Pass Microsoft SQL Server Default Credentials 13 Feb 2002 9.8 (v3) Critical Pass ViewCVS viewcvs.cgi Multiple Parameter XSS CVE-2002-0771 27 Sep 2004 4.3 (v2) Medium Pass Cayman DSL Router Single Character String Authentication Bypass. CVE-2001-1430 13 Aug 2001 7.5 (v2) High Pass MDaemon File Creation Local Privilege Escalation CVE-2004-2504 24 Nov 2004 7.2 (v2) High Pass SquirrelMail S/MIME Plug-in Remote Command Execution CVE-2005-0239 03 Mar 2005 6.5 (v2) Medium Pass SimpGB guestbook.php quote Parameter SQL Injection CVE-2005-0786 15 Mar 2005 7.5 (v2) High Pass Netquery <= 3.11 nquser.php host Parameter Arbitrary Command Execution CVE-2005-2684 25 Aug 2005 7.5 (v2) High Pass MyBB misc.php Multiple SQL Injection Vulnerabilities CVE-2005-2888 17 Sep 2005 7.5 (v2) High Pass SSL Version 2 and 3 Protocol Detection 12 Oct 2005 9.8 (v3) Critical Pass Comersus Cart /comersus/database/comersus.mdb Direct Request Datbase Disclosure 02 Nov 2005 5 (v2) Medium Pass phpWebThings Multiple Scripts SQL Injection CVE-2005-3585 CVE-2005-4218 08 Nov 2005 7.5 (v2) High Pass Zen Cart password_forgotten.php admin_email Parameter SQL Injection CVE-2005-3996 03 Dec 2005 5.1 (v2) Medium Pass dotProject docs/ Directory Multiple Script Information Disclosure CVE-2006-0756 15 Feb 2006 5 (v2) Medium Pass MODx < 0.9.1a Multiple Vulnerabilities CVE-2006-1820 CVE-2006-1821 17 Apr 2006 6.4 (v2) Medium Pass X7 Chat help/index.php help_file Parameter Local File Inclusion CVE-2006-2156 03 May 2006 6.4 (v2) Medium Pass eFiction < 2.0.2 Multiple Remote Vulnerabilities (SQLi, XSS, Disc) CVE-2005-4167 CVE-2005-4168 CVE-2005-4169 CVE-2005-4170 CVE-2005-4171 CVE-2005-4172 CVE-2005-4173 CVE-2005-4174 29 Dec 2005 7.5 (v2) High Pass Loudblog index.php id Parameter SQL Injection CVE-2006-3832 25 Jul 2006 7.5 (v2) High Pass IBM Lotus Domino IMAP Service Mailbox Name Overflow CVE-2007-3510 24 Oct 2007 9 (v2) High Pass Plogger plog-rss.php id Parameter SQL Injection CVE-2007-6587 23 Dec 2007 7.5 (v2) High Pass mvnForum activatemember Multiple Parameter XSS CVE-2006-3245 27 Jun 2006 2.6 (v2) Low Pass PHP 5.4.x < 5.4.41 Multiple Vulnerabilities CVE-2006-7243 CVE-2015-2325 CVE-2015-2326 CVE-2015-4021 CVE-2015-4022 CVE-2015-4024 CVE-2015-4025 CVE-2015-4026 18 May 2015 9.8 (v3) Critical Pass Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (Oct 2019 CPU)CVE-2017-12626 CVE-2019-2976 CVE-2019-3020 18 Oct 2019 9.3 (v3) Critical Pass CMS Made Simple modules/TinyMCE/content_css.php templateid Parameter SQL Injection CVE-2007-6656 02 Jan 2008 7.5 (v2) High Pass Apache Tomcat 9.0.0 < 9.0.35 Remote Code Execution CVE-2020-9484 22 May 2020 7 (v3) High Pass Dotnetnuke 5.0.x < 9.6.1 (09.06.01) 12 Jun 2020 6.1 (v3) Medium Pass Oracle E-Business Suite Multiple Vulnerabilities (April 2021 CPU) CVE-2017-14735 CVE-2019-10086 CVE-2020-1967 CVE-2020-9488 CVE-2021-2150 CVE-2021-2153 CVE-2021-2155 CVE-2021-2156 CVE-2021-2181 CVE-2021-2182 CVE-2021-2183 CVE-2021-2184 CVE-2021-2185 CVE-2021-2186 CVE-2021-2187 CVE-2021-2188 CVE-2021-2189 CVE-2021-2190 CVE-2021-2195 CVE-2021-2197 CVE-2021-2198 CVE-2021-2199 CVE-2021-2200 CVE-2021-2205 CVE-2021-2206 CVE-2021-2209 CVE-2021-2210 CVE-2021-2222 CVE-2021-2223 CVE-2021-2224 CVE-2021-2225 CVE-2021-2227 CVE-2021-2228 CVE-2021-2229 CVE-2021-2231 CVE-2021-2233 CVE-2021-2235 CVE-2021-2236 CVE-2021-2237 CVE-2021-2238 CVE-2021-2239 CVE-2021-2241 CVE-2021-2246 CVE-2021-2247 CVE-2021-2249 CVE-2021-2251 CVE-2021-2252 CVE-2021-2254 CVE-2021-2255 CVE-2021-2258 CVE-2021-2259 CVE-2021-2260 CVE-2021-2261 CVE-2021-2262 CVE-2021-2263 CVE-2021-2267 CVE-2021-2268 CVE-2021-2269 CVE-2021-2270 CVE-2021-2271 CVE-2021-2272 CVE-2021-2273 CVE-2021-2274 CVE-2021-2275 CVE-2021-2276 CVE-2021-2288 CVE-2021-2289 CVE-2021-2290 CVE-2021-2292 CVE-2021-2295 CVE-2021-2314 CVE-2021-231623 Apr 2021 9.1 (v3) Critical Pass TYPO3 9.5.12 < 9.5.17 / 10.2 < 10.4.2 XSS (TYPO3-CORE-SA-2020-003) CVE-2020-11065 13 Jul 2020 5.4 (v3) Medium Pass PHP 5.5.x < 5.5.25 Multiple Vulnerabilities CVE-2006-7243 CVE-2015-4021 CVE-2015-4022 CVE-2015-4024 CVE-2015-4025 CVE-2015-4026 18 May 2015 7.5 (v3) High Pass PHP 5.6.x < 5.6.9 Multiple Vulnerabilities CVE-2006-7243 CVE-2015-2325 CVE-2015-2326 CVE-2015-4021 CVE-2015-4022 CVE-2015-4024 CVE-2015-4025 CVE-2015-4026 18 May 2015 9.8 (v3) Critical Pass eFront < 3.6.15.4 Build 18023 Multiple Vulnerabilities 26 May 2015 6.5 (v2) Medium Pass SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam) CVE-2015-4000 28 May 2015 3.7 (v3) Low Pass Jenkins < 1.565.3 / 1.586 Multiple Vulnerabilities CVE-2014-9634 CVE-2014-9635 03 Jun 2015 5.3 (v3) Medium Pass Dell NetVault Backup 10.0.x < 10.0.5 RCE CVE-2015-4067 CVE-2015-5696 05 Jun 2015 10 (v2) Critical Pass Oracle Database Multiple Vulnerabilities (July 2013 CPU) CVE-2013-3751 CVE-2013-3758 CVE-2013-3774 CVE-2013-3760 CVE-2013-3771 CVE-2013-3789 CVE-2013-3790 17 Jul 2013 9.9 (v3) Critical Pass SSL/TLS Recommended Cipher Suites 20 Jan 2022 None Pass IBM WebSphere Application Server Admin Console 7.0.0.0 <= 7.0.0.45 / 8.0.0.0 <= 8.0.0.15 / 8.5.0.0 <= 8.5.5.14 / 9.0.0.0 <= 9.0.0.9 XSSCVE-2018-1777 27 May 2020 5.4 (v3) Medium Pass SSH SHA-1 HMAC Algorithms Enabled 23 Sep 2021 None Pass Jenkins plugins Multiple Vulnerabilities (2022-03-29) CVE-2022-28133 CVE-2022-28134 CVE-2022-28135 CVE-2022-28136 CVE-2022-28137 CVE-2022-28138 CVE-2022-28139 CVE-2022-28140 CVE-2022-28141 CVE-2022-28142 CVE-2022-28143 CVE-2022-28144 CVE-2022-28145 CVE-2022-28146 CVE-2022-28147 CVE-2022-28148 CVE-2022-28149 CVE-2022-28150 CVE-2022-28151 CVE-2022-28152 CVE-2022-28153 CVE-2022-28154 CVE-2022-28155 CVE-2022-28156 CVE-2022-28157 CVE-2022-28158 CVE-2022-28159 CVE-2022-2816031 Mar 2022 8.8 (v3) High Pass SonicWall Secure Mobile Access (SMA) SQLi (SNWLID-2021-0017) CVE-2021-20028 04 Apr 2022 9.8 (v3) Critical Pass Cisco IOS XR Software Border Gateway Protocol DoS (cisco-sa-20100827-bgp) CVE-2010-3035 05 Apr 2022 7.5 (v3) High Pass IBM WebSphere Application Server 9.x < 9.0.5.12 Clickjacking CVE-2021-39038 03 Mar 2022 5.4 (v3) Medium Pass GitLab 12.10.x < 14.6.5 / 14.7.x < 14.7.4 / 14.8.x < 14.8.2 Multiple Vulnerabilities CVE-2022-0735 CVE-2022-0741 CVE-2022-0751 03 Mar 2022 9.8 (v3) Critical Pass PHP 5.4.x < 5.4.42 Multiple Vulnerabilities CVE-2015-2325 CVE-2015-2326 CVE-2015-3414 CVE-2015-3415 CVE-2015-3416 CVE-2015-4598 CVE-2015-4642 CVE-2015-4643 CVE-2015-464424 Jun 2015 9.8 (v3) Critical Pass PHP 5.5.x < 5.5.26 Multiple Vulnerabilities CVE-2015-2325 CVE-2015-2326 CVE-2015-3414 CVE-2015-3415 CVE-2015-3416 CVE-2015-4598 CVE-2015-4642 CVE-2015-4643 CVE-2015-464424 Jun 2015 9.8 (v3) Critical Pass Jenkins LTS < 2.303.3 / Jenkins weekly < 2.319 Multiple Vulnerabilities CVE-2021-21685 CVE-2021-21686 CVE-2021-21687 CVE-2021-21688 CVE-2021-21689 CVE-2021-21690 CVE-2021-21691 CVE-2021-21692 CVE-2021-21693 CVE-2021-21694 CVE-2021-21695 CVE-2021-21696 CVE-2021-21697 CVE-2021-2169804 Nov 2021 9.8 (v3) Critical Pass PHP 5.6.x < 5.6.10 Multiple Vulnerabilities CVE-2015-2325 CVE-2015-2326 CVE-2015-3414 CVE-2015-3415 CVE-2015-3416 CVE-2015-4598 CVE-2015-4642 CVE-2015-4643 CVE-2015-464424 Jun 2015 9.8 (v3) Critical Pass PHP 5.4.x < 5.4.43 Multiple Vulnerabilities (BACKRONYM) CVE-2015-3152 CVE-2015-5589 CVE-2015-5590 CVE-2015-8838 10 Jul 2015 9.8 (v3) Critical Pass Dell EMC iDRAC8 < 2.83.83.83 (DSA-2022-069) CVE-2022-24423 11 Apr 2022 7.5 (v3) High Pass PHP 5.5.x < 5.5.27 Multiple Vulnerabilities (BACKRONYM) CVE-2015-3152 CVE-2015-5589 CVE-2015-5590 CVE-2015-8838 10 Jul 2015 9.8 (v3) Critical Pass PHP 5.6.x < 5.6.11 Multiple Vulnerabilities (BACKRONYM) CVE-2015-3152 CVE-2015-5589 CVE-2015-5590 CVE-2015-8838 10 Jul 2015 9.8 (v3) Critical Pass IBM DB2 10.5 <= Fix Pack 5 Multiple Vulnerabilities CVE-2014-8910 CVE-2015-0157 CVE-2015-0197 CVE-2015-0198 CVE-2015-0199 CVE-2015-1883 CVE-2015-1922 CVE-2015-1935 18 Jul 2015 9.8 (v3) Critical Pass HP System Management Homepage 7.3.x / 7.4.x < 7.5.0 Multiple Vulnerabilities (FREAK) CVE-2014-0118 CVE-2014-0226 CVE-2014-0231 CVE-2014-3523 CVE-2014-3569 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8142 CVE-2014-8275 CVE-2014-9427 CVE-2014-9652 CVE-2014-9653 CVE-2014-9705 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206 CVE-2015-0207 CVE-2015-0208 CVE-2015-0209 CVE-2015-0231 CVE-2015-0232 CVE-2015-0273 CVE-2015-0285 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289 CVE-2015-0290 CVE-2015-0291 CVE-2015-0292 CVE-2015-0293 CVE-2015-1787 CVE-2015-2134 CVE-2015-2301 CVE-2015-2331 CVE-2015-2348 CVE-2015-278722 Jul 2015 7.5 (v2) High Pass Moodle 'external.php' 'badge' Parameter XSS CVE-2013-5674 20 Sep 2013 4.3 (v2) Medium Pass Polycom HDX < 3.1.1.2 Multiple Vulnerabilities 23 Sep 2013 10 (v2) Critical Pass Cisco IronPort PostX < 6.2.9.1 Multiple Vulnerabilities CVE-2010-0143 CVE-2010-0144 CVE-2010-0145 23 Sep 2013 10 (v2) Critical Pass ManageEngine ADSelfService Plus < build 6121 XSS CVE-2022-24681 13 Apr 2022 6.1 (v3) Medium Pass Cisco IOS XE Software Tool Command Language Privilege Escalation (cisco-sa-iosxe-priv-esc-grbtubU) CVE-2022-20676 13 Apr 2022 6.7 (v3) Medium Pass Cisco IOS XE Software for Catalyst 9000 Family Switches Catalyst 9000 Family Wireless Controllers Privilege Escalation (cisco-sa-ewlc-priv-esc-ybvHKO5)CVE-2022-20681 13 Apr 2022 7.8 (v3) High Pass HP System Management Homepage ginkgosnmp.inc Command Injection CVE-2013-3576 25 Sep 2013 9 (v2) High Pass Apache Struts 2 'action:' Parameter Prefix Security Constraint Bypass CVE-2013-4310 CVE-2013-4316 27 Sep 2013 6.5 (v3) Medium Pass Dell iDRAC6 / iDRAC7 Login Page 'ErrorMsg' Parameter XSS CVE-2013-3589 13 Oct 2013 4.3 (v2) Medium Pass IBM DB2 10.1 < Fix Pack 3 Multiple Vulnerabilities CVE-2013-3475 CVE-2013-4032 CVE-2013-4033 16 Oct 2013 8.8 (v3) High Pass AjaXplorer < 5.0.1 Multiple Command Execution Vulnerabilities CVE-2013-4267 18 Oct 2013 6.5 (v2) Medium Pass Schneider Electric C-Gate < 2.11.6 Multiple Vulnerabilities CVE-2021-22717 CVE-2021-22719 CVE-2021-22720 26 May 2021 8.8 (v3) High Pass Cogent DataHub < 7.3.0 Multiple Vulnerabilities CVE-2013-0680 CVE-2013-0681 CVE-2013-0682 CVE-2013-0683 22 Oct 2013 7.5 (v2) High Pass Default Password (netoptics) for 'admin' Account CVE-1999-0502 23 Oct 2013 9.8 (v3) Critical Pass Net Optics Director Default Credentials 23 Oct 2013 7.5 (v2) High Pass Zabbix Web Interface Default Administrator Credentials 11 Nov 2013 7.5 (v2) High Pass Drupal Google Site Search Module API Data Handling XSS CVE-2013-4384 15 Nov 2013 4.3 (v2) Medium Pass Oracle JavaServer Faces Multiple Partial Directory Traversals CVE-2013-3827 19 Nov 2013 5 (v2) Medium Pass PineApp Mail-SeCure admin/confnetworking.html Multiple Parameter Remote Command Injection CVE-2013-6829 CVE-2013-6830 22 Nov 2013 8.8 (v3) High Pass nginx < 1.4.4 / 1.5.7 ngx_parse_http Security Bypass CVE-2013-4547 27 Nov 2013 7.3 (v3) High Pass Nagios Looking Glass Addon for Nagios server/s3_download.php File Disclosure 02 Dec 2013 5 (v2) Medium Pass IBM Domino Web Administrator Multiple Vulnerabilities CVE-2013-4050 CVE-2013-4051 CVE-2013-4055 03 Dec 2013 6 (v2) Medium Pass Jenkins Accessible without Credentials 04 Dec 2013 7.5 (v2) High Pass PHP 5.3.x < 5.3.28 Multiple OpenSSL Vulnerabilities CVE-2013-4073 CVE-2013-4248 CVE-2013-6420 14 Dec 2013 7.3 (v3) High Pass ThoughtWorks GoCD Default Administrator Access 25 Jan 2022 9.8 (v3) Critical Pass Microsoft Windows Server Version 2004 Unsupported Version Detection 25 Jan 2022 10 (v3) Critical Pass Microsoft Windows 10 Version 2004 Unsupported Version Detection 25 Jan 2022 10 (v3) Critical Pass GoCD < 21.3.0 Path Traversal 25 Jan 2022 10 (v3) Critical Pass ThoughtWorks GoCD Web interface detection 25 Jan 2022 None Pass PHP 5.4.x < 5.4.23 OpenSSL openssl_x509_parse() Memory Corruption CVE-2013-6420 14 Dec 2013 7.5 (v2) High Pass PHP 5.5.x < 5.5.7 OpenSSL openssl_x509_parse() Memory Corruption CVE-2013-6420 14 Dec 2013 7.5 (v2) High Pass LiveZilla 'mobile/php/translation/index.php' 'g_language' Parameter Local File Inclusion CVE-2013-6225 14 Dec 2013 7.5 (v2) High Pass LiveZilla < 5.1.1.0 Multiple Vulnerabilities CVE-2013-6223 CVE-2013-6224 CVE-2013-6225 CVE-2013-7002 14 Dec 2013 4.3 (v2) Medium Pass Cisco Data Center Network Manager Authorization Bypass Vulnerabilities (cisco-sa-dcnm-authbypass-OHBPbxu)CVE-2021-1269 CVE-2021-1270 01 Jul 2021 6.5 (v3) Medium Pass Tenable Passive Vulnerability Scanner Unsupported Version Detection (remote check) 16 Dec 2013 10 (v2) Critical Pass MySQL 8.0.x < 8.0.26 Multiple Vulnerabilities (Jul 2021 CPU) CVE-2019-17543 CVE-2021-2339 CVE-2021-2340 CVE-2021-2342 CVE-2021-2352 CVE-2021-2354 CVE-2021-2356 CVE-2021-2357 CVE-2021-2367 CVE-2021-2370 CVE-2021-2372 CVE-2021-2374 CVE-2021-2383 CVE-2021-2384 CVE-2021-2385 CVE-2021-2387 CVE-2021-2389 CVE-2021-2390 CVE-2021-2399 CVE-2021-2402 CVE-2021-2410 CVE-2021-2411 CVE-2021-2417 CVE-2021-2418 CVE-2021-2422 CVE-2021-2424 CVE-2021-2425 CVE-2021-2426 CVE-2021-2427 CVE-2021-2429 CVE-2021-2437 CVE-2021-2440 CVE-2021-2441 CVE-2021-3450 CVE-2021-22884 CVE-2021-22901 CVE-2021-25122 CVE-2021-35537 CVE-2021-35583 CVE-2021-3562922 Jul 2021 8.1 (v3) High Pass Oracle Database Server Multiple Vulnerabilities (Jul 2021 CPU) CVE-2018-21010 CVE-2019-12415 CVE-2019-12973 CVE-2019-17545 CVE-2019-17566 CVE-2020-7760 CVE-2020-8908 CVE-2020-10543 CVE-2020-10878 CVE-2020-11987 CVE-2020-11988 CVE-2020-12723 CVE-2020-13956 CVE-2020-15389 CVE-2020-25649 CVE-2020-26870 CVE-2020-27193 CVE-2020-27814 CVE-2020-27841 CVE-2020-27842 CVE-2020-27843 CVE-2020-27844 CVE-2020-27845 CVE-2020-28196 CVE-2021-2326 CVE-2021-2328 CVE-2021-2329 CVE-2021-2330 CVE-2021-2333 CVE-2021-2334 CVE-2021-2335 CVE-2021-2336 CVE-2021-2337 CVE-2021-2351 CVE-2021-2438 CVE-2021-2460 CVE-2021-2333623 Jul 2021 9.8 (v3) Critical Pass Oracle Primavera Gateway (Jul 2021 CPU) CVE-2019-17195 CVE-2020-8203 CVE-2020-25649 CVE-2020-36189 CVE-2021-21290 CVE-2021-21409 22 Jul 2021 9.8 (v3) Critical Pass Oracle E-Business Suite Multiple Vulnerabilities (July 2021 CPU) CVE-2021-2343 CVE-2021-2355 CVE-2021-2359 CVE-2021-2360 CVE-2021-2361 CVE-2021-2362 CVE-2021-2363 CVE-2021-2364 CVE-2021-2365 CVE-2021-2380 CVE-2021-2393 CVE-2021-2398 CVE-2021-2405 CVE-2021-2406 CVE-2021-2415 CVE-2021-2434 CVE-2021-243623 Jul 2021 9.1 (v3) Critical Pass VMware vRealize Operations Manager 7.5.x / 8.x Multiple Vulnerabilities (VMSA-2021-0018) CVE-2021-22022 CVE-2021-22023 CVE-2021-22024 CVE-2021-22025 CVE-2021-22026 CVE-2021-22027 27 Aug 2021 7.5 (v3) High Pass Cisco Application Policy Infrastructure Controller Multiple Vulnerabilities (cisco-sa-capic-mdvul-HBsJBuvW)CVE-2021-1580 CVE-2021-1581 01 Sep 2021 9.1 (v3) Critical Pass MySQL 8.0.x < 8.0.21 Multiple Vulnerabilities (Jul 2020 CPU) CVE-2019-1551 CVE-2020-1967 CVE-2020-5258 CVE-2020-14539 CVE-2020-14540 CVE-2020-14547 CVE-2020-14550 CVE-2020-14553 CVE-2020-14559 CVE-2020-14568 CVE-2020-14575 CVE-2020-14576 CVE-2020-14586 CVE-2020-14591 CVE-2020-14597 CVE-2020-14614 CVE-2020-14619 CVE-2020-14620 CVE-2020-14623 CVE-2020-14624 CVE-2020-14631 CVE-2020-14632 CVE-2020-14633 CVE-2020-14634 CVE-2020-14641 CVE-2020-14643 CVE-2020-14651 CVE-2020-14654 CVE-2020-14656 CVE-2020-14663 CVE-2020-14678 CVE-2020-14680 CVE-2020-14697 CVE-2020-14702 CVE-2020-14725 CVE-2020-14799 CVE-2021-1998 CVE-2021-2012 CVE-2021-202016 Jul 2020 7.5 (v3) High Pass MySQL 5.7.x < 5.7.32 Multiple Vulnerabilities (Oct 2020 CPU) CVE-2020-14672 CVE-2020-14760 CVE-2020-14765 CVE-2020-14769 CVE-2020-14771 CVE-2020-14775 CVE-2020-14776 CVE-2020-14789 CVE-2020-14790 CVE-2020-14793 CVE-2020-14812 CVE-2020-14827 CVE-2020-14867 CVE-2020-1486922 Oct 2020 6.5 (v3) Medium Pass ManageEngine NCM < 12.5.465 SQLi CVE-2021-41081 01 Feb 2022 9.8 (v3) Critical Pass ManageEngine Network Configuration Manager (NCM) Detection 01 Feb 2022 None Pass VMware vCenter Server < 6.7 Multiple Vulnerabilities (VMSA-2021-0020) CVE-2021-21991 CVE-2021-21992 CVE-2021-21993 CVE-2021-22005 CVE-2021-22006 CVE-2021-22007 CVE-2021-22008 CVE-2021-22009 CVE-2021-22010 CVE-2021-22011 CVE-2021-22014 CVE-2021-22015 CVE-2021-22016 CVE-2021-22017 CVE-2021-22019 CVE-2021-2202022 Sep 2021 9.8 (v3) Critical Pass VMware vCenter Server < 7.0 U2c Multiple Vulnerabilities (VMSA-2021-0020) CVE-2021-21991 CVE-2021-21992 CVE-2021-21993 CVE-2021-22005 CVE-2021-22006 CVE-2021-22007 CVE-2021-22008 CVE-2021-22009 CVE-2021-22010 CVE-2021-22014 CVE-2021-22015 CVE-2021-22019 CVE-2021-2202022 Sep 2021 9.8 (v3) Critical Pass VMware vCenter Server < 6.5 U3q Multiple Vulnerabilities (VMSA-2021-0020) CVE-2021-21991 CVE-2021-21992 CVE-2021-21993 CVE-2021-22008 CVE-2021-22009 CVE-2021-22011 CVE-2021-22012 CVE-2021-22013 CVE-2021-22014 CVE-2021-22015 CVE-2021-22017 CVE-2021-2201922 Sep 2021 7.8 (v3) High Pass Apache Traffic Server Version 04 Apr 2012 None Pass PolarSSL 'asn1_get_sequence_of' Function Uninitialized Pointer RCE CVE-2015-1182 28 Jan 2015 10 (v3) Critical Pass LDAP NULL BASE Search Access 13 Aug 2001 5 (v2) Medium Pass Apache Traffic Server - HTTP Smuggling and Cache poisoning CVE-2018-8004 28 May 2020 6.5 (v3) Medium Pass Atlassian Jira < 8.21.0 Broken Access Control (JRASERVER-73071) CVE-2021-43946 27 Jan 2022 6.5 (v3) Medium Pass Jenkins LTS < 2.303.2 / Jenkins weekly < 2.315 Multiple Vulnerabilities CVE-2014-3577 CVE-2021-21682 CVE-2021-21683 CVE-2021-21684 13 Oct 2021 6.5 (v3) Medium Pass SolarWinds Orion Platform < 2020.2.6 HF1 Multiple Vulnerabilities CVE-2021-35219 CVE-2021-35220 CVE-2021-35221 CVE-2021-35222 CVE-2021-35238 CVE-2021-35239 CVE-2021-35240 22 Oct 2021 9.6 (v3) Critical Pass EtherNet/IP CIP EDS Metadata 27 May 2016 None Pass Cisco UCS Platform Emulator Web UI Detection 06 Jul 2016 None Pass Citrix XenDesktop Director Detection 04 Nov 2013 None Pass HP Data Protector 8.x Arbitrary Command Execution (HPSBMU03072) CVE-2014-2623 21 Jul 2014 10 (v2) Critical Pass SonicWall SonicOS Firewall Multiple Management Vulnerabilities (URGENT/11) CVE-2019-12255 CVE-2019-12256 CVE-2019-12257 CVE-2019-12258 CVE-2019-12259 CVE-2019-12260 CVE-2019-12261 CVE-2019-12262 CVE-2019-12263 CVE-2019-12264 CVE-2019-1226529 Jul 2019 9.8 (v3) Critical 51

RELAYTO Penetration Test Results - Page 51 RELAYTO Penetration Test Results Page 50 Page 52