141 , 340149 , 341256 , 342259 , 346755 , 398005 |
| CVE-2021-24563 | WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated) | 392301 |
| CVE-2021-33904 | Accela Civic Platform 21.1 - 'servProvCode' Cross-Site-Scripting (XSS) | 341245 , 390727 , 392301 , 392648 |
| CVE-2021-34370 | Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS) | 341245 , 390727 , 392301 , 392648 |
| CVE-2021-45425 | SAFARI Montage 8.5 - Reflected Cross Site Scripting (XSS) | 333140 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2022-35155 | Bus Pass Management System 1.0 - Cross-Site Scripting (XSS) | 340147 , 340148 , 341256 , 342259 , 345493 , 346755 , 390585 |
| CVE-2023-38910 | CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' ) | 333141 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-46020 | Blood Bank v1.0 - Stored Cross Site Scripting (XSS) | 333141 , 341256 , 342259 , 345493 , 346755 , 350147 , 350148 |
| CVE-2024-24494 | Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS) | 340147 , 340148 , 341256 , 342259 , 344370 , 346755 , 350148 , 360151 |
| CVE-2014-0867 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | 392301 |
| CVE-2018-15536 | Responsive FileManager < 9.13.4 - Directory Traversal | 340007 , 344360 , 344370 , 345493 , 347009 , 390709 , 390720 , 390727 , 392301 , 392648 |
| CVE-2014-8674 | SO Planning 1.32 - Multiple Vulnerabilities | 331028 , 340016 , 340017 , 340144 , 340155 , 340156 , 340157 , 340159 , 341155 , 341245 , 344363 , 344370 , 360147 , 360148 , 360153 , 390726 , 392647 |
| CVE-2017-3131 | Fortinet FortiOS < 5.6.0 - Cross-Site Scripting | 340147 , 340148 , 341256 , 341266 , 342259 , 344370 , 346755 , 347198 , 350147 , 350148 , 390727 , 392301 , 392648 |
| CVE-2017-6340 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities | 340147 , 340148 , 342259 , 345493 , 346755 , 350148 , 390724 |
| CVE-2018-16736 | Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2018-5405 | KACE System Management Appliance (SMA) < 9.0.270 - Multiple Vulnerabilities | 390727 , 392301 , 392648 |
| CVE-2019-11269 | Spring Security OAuth - Open Redirector | 390703 , 390727 , 392301 , 392648 |
| CVE-2019-9556 | Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2020-11456 | LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting | 333141 , 340147 , 340148 , 342259 , 346755 |
| CVE-2020-11457 | pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting | 333141 , 342259 , 345493 |
| CVE-2020-12706 | php-fusion 9.03.50 - Persistent Cross-Site Scripting | 340147 , 340148 , 341256 , 346755 |
| CVE-2020-24963 | Best Support System 3.0.4 - 'ticket_body' Persistent XSS (Authenticated) | 333141 , 344370 , 360151 |
| CVE-2020-27533 | DedeCMS v.5.8 - keyword Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 345493 , 346755 , 350147 , 350148 , 390585 |
| CVE-2020-7108 | WordPress Plugin LearnDash LMS 3.1.2 - Reflective Cross-Site Scripting | 340003 , 341266 , 346755 , 390585 , 390727 , 392301 , 392648 |
| CVE-2023-0902 | Employee Task Management System v1.0 - SQL Injection on edit-task.php | 340016 , 340017 , 340157 , 340159 , 341245 , 360147 , 360148 |
| CVE-2023-38911 | CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery') | 333141 , 342259 , 346755 , 350147 , 350148 |
| CVE-2023-4382 | Hyip Rio 2.1 - Arbitrary File Upload | 392301 |
| CVE-2024-48120 | X2CRM 8.5 - Stored Cross-Site Scripting (XSS) | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390726 , 392647 |
| CVE-2013-2683 | Cisco Linksys E4200 - Multiple Vulnerabilities | 392301 |
| CVE-2014-8677 | SO Planning 1.32 - Multiple Vulnerabilities | 331028 , 340016 , 340017 , 340144 , 340155 , 340156 , 340157 , 340159 , 341155 , 341245 , 344363 , 344370 , 360147 , 360148 , 360153 , 390726 , 392647 |
| CVE-2015-2826 | WordPress Plugin Simple Ads Manager - Information Disclosure | 344370 , 390904 |
| CVE-2017-9978 | QuantaStor Software Defined Storage < 4.3.1 - Multiple Vulnerabilities | 330791 , 340152 , 392301 |
| CVE-2021-26085 | Atlassian Confluence 7.12.2 - Pre-Authorization Arbitrary File Read | 390727 , 392301 , 392648 |
| CVE-2021-26086 | Atlassian Jira Server Data Center 8.16.0 - Arbitrary File Read | 345113 , 390727 , 392301 , 392648 |
| CVE-2021-34429 | Eclipse Jetty 11.0.5 - Sensitive File Disclosure | 390703 |
| CVE-2022-31062 | GLPI Glpiinventory v1.0.1 - Unauthenticated Local File Inclusion | 340007 , 344360 |
| CVE-2024-53586 | WebFileSys 2.31.0 - Directory Path Traversal | 340007 , 390726 , 392647 |
| CVE-2006-3835 | toutvirtual virtualiq pro 3.2 - Multiple Vulnerabilities | 392301 |
| CVE-2011-4898 | WordPress Core 3.3.1 - Multiple Vulnerabilities | 340147 , 340148 , 344370 , 346755 , 381209 , 381210 , 390727 , 392301 , 392648 |
| CVE-2012-5192 | Bitweaver 2.8.1 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 380026 |
| CVE-2012-5451 | TVMOBiLi 2.1.0.3557 - Denial of Service | 390727 , 392301 , 392648 |
| CVE-2012-5875 | FireFly Mediaserver 1.0.0.1359 - Null Pointer Dereference | 390727 , 392301 , 392648 |
| CVE-2012-5876 | Nero MediaHome 4.5.8.0 - Denial of Service | 390726 , 390727 , 392301 , 392647 , 392648 |
| CVE-2012-5877 | Nero MediaHome 4.5.8.0 - Denial of Service | 390726 , 390727 , 392301 , 392647 , 392648 |
| CVE-2013-6043 | Webuzo 2.1.3 - Multiple Vulnerabilities | 333140 , 333141 , 340149 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 350148 , 390726 , 392647 |
| CVE-2015-5285 | Kallithea 0.2.9 - 'came_from' HTTP Response Splitting | 390722 , 390727 , 392648 |
| CVE-2014-0865 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | 392301 |
| CVE-2014-0868 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | 392301 |
| CVE-2021-24966 | WordPress Plugin Error Log Viewer 1.1.1 - Arbitrary File Clearing (Authenticated) | 336461 , 344360 , 381206 |
| CVE-2016-4807 | Web2py 2.14.5 - Multiple Vulnerabilities | 344360 , 344364 , 344366 , 344370 |
| CVE-2018-1002001 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002002 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002003 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002004 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002005 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002006 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002007 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002008 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2018-1002009 | WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting | 340156 , 344370 , 380122 , 390726 , 392647 |
| CVE-2020-29240 | LEPTON CMS 4.7.0 - 'URL' Persistent Cross-Site Scripting | 333141 , 340149 , 341256 , 342259 , 346755 , 398005 |
| CVE-2020-29470 | OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting | 340247 , 340248 , 340476 , 340477 , 341245 , 342259 , 346755 , 390585 |
| CVE-2020-29477 | Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting | 340147 , 340148 , 342259 , 346755 , 390585 |
| CVE-2020-35241 | Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting | 344370 , 346755 , 390724 |
| CVE-2024-24050 | Workout Journal App 1.0 - Stored XSS | 333140 , 340147 , 340148 , 341256 , 342259 , 345493 , 346755 , 380026 , 390727 , 392301 , 392648 |
| CVE-2007-3385 | Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure | 390727 , 392301 , 392648 |
| CVE-2008-2938 | toutvirtual virtualiq pro 3.2 - Multiple Vulnerabilities | 392301 |
| CVE-2011-4451 | WikkaWiki 1.3.2 - Multiple Vulnerabilities | 331702 , 340007 , 344360 , 344361 , 344362 , 344363 , 344370 , 360152 , 390715 , 390726 , 392647 |
| CVE-2012-0285 | stoneware webnetwork6 - Multiple Vulnerabilities | 390726 , 392301 , 392647 , 392648 |
| CVE-2012-0782 | WordPress Core 3.3.1 - Multiple Vulnerabilities | 340147 , 340148 , 344370 , 346755 , 381209 , 381210 , 390727 , 392301 , 392648 |
| CVE-2013-2682 | Cisco Linksys E4200 - Multiple Vulnerabilities | 392301 |
| CVE-2013-6042 | Webuzo 2.1.3 - Multiple Vulnerabilities | 333140 , 333141 , 340149 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 350148 , 390726 , 392647 |
| CVE-2014-0191 | eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection | 390727 , 392301 , 392648 |
| CVE-2014-0866 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | 392301 |
| CVE-2014-0869 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | 392301 |
| CVE-2014-0870 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | 392301 |
| CVE-2014-0871 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | 392301 |
| CVE-2014-1944 | Ilch CMS 2.0 - Persistent Cross-Site Scripting | 344370 |
| CVE-2014-9146 | Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities | 340007 , 340156 , 341145 , 344360 , 380026 , 380122 , 390709 , 390720 , 390726 , 392647 |
| CVE-2015-1389 | Aruba ClearPass Policy Manager - Persistent Cross-Site Scripting | 333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2015-2275 | WoltLab Community Gallery - Persistent Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 344365 , 344370 , 346755 , 390726 , 392647 |
| CVE-2015-4665 | Xceedium Xsuite - Multiple Vulnerabilities | 320464 , 320465 , 333141 , 340023 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 347198 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2015-6402 | Cisco EPC 3928 - Multiple Vulnerabilities | 333141 , 340147 , 340148 , 340149 , 341256 , 342259 , 344363 , 346755 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2022-0377 | WordPress Plugin Learnpress 4.1.4.1 - Arbitrary Image Renaming | 340007 , 345493 |
| CVE-2025-41228 | VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS) | 340003 , 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 , 390727 , 392301 , 392648 |
| CVE-2014-1222 | Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities | 340007 , 340156 , 341145 , 344360 , 345493 , 380026 , 380122 , 390709 , 390720 , 390726 , 392647 |
| CVE-2014-0894 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | 392301 |
| CVE-2013-5759 | Yealink VoIP Phone SIP-T38G - Privilege Escalation | 330925 , 344360 , 390724 , 390726 , 392647 |
| CVE-2022-43128 | Dreamer CMS v4.0.0 - SQL Injection | 340016 , 340156 , 380026 , 380122 |
| CVE-2023-46391 | WEBIGniter v28.7.23 - Stored Cross Site Scripting (XSS) | 340147 , 340148 , 346755 , 390585 |
| CVE-2024-24497 | Employee Management System 1.0 - txtusername and txtpassword SQL Injection (Admin Login) | 340156 , 341245 , 345493 |