Pass ISC BIND < 4.9.7-REL / 8.2.2-P5 Multiple Remote Vulnerabilities CVE-1999-0833 CVE-1999-0835 CVE-1999-0837 CVE-1999-0848 CVE-1999-0849 CVE-1999-0851 11 Nov 1999 10 (v2) Critical Pass Tenable SecurityCenter < 5.4.1 Multiple Vulnerabilities (TNS-2016-19) CVE-2016-7052 CVE-2016-7103 CVE-2016-7124 CVE-2016-7125 CVE-2016-7126 CVE-2016-7127 CVE-2016-7128 CVE-2016-7129 CVE-2016-7130 CVE-2016-7131 CVE-2016-7132 CVE-2016-7412 CVE-2016-7413 CVE-2016-7414 CVE-2016-7415 CVE-2016-7416 CVE-2016-7417 CVE-2016-7418 CVE-2016-913727 Jan 2017 9.8 (v3) Critical Pass SNMP Agent Default Community Names CVE-1999-0186 CVE-1999-0254 CVE-1999-0472 CVE-1999-0516 CVE-1999-0517 CVE-1999-0792 CVE-2000-0147 CVE-2001-0380 CVE-2001-0514 CVE-2001-1210 CVE-2002-0109 CVE-2002-0478 CVE-2002-1229 CVE-2004-0311 CVE-2004-1474 CVE-2010-157425 Nov 2002 10 (v2) Critical Pass Oracle Application Express (Apex) CVE-2009-0981 CVE-2009-0981 20 Feb 2013 4 (v2) Medium Pass sphpblog search.php q Parameter XSS CVE-2005-1135 14 Apr 2005 4.3 (v2) Medium Pass Microsoft FrontPage dvwssr.dll Multiple Vulnerabilities CVE-2000-0260 14 Apr 2000 10 (v2) Critical Pass rlogin Service Detection CVE-1999-0651 30 Aug 1999 7.5 (v2) High Pass Hosting Controller HCDiskQuoteService.csv Direct Request Information Disclosure CVE-2005-0694 10 Mar 2005 5 (v2) Medium Pass OpenSSL < 0.9.7l / 0.9.8d Multiple Vulnerabilities CVE-2006-2937 CVE-2006-3738 CVE-2006-2940 CVE-2006-4343 04 Jan 2012 10 (v2) Critical Noise HTTP/2 Cleartext Detection 04 Sep 2015 None Pass OpenSSL 1.0.0 < 1.0.0m Multiple Vulnerabilities CVE-2010-5298 CVE-2014-0076 CVE-2014-0195 CVE-2014-0198 CVE-2014-0221 CVE-2014-0224 CVE-2014-3470 CVE-2015-0292 08 Apr 2014 7.5 (v2) High Pass Microsoft Windows SMTP Incorrect Credentials Authentication Bypass CVE-2001-0504 07 Jul 2001 7.5 (v2) High Pass Barracuda Web Filter <= 5.0.0.012 Remote Command Execution 09 Sep 2015 9 (v2) High Pass IBM DB2 10.5 < Fix Pack 6 Multiple Vulnerabilities (Bar Mitzvah) CVE-2015-0138 CVE-2015-0197 CVE-2015-0198 CVE-2015-0199 CVE-2015-1883 CVE-2015-1922 CVE-2015-1935 CVE-2015-2808 18 Sep 2015 9.8 (v3) Critical Pass Cisco NX-OS Malformed LISP Packet DoS (CSCuv11993) CVE-2016-1351 01 Apr 2016 7.5 (v3) High Pass Cisco TelePresence Server Conference Control Protocol API URL Handling DoS (cisco-sa-20150916-tps) CVE-2015-6284 24 Sep 2015 7.8 (v2) High Pass SqWebMail redirect Parameter CRLF Injected XSS CVE-2005-1308 26 May 2005 4.3 (v2) Medium Pass VMware vCenter 5.5 LDAP Certificate Validation MitM Spoofing (VMSA-2015-0006) CVE-2015-6932 24 Sep 2015 5.8 (v2) Medium Pass VMware vCenter 6.0 LDAP Certificate Validation MitM Spoofing (VMSA-2015-0006) CVE-2015-6932 24 Sep 2015 5.8 (v2) Medium Pass Bay Networks Accelar 1200 Switch Default Password (password) for 'usrname' Account CVE-1999-0508 03 Jun 2005 10 (v2) Critical Pass IBM Lotus Sametime Multiplexer Buffer Overflow CVE-2008-2499 24 Sep 2013 7.5 (v2) High Pass IBM Domino ZMerge Database Security Bypass CVE-2002-0664 09 Oct 2015 7.3 (v3) High Pass Cisco Small Business RV Series Routers Management Interface Multiple Vulnerabilities (cisco-sa-rv-overflow-ghZP68yj)CVE-2021-1319 CVE-2021-1320 CVE-2021-1321 CVE-2021-1322 CVE-2021-1323 CVE-2021-1324 CVE-2021-1325 CVE-2021-1326 CVE-2021-1327 CVE-2021-1328 CVE-2021-1329 CVE-2021-1330 CVE-2021-1331 CVE-2021-1332 CVE-2021-1333 CVE-2021-1334 CVE-2021-1335 CVE-2021-1336 CVE-2021-1337 CVE-2021-1338 CVE-2021-1339 CVE-2021-1340 CVE-2021-1341 CVE-2021-1342 CVE-2021-1343 CVE-2021-1344 CVE-2021-1345 CVE-2021-1346 CVE-2021-1347 CVE-2021-134805 Feb 2021 7.2 (v3) High Pass ViRobot Linux Server addschup Multiple Overflows CVE-2005-2041 15 Jun 2005 10 (v2) Critical Pass Cisco Small Business RV Series VPN Multiple RCE (cisco-sa-rv160-260-rce-XZeFkNHf) CVE-2021-1289 CVE-2021-1290 CVE-2021-1291 CVE-2021-1292 CVE-2021-1293 CVE-2021-1294 CVE-2021-1295 05 Feb 2021 9.8 (v3) Critical Pass Oracle GlassFish Server Unspecified Information Disclosure (October 2015 CPU) CVE-2015-4899 21 Oct 2015 4.3 (v2) Medium Pass OpenSSH < 4.2 Multiple Vulnerabilities CVE-2005-2797 CVE-2005-2798 CVE-2006-0393 07 Sep 2005 3.5 (v2) Low Pass Persistent Systems Radia Client Automation Agent Stack Overflow Remote Code Execution (destructive check) 02 Oct 2015 10 (v2) Critical Pass Apple iTunes < 12.3.1 Multiple Vulnerabilities (uncredentialed check) CVE-2015-5928 CVE-2015-5929 CVE-2015-5930 CVE-2015-5931 CVE-2015-6975 CVE-2015-6992 CVE-2015-7002 CVE-2015-7011 CVE-2015-7012 CVE-2015-7013 CVE-2015-7014 CVE-2015-701726 Oct 2015 7.5 (v2) High Pass SAP BusinessObjects Business Intelligence Platform Web Detection. 08 Feb 2021 None Pass Juniper Junos OS DoS (JSA11101) CVE-2021-0211 03 Feb 2021 10 (v3) Critical Pass Apache Traffic Server 5.3.x < 5.3.2 HTTP2 Multiple Vulnerabilities CVE-2015-5168 CVE-2015-5206 08 Dec 2015 9.8 (v3) Critical Pass Sun JavaServer Default Admin Password CVE-1999-0508 05 Jun 2002 7.5 (v2) High Pass Apple TV < 14.2 Multiple Vulnerabilities CVE-2020-9974 CVE-2020-10002 CVE-2020-10003 CVE-2020-10010 CVE-2020-10011 CVE-2020-10016 CVE-2020-10017 CVE-2020-27899 CVE-2020-27905 CVE-2020-27909 CVE-2020-27910 CVE-2020-27911 CVE-2020-27912 CVE-2020-27916 CVE-2020-27917 CVE-2020-27918 CVE-2020-27927 CVE-2020-2793505 Feb 2021 7.8 (v3) High Pass paNews 2.0.4b Multiple Input Validation Vulnerabilities CVE-2005-0646 CVE-2005-0647 18 Mar 2005 7.5 (v2) High Pass Tenable SecurityCenter < 5.17.0 Multiple Vulnerabilities (TNS-2020-11) CVE-2019-1551 CVE-2020-1967 CVE-2020-1971 CVE-2020-5808 CVE-2020-11022 23 Dec 2020 7.5 (v3) High Pass OpenSSL 0.9.8 < 0.9.8zh X509_ATTRIBUTE Memory Leak DoS CVE-2015-3195 07 Dec 2015 5.3 (v3) Medium Pass OpenSSL 1.0.0 < 1.0.0t Multiple DoS CVE-2015-3195 CVE-2015-3196 07 Dec 2015 5.3 (v3) Medium Pass Xerox WorkCentre 3025 / 3215 / 3225 OpenSSL Multiple Vulnerabilities (XRX15AM) (FREAK) (POODLE) CVE-2014-3566 CVE-2015-0204 11 Dec 2015 4.3 (v2) Medium Pass Xerox WorkCentre 3550 OpenSSL Multiple Vulnerabilities (XRX15AJ) (FREAK) (POODLE) CVE-2014-3566 CVE-2015-0204 11 Dec 2015 4.3 (v2) Medium Pass Cisco Small Business RV Series Routers Multiple Vulnerabilities (cisco-sa-rv160-260-filewrite-7x9mnKjn) CVE-2021-1296 CVE-2021-1297 05 Feb 2021 7.5 (v3) High Pass Apple iTunes < 12.3.2 Multiple Vulnerabilities (uncredentialed check) CVE-2015-7048 CVE-2015-7050 CVE-2015-7095 CVE-2015-7096 CVE-2015-7097 CVE-2015-7098 CVE-2015-7099 CVE-2015-7100 CVE-2015-7101 CVE-2015-7102 CVE-2015-7103 CVE-2015-710415 Dec 2015 6.8 (v2) Medium Pass Zebedee Malformed Protocol Option Header Port 0 Remote DoS CVE-2005-2904 10 Sep 2005 5 (v2) Medium Pass Juniper ScreenOS SSH / Telnet Authentication Backdoor CVE-2015-7755 23 Dec 2015 9.8 (v3) Critical Pass Symantec Messaging Gateway 10.x < 10.6.4 Directory Traversal Vulnerability (SYM17-016) CVE-2017-15532 02 Jan 2018 5.7 (v3) Medium Pass Junos OS: Multiple vulnerabilities in libxml2 (JSA10916) CVE-2016-3627 CVE-2016-3705 CVE-2016-4447 CVE-2016-4448 CVE-2016-4449 CVE-2017-7375 CVE-2017-18258 CVE-2018-9251 11 Jan 2019 9.8 (v3) Critical Pass SolarWinds Storage Manager AuthenticationFilter Script Upload RCE CVE-2015-5371 22 Dec 2015 10 (v2) Critical Pass Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability (cisco-sa-20190227-rmi-cmd-ex)CVE-2019-1663 27 Feb 2019 9.8 (v3) Critical Pass ACAP Cleartext Authentication 05 Jan 2016 4.3 (v2) Medium Pass AMQP Cleartext Authentication 05 Jan 2016 4.3 (v2) Medium Pass Palo Alto Networks PAN-OS 5.0.x < 5.0.19 / 5.1.x < 5.1.12 / 6.0.x < 6.0.14 / 6.1.x < 6.1.12 / 7.0.x < 7.0.8 Privilege Escalation (PCVE-2016-1712 AN-SA-2016-0012) 26 Aug 2016 7.8 (v3) High Pass ESXi 5.5 < Build 3248547 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001) (remote check)CVE-2015-6933 15 Jan 2016 6.3 (v3) Medium Pass HP Virtual Table Server (VTS) Database Import RCE CVE-2015-6857 20 Jan 2016 7.2 (v2) High Pass Oracle GlassFish Embedded Server Vulnerabilities (January 2016 CPU) CVE-2016-0441 CVE-2016-0453 20 Jan 2016 6.8 (v2) Medium Pass Oracle Application Express (Apex) CVE-2009-1993 CVE-2009-1993 20 Feb 2013 5.5 (v2) Medium Pass Cisco Unified Computing System Manager CGI RCE (CSCur90888) CVE-2015-6435 29 Jan 2016 9.8 (v3) Critical Pass Cisco Unified Computing System Manager CGI RCE (CSCur90888) (remote check) CVE-2015-6435 05 Feb 2016 9.8 (v3) Critical Pass HP Network Automation Multiple Vulnerabilities (HPSBMU02693) CVE-2011-2402 CVE-2011-2403 24 Sep 2013 6.5 (v2) Medium Pass Apache 2.2.x < 2.2.6 Multiple Vulnerabilities (DoS, XSS, Info Disc) CVE-2006-5752 CVE-2007-1862 CVE-2007-1863 CVE-2007-3303 CVE-2007-3304 CVE-2007-3847 CVE-2007-4465 CVE-2007-1743 14 Sep 2007 5.3 (v3) Medium Pass pfSense < 2.4.5 Multiple Vulnerabilities CVE-2019-12462 CVE-2019-12949 CVE-2019-16914 CVE-2019-16915 11 Feb 2021 9.8 (v3) Critical Pass Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability - Cisco Systems CVE-2008-3804 01 Sep 2010 7.8 (v2) High Pass macOS 10.13 Authentication Bypass Remote Check (CVE-2017-13872) CVE-2017-13872 04 Dec 2017 8.1 (v3) High Pass SolarWinds Orion Platform < 2019.4.2 Remote Code Execution CVE-2021-25274 09 Feb 2021 9.8 (v3) Critical Pass Cisco Prime Collaboration Assurance 10.5.x / 10.6.x / 11.0.x / 11.1.x < 11.1.66527 Open Redirect (cisco-sa-20160503-pca)CVE-2016-1392 09 May 2016 7.4 (v3) High Pass SolarWinds Orion Platform < 2020.2.4 Multiple Vulnerabilities CVE-2021-25274 CVE-2021-25275 09 Feb 2021 9.8 (v3) Critical Pass Cisco Prime Collaboration Provisioning 10.6.x / 11.0.x < 11.0.0.815 Web Framework SQLi (cisco-sa-20151008-pcp)CVE-2015-6329 09 May 2016 6.5 (v2) Medium Pass HylaFAX hfaxd with PAM Password Policy Bypass CVE-2005-3538 10 Jan 2006 7.5 (v2) High Pass Junos OS: OpenSSL Security Advisories [16 Apr 2018] and [12 June 2018] (JSA10919) CVE-2018-0732 CVE-2018-0737 11 Jan 2019 5.9 (v3) Medium Pass VMware ESX / ESXi Descheduled Time Accounting DoS (VMSA-2009-0007) (remote check) CVE-2009-1805 03 Mar 2016 4 (v2) Medium Pass Lotus Domino LDAP Server Crafted Packet Remote DoS CVE-2006-0580 13 Feb 2006 5 (v2) Medium Pass EMC RSA Authentication Manager < 8.3 Patch 1 Multiple Vulnerabilities (DSA-2018-086) CVE-2018-1247 CVE-2018-1248 10 May 2018 6.1 (v3) Medium Pass VMware ESX / ESXi Authentication Service and Third-Party Libraries Multiple Vulnerabilities (VMSA-2013-0001) (rCVE-2011-1202 CVE-2011-3102 CVE-2011-3970 CVE-2012-2807 CVE-2012-2825 CVE-2012-2870 CVE-2012-2871 CVE-2012-4244 CVE-2013-1405emote check) 04 Mar 2016 10 (v2) Critical Pass VMware ESX Service Console Multiple Vulnerabilities (VMSA-2012-0008) (remote check) CVE-2010-4008 CVE-2011-0216 CVE-2011-1944 CVE-2011-2834 CVE-2011-3191 CVE-2011-3905 CVE-2011-3919 CVE-2011-4348 CVE-2012-002803 Mar 2016 10 (v2) Critical Pass VMware ESX WebWorks Help Multiple XSS (VMSA-2009-0017) (remote check) CVE-2009-3731 03 Mar 2016 4.3 (v2) Medium Pass Fenice <= 1.10 Multiple Remote Vulnerabilities CVE-2006-2022 CVE-2006-2023 27 May 2006 7.5 (v2) High Pass VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2013-0015) (remote check) CVE-2012-2372 CVE-2012-3552 CVE-2013-0791 CVE-2013-1620 CVE-2013-2147 CVE-2013-2164 CVE-2013-2206 CVE-2013-2224 CVE-2013-2232 CVE-2013-2234 CVE-2013-223704 Mar 2016 6.9 (v2) Medium Pass VMware ESX / ESXi Arbitrary File Modification (VMSA-2013-0016) (remote check) CVE-2013-5973 04 Mar 2016 4.4 (v2) Medium Pass CA DM Deployment Common Component Multiple DoS CVE-2006-0306 CVE-2006-0307 19 Jan 2006 5 (v2) Medium Pass VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0001) (remote check) CVE-2010-0211 CVE-2010-0212 CVE-2010-2956 CVE-2010-3847 CVE-2010-3856 04 Mar 2016 7.2 (v2) High Pass VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0010) (remote check) CVE-2010-0296 CVE-2011-0536 CVE-2011-0997 CVE-2011-1071 CVE-2011-1095 CVE-2011-1658 CVE-2011-1659 04 Mar 2016 7.5 (v2) High Pass Ipswitch IMail Server SMTP Service Crafted RCPT String Remote Overflow CVE-2006-4379 08 Sep 2006 7.5 (v2) High Pass Apache on Windows mod_alias URL Validation Canonicalization CGI Source Disclosure CVE-2006-4110 11 Aug 2006 5.3 (v3) Medium Pass RunCMS Multiple Script lid Parameter SQL Injection CVE-2007-6544 07 Jan 2008 7.5 (v2) High Pass pfSense < 2.4.4-p3 Multiple Vulnerabilities CVE-2018-20798 CVE-2018-20799 11 Feb 2021 7.5 (v3) High Pass Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613) CVE-2019-1613 13 Dec 2019 6.7 (v3) Medium Pass IBM Tivoli Storage Manager FastBack 5.5.x Multiple Vulnerabilities CVE-2016-0212 CVE-2016-0213 CVE-2016-0216 04 Mar 2016 9.8 (v3) Critical Pass VMware ESX Multiple Vulnerabilities (VMSA-2010-0013) (remote check) CVE-2005-4268 CVE-2007-4476 CVE-2008-5302 CVE-2008-5303 CVE-2010-0624 CVE-2010-1168 CVE-2010-1321 CVE-2010-1447 CVE-2010-206308 Mar 2016 8.5 (v2) High Pass VMware ESX Multiple Vulnerabilities (VMSA-2010-0019) (remote check) CVE-2009-0590 CVE-2009-2409 CVE-2009-3555 CVE-2010-0405 CVE-2010-3069 08 Mar 2016 7.5 (v2) High Pass Oracle GlassFish Server 2.1.1.x < 2.1.1.30 / 3.0.1.x < 3.0.1.15 / 3.1.2.x < 3.1.2.16 Multiple Vulnerabilities (January 2017 CPU)CVE-2016-5528 CVE-2017-3239 CVE-2017-3247 CVE-2017-3249 CVE-2017-3250 19 Jan 2017 7.3 (v3) High Pass VMware ESX Privilege Escalation (VMSA-2010-0017) (remote check) CVE-2010-3081 08 Mar 2016 7.2 (v2) High Pass Verity Ultraseek < 5.7 Multiple Vulnerabilities CVE-2006-5819 18 Nov 2006 10 (v2) Critical Pass HP OfficeJet Printers Unspecified Information Disclosure (HPSBPI03546) CVE-2016-2244 15 Mar 2016 5.9 (v3) Medium Pass Cisco Unified Computing System (UCS) Central Software Improper Certificate Validation (cisco-sa-ucs-invcert-eOpRvCKH)CVE-2021-1354 12 Feb 2021 3.5 (v3) Low Pass Lexmark MarkVision Enterprise < 2.1 Multiple Vulnerabilities CVE-2014-8741 CVE-2014-8742 22 Dec 2014 10 (v2) Critical Pass ManageEngine Desktop Central Default Administrator Credentials 04 Dec 2013 7.5 (v2) High Pass IBM Network Security Protection XGS Default Credentials 02 Jan 2015 10 (v2) Critical Pass ASUS Router 'infosvr' Remote Command Execution CVE-2014-9583 14 Jan 2015 10 (v2) Critical Pass Mercury LoadRunner Agent server_ip_name Field Remote Buffer Overflow CVE-2007-0446 13 Feb 2007 10 (v2) Critical Pass Lexmark MarkVision Enterprise GfdFileUploadServerlet RCE Vulnerability CVE-2014-8741 15 Jan 2015 10 (v2) Critical Pass OpenSSL 1.0.1 < 1.0.1k Multiple Vulnerabilities (FREAK) CVE-2014-3569 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8275 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206 16 Jan 2015 5 (v2) Medium Pass Juniper Junos OS Multiple Local Privilege Escalation Vulnerabilities (JSA11114) CVE-2021-0204 CVE-2021-0223 27 Jan 2021 7.8 (v3) High Pass Apache Traffic Server 5.1.x < 5.1.2 DoS CVE-2014-10022 22 Jan 2015 5 (v2) Medium Pass Multiple Vulnerabilities in Cisco NX-OS-Based Products (cisco-sa-20130424-nxosmulti) CVE-2013-1178 CVE-2013-1179 CVE-2013-1180 CVE-2013-1181 31 May 2013 9 (v2) High Pass ManageEngine Password Manager Pro Default Credentials 23 Jan 2015 7.5 (v2) High Pass Openswan < 2.6.36 IKE Packet NULL Pointer Dereference Remote DoS CVE-2011-3380 28 Jan 2015 5.3 (v3) Medium Pass Openswan < 2.6.37 Cryptographic Helper Use-After-Free Remote DoS CVE-2011-4073 28 Jan 2015 4.3 (v3) Medium Pass Juniper Junos OS MX Series DoS (JSA11077) CVE-2020-1680 30 Oct 2020 5.3 (v3) Medium Pass ESXi 5.5 < Build 2352327 Multiple Vulnerabilities (remote check) (POODLE) CVE-2014-3513 CVE-2014-3566 CVE-2014-3567 CVE-2014-3568 CVE-2014-3660 CVE-2014-8370 CVE-2015-1044 29 Jan 2015 6.4 (v2) Medium Pass Zope Image and File Update Data Protection Bypass CVE-2000-1212 19 Dec 2000 6 (v2) Medium Pass Mac OS X 10.8.x < 10.8.5 Multiple Vulnerabilities CVE-2012-0883 CVE-2012-2686 CVE-2012-2687 CVE-2012-3499 CVE-2012-3817 CVE-2012-4244 CVE-2012-4558 CVE-2012-5166 CVE-2012-5688 CVE-2013-0166 CVE-2013-0169 CVE-2013-1025 CVE-2013-1026 CVE-2013-1027 CVE-2013-1028 CVE-2013-1029 CVE-2013-1030 CVE-2013-1031 CVE-2013-1032 CVE-2013-1033 CVE-2013-1635 CVE-2013-1643 CVE-2013-1775 CVE-2013-1824 CVE-2013-1899 CVE-2013-1900 CVE-2013-1901 CVE-2013-1902 CVE-2013-1903 CVE-2013-2110 CVE-2013-226613 Sep 2013 10 (v2) Critical Pass Tenable SecurityCenter < 5.14.0 Multiple Vulnerabilities (TNS-2020-02) CVE-2019-11358 CVE-2020-5737 19 Feb 2021 6.1 (v3) Medium Pass Cisco IOS Software Multicast Network Time Protocol Denial of Service Vulnerability (cisco-sa-20130925-ntp)CVE-2013-5472 07 Oct 2013 7.1 (v2) High 97
RELAYTO Penetration Test Results Page 96 Page 98