Atomicorp WAF Research Notes
Research Update - 2026-09-08
Atomicorp WAF Research Notes document selected engineering observations, testing results, attack-pattern analysis, and WAF rule interactions.
The entries published in this update represent research notes produced during ongoing analysis activities.
These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.
Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.
Presence means a positive research finding was published. Absence means no conclusion should be drawn.
CVE Notes Published in This Update
| CVE | Vulnerability Name | Rules Observed |
|---|---|---|
| CVE-2016-10043 | Radisys MRF - Command Injection | 341245 |
| CVE-2016-9269 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2012-5686 | ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset | 340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704 |
| CVE-2015-3934 | Fiyo CMS 2.0_1.9.1 - SQL Injection | 341245 , 344366 , 380026 , 380122 |
| CVE-2015-4683 | Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities | 330791 , 340152 , 392301 |
| CVE-2015-6018 | ZYXEL PMG5318-B20A - OS Command Injection | 330791 , 340152 |
| CVE-2015-6834 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | 344365 |
| CVE-2016-5675 | NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities | 392301 |
| CVE-2016-5678 | NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities | 392301 |
| CVE-2016-5771 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | 344365 |
| CVE-2016-5773 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | 344365 |
| CVE-2017-10366 | Oracle PeopleSoft 8.5x - Remote Code Execution | 390703 , 392301 |
| CVE-2017-17672 | vBulletin 5.x - 'cacheTemplates' Remote Arbitrary File Deletion | 344370 , 390614 |
| CVE-2017-7462 | Intellinet NFC-30IR Camera - Multiple Vulnerabilities | 330925 , 344360 , 347009 |
| CVE-2017-9811 | Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities | 390704 , 390724 |
| CVE-2017-9834 | WordPress Plugin WatuPRO 5.5.1 - SQL Injection | 340156 , 380122 |
| CVE-2018-17440 | D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2018-18755 | K-iwi Framework 1775 - SQL Injection | 331028 , 340016 , 340155 , 340157 , 341155 , 341245 , 344361 , 360147 , 360148 , 380026 |
| CVE-2018-18761 | SaltOS Erp Crm 3.1 r8126 - SQL Injection | 331028 , 340016 , 340155 , 340156 , 340157 , 341155 , 341245 , 360147 , 380026 |
| CVE-2018-18763 | SaltOS Erp Crm 3.1 r8126 - SQL Injection (2) | 331028 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 |
| CVE-2018-18795 | School Event Management System 1.0 - SQL Injection | 331028 , 340016 , 340017 , 340157 , 360147 , 360148 |
| CVE-2018-18798 | School Attendance Monitoring System 1.0 - SQL Injection | 331028 , 340016 , 340017 , 340157 , 360147 , 360148 |
| CVE-2018-18800 | PayPal-Credit Card-Debit Card Payment 1.0 - SQL Injection | 331028 , 340016 , 340157 , 341245 , 360147 , 380123 |
| CVE-2018-18801 | E-Negosyo System 1.0 - SQL Injection | 331028 , 340016 , 340017 , 340157 , 341245 , 360147 , 360148 |
| CVE-2018-20526 | Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal | 330791 , 340152 |
| CVE-2018-6220 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2018-6223 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2018-6228 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2018-6229 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2019-5893 | OpenSource ERP 6.3.1. - SQL Injection | 341250 , 344366 |
| CVE-2019-9083 | SQLiteManager 1.2.0 / 1.2.4 - Blind SQL Injection | 341145 , 341245 |
| CVE-2021-4039 | Zyxel NWA-1100-NH - Command Injection | 344364 , 344366 |
| CVE-2022-27412 | Explore CMS 1.0 - SQL Injection | 340145 , 340156 , 341145 , 390572 |
| CVE-2022-31056 | GLPI v10.0.2 - SQL Injection (Authentication Depends on Configuration) | 330791 , 340152 |
| CVE-2022-45297 | EQ Enterprise management system v2.2.0 - SQL Injection | 334168 , 341245 , 344370 |
| CVE-2023-0961 | Music Gallery Site v1.0 - SQL Injection on page view_music_details.php | 340016 , 340017 , 340157 , 340159 , 360147 , 360148 |
| CVE-2023-34635 | Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection | 340145 , 340156 , 341145 , 390572 |
| CVE-2026-21875 | ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection | 341245 , 380122 |
| CVE-2013-2642 | Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities | 344362 , 344364 , 344366 |
| CVE-2024-33559 | Wordpress Theme XStore 9.3.8 - SQLi | 340016 , 340017 , 344366 |
| CVE-2026-44343 | WGDashboard < 4.3.2 - Unauthenticated File Read | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-56292 | AcyMailing < 10.11.1 - Unauthenticated SQL Injection | 340157 , 360147 , 360148 |
| CVE-2018-20525 | Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal | 330791 , 340152 |
| CVE-2016-5679 | NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities | 392301 |
| CVE-2016-5680 | NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities | 392301 |
| CVE-2016-8526 | Aruba AirWave 8.2.3 - XML External Entity Injection / Cross-Site Scripting | 333141 , 341256 , 342259 , 344370 , 346755 , 350147 , 350148 |
| CVE-2016-9315 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2017-9810 | Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities | 390704 , 390724 |
| CVE-2018-1213 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-17442 | D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2018-6224 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2018-7357 | ZTE ZXHN H168N - Improper Access Restrictions | 330791 , 334168 , 340152 |
| CVE-2018-7358 | ZTE ZXHN H168N - Improper Access Restrictions | 330791 , 334168 , 340152 |
| CVE-2020-10173 | Comtrend VR-3033 - Command Injection | 344361 , 344363 |
| CVE-2022-46552 | D-Link DIR-846 - Remote Command Execution (RCE) vulnerability | 330791 , 340152 , 381237 |
| CVE-2023-50071 | CVE-2023-50071 - Multiple SQL Injection | 330791 , 340152 |
| CVE-2018-6221 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2019-3759 | RSA IG&L Aveksa 7.1.1 - Remote Code Execution | 330791 , 340152 |
| CVE-2015-4681 | Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities | 330791 , 340152 , 392301 |
| CVE-2016-9314 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2018-6222 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2024-32136 | BWL Advanced FAQ Manager 2.0.3 - Authenticated SQL Injection | 380026 , 380122 |
| CVE-2006-0887 | PHPLib < 7.4 - SQL Injection | 340017 , 340181 , 341245 , 344370 , 360147 , 360148 |
| CVE-2006-2826 | PHPLib < 7.4 - SQL Injection | 340017 , 340181 , 341245 , 344370 , 360147 , 360148 |
| CVE-2009-1479 | boxalino 09.05.25-0421 - Directory Traversal | 340007 , 344360 , 390709 |
| CVE-2012-5685 | ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset | 340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704 |
| CVE-2013-6164 | Project'Or RIA 3.4.0 - 'objectDetail.php?objectId' SQL Injection | 392301 |
| CVE-2014-1206 | Open Web Analytics 1.5.4 - 'owa_email_address' SQL Injection | 340016 , 340017 , 340144 , 340157 , 360147 , 360148 |
| CVE-2014-2846 | WD Arkeia Virtual Appliance 10.2.9 - Local File Inclusion | 344360 |
| CVE-2014-3515 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | 344365 |
| CVE-2014-8142 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | 344365 |
| CVE-2015-0231 | Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities | 344365 |
| CVE-2015-1428 | Sefrengo CMS 1.6.1 - Multiple SQL Injections | 390704 |
| CVE-2016-5676 | NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities | 392301 |
| CVE-2016-5677 | NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities | 392301 |
| CVE-2017-7185 | Cesanta Mongoose OS - Use-After-Free | 330791 , 340152 |
| CVE-2017-9812 | Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities | 390704 , 390724 |
| CVE-2018-7448 | CMS Made Simple 2.1.6 - Remote Code Execution | 344363 , 360152 , 390704 , 390724 |
| CVE-2010-4297 | VMware Tools - Update OS Command Injection | 392301 |
| CVE-2022-3552 | BoxBilling<=4.22.1.5 - Remote Code Execution (RCE) | 340128 , 380018 |
| CVE-2024-0566 | Smart Manager 8.27.0 - Post-Authenticated SQL Injection | 380122 , 390704 |
| CVE-2018-1247 | RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scripting | 392301 |
| CVE-2015-4685 | Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities | 330791 , 340152 , 392301 |
| CVE-2012-5683 | ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset | 340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704 |
| CVE-2018-6230 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2018-1203 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1204 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2014-2531 | InterWorx Control Panel 5.0.13 build 574 - 'xhr.php?i' SQL Injection | 392301 |
| CVE-2014-5462 | OpenEMR 4.1.2(7) - Multiple SQL Injections | 392301 |
| CVE-2015-4682 | Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities | 330791 , 340152 , 392301 |
| CVE-2015-4684 | Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities | 330791 , 340152 , 392301 |
| CVE-2016-6435 | Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion | 340007 , 340029 , 344360 , 347009 , 390613 , 390614 , 390709 |
| CVE-2017-3548 | Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE | 330791 , 340152 |
| CVE-2018-18760 | RhinOS CMS 3.x - Arbitrary File Download | 334168 , 344360 |
| CVE-2018-18762 | SaltOS Erp Crm 3.1 r8126 - Database File Download | 390716 |
| CVE-2018-6219 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2018-6671 | McAfee ePO 5.9.1 - Registered Executable Local Access Bypass | 344364 , 344365 , 344366 |
| CVE-2014-8727 | F5 BIG-IP 10.1.0 - Directory Traversal | 340007 , 344360 , 390709 |
| CVE-2017-9072 | RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scripting | 392301 |
| CVE-2017-9813 | Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities | 390704 , 390724 |
| CVE-2018-16134 | Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting | 340147 , 341266 , 346755 |
| CVE-2018-17441 | D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2018-17443 | D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585 |
| CVE-2018-7543 | WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting | 333140 , 340148 , 346755 , 380026 |
| CVE-2018-9238 | Yahei PHP Prober 0.4.7 - Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2019-10685 | Prinect Archive System 2015 Release 2.6 - Cross-Site Scripting | 340147 , 341256 , 341266 , 346755 , 390585 |
| CVE-2019-17504 | Kirona-DRS 5.5.3.5 - Information Disclosure | 312863 , 340147 , 340148 , 341266 , 342259 , 344370 , 346755 , 390716 |
| CVE-2019-8390 | qdPM 9.1 - 'search[keywords]' Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 350147 |
| CVE-2020-35416 | PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting) | 340003 , 340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148 , 390585 |
| CVE-2022-29296 | Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS) | 344370 |
| CVE-2024-3378 | iboss Secure Web Gateway - Stored Cross-Site Scripting (XSS) | 392301 |
| CVE-2016-9316 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2018-6226 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2018-6227 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2020-9467 | Piwigo 2.10.1 - Cross Site Scripting | 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2021-29460 | Kirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS) | 330791 , 340152 |
| CVE-2021-35956 | AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS) | 333141 , 341256 , 342259 , 350147 |
| CVE-2021-40577 | Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting | 340147 , 340148 , 342259 , 346755 , 350148 |
| CVE-2022-0020 | Palo Alto Cortex XSOAR 6.5.0 - Stored Cross-Site Scripting (XSS) | 330791 , 333141 , 340152 , 341256 , 342259 , 346755 |
| CVE-2022-41358 | Garage Management System 1.0 (categoriesName) - Stored XSS | 330791 , 340152 |
| CVE-2022-48178 | X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated) | 340147 , 340148 , 341256 , 342259 , 346755 , 390585 |
| CVE-2023-5452 | SnipeIT 6.2.1 - Stored Cross Site Scripting | 333140 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2018-16133 | Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal | 344365 , 347019 , 390716 |
| CVE-2019-14430 | YouPHPTube 7.2 - 'userCreate.json.php' SQL Injection | 392301 |
| CVE-2001-1341 | Solare Datensysteme Solar-Log Devices 2.8.4-56/3.5.2-85 - Multiple Vulnerabilities | 390716 , 392301 |
| CVE-2010-3486 | SmarterMail < 7.2.3925 - Persistent Cross-Site Scripting | 392301 |
| CVE-2013-2641 | Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities | 344362 , 344364 , 344366 |
| CVE-2017-7461 | Intellinet NFC-30IR Camera - Multiple Vulnerabilities | 330925 , 344360 , 347009 |
| CVE-2018-1186 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1187 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1188 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1189 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1201 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-1202 | Dell EMC Isilon OneFS - Multiple Vulnerabilities | 330791 , 333141 , 340147 , 340148 , 340152 , 341256 , 342259 , 346755 , 390585 |
| CVE-2018-20418 | Craft CMS 3.0.25 - Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 344365 , 346755 |
| CVE-2019-19742 | D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting | 340147 , 340148 , 341256 , 342259 , 344370 , 350147 |
| CVE-2012-5684 | ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset | 340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704 |
| CVE-2013-2643 | Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities | 344362 , 344364 , 344366 |
| CVE-2014-3110 | Honeywell XL Web Controller - Cross-Site Scripting | 333141 , 340156 , 341245 , 341256 , 342259 , 346755 , 390724 |
| CVE-2015-4420 | Opsview 4.6.2 - Multiple Cross-Site Scripting Vulnerabilities | 340147 , 340148 , 341256 , 342259 , 346755 , 350148 |
| CVE-2018-6225 | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 333141 , 337209 , 337210 , 337211 , 340145 , 340147 , 340148 , 340149 , 340156 , 341145 , 341245 , 341256 , 342259 , 344370 , 346755 , 350147 , 390572 , 390585 , 390704 |
| CVE-2019-13237 | Alkacon OpenCMS 10.5.x - Local File inclusion | 392301 |
| CVE-2015-4040 | F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 - Directory Traversal | 344370 , 390724 |
| CVE-2010-4275 | Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities | 346755 |