| 98670 | Webmin 1.890 < 1.930 Remote Command Execution | Web App Scanning | Component Vulnerability | 2019/9/4 | 2023/3/14 | critical |
| 98924 | Apache Solr < 8.4.0 Remote Code Execution | Web App Scanning | Component Vulnerability | 2020/1/24 | 2022/2/21 | high |
| 114614 | CraftCMS < 4.13.2 / 5.x < 5.5.2 Remote Code Execution | Web App Scanning | Component Vulnerability | 2025/3/3 | 2025/3/11 | critical |
| 115434 | MLflow < 3.15.0 Server-Side Request Forgery | Web App Scanning | Artificial Intelligence | 2026/8/19 | 2026/8/19 | critical |
| 115443 | Microsoft SharePoint Server 2016 < 16.0.5556.1005 Remote Code Execution | Web App Scanning | Component Vulnerability | 2026/9/1 | 2026/9/1 | critical |
| 112956 | Atlassian Jira 8.14.x < 8.16.1 Arbitrary File Read | Web App Scanning | Component Vulnerability | 2021/9/10 | 2023/3/14 | medium |
| 115004 | Zimbra Collaboration 10.1.x < 10.1.5 Stored Cross-Site Scripting | Web App Scanning | Component Vulnerability | 2025/10/21 | 2025/10/21 | medium |
| 115231 | cPanel Authentication Bypass | Web App Scanning | Component Vulnerability | 2026/5/5 | 2026/5/5 | critical |
| 115441 | Microsoft SharePoint Server 2016 < 16.0.5561.1001 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 2026/9/1 | 2026/9/1 | critical |
| 115171 | N8n 1.121.0 < 1.121.1 Remote Code Execution | Web App Scanning | Artificial Intelligence | 2026/3/17 | 2026/3/17 | high |
| 114325 | Adobe Commerce / Magento XML External Entity Injection (CosmicSting) | Web App Scanning | Component Vulnerability | 2024/6/26 | 2024/7/18 | critical |
| 113169 | Spring Cloud Gateway < 3.0.7 / 3.1.x < 3.1.1 Remote Code Execution | Web App Scanning | Component Vulnerability | 2022/3/24 | 2023/3/13 | critical |
| 113550 | Zoho ManageEngine SAML SSO Remote Code Execution | Web App Scanning | Component Vulnerability | 2023/2/8 | 2023/12/6 | critical |
| 112963 | Atlassian Confluence 7.5.x < 7.11.6 Webwork OGNL Injection | Web App Scanning | Component Vulnerability | 2021/9/10 | 2023/3/14 | critical |
| 113932 | PaperCut NG/MF Authentication Bypass | Web App Scanning | Component Vulnerability | 2023/5/31 | 2023/5/31 | critical |
| 115317 | WordPress 7.0.x < 7.0.2 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 2026/7/20 | 2026/7/20 | critical |
| 114925 | Wing FTP < 7.4.4 Remote Code Execution | Web App Scanning | Component Vulnerability | 2025/7/28 | 2025/7/28 | critical |
| 115076 | Gladinet Triofox < 16.7.10368.56560 Improper Access Control | Web App Scanning | Component Vulnerability | 2025/12/17 | 2025/12/17 | critical |
| 98768 | PHP 7.1.x < 7.1.33 Remote Code Execution Vulnerability | Web App Scanning | Component Vulnerability | 2019/10/30 | 2023/3/14 | critical |
| 113217 | Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (Spring4Shell) | Web App Scanning | Component Vulnerability | 2022/3/31 | 2026/6/17 | critical |
| 113044 | GitLab 11.9.x < 13.8.8 / 13.9.x < 13.9.6 / 13.10.x < 13.10.3 Remote Code Execution | Web App Scanning | Component Vulnerability | 2021/11/9 | 2022/3/23 | critical |
| 114063 | Apache Tomcat 8.5.85 < 8.5.94 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 2023/10/12 | 2023/10/30 | medium |
| 114298 | PHP 8.1.x < 8.1.29 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 2024/6/10 | 2024/6/10 | critical |
| 114299 | Rejetto HTTP File Server 2.x Remote Code Execution | Web App Scanning | Component Vulnerability | 2024/6/14 | 2024/6/14 | critical |
| 114923 | Microsoft SharePoint Remote Code Execution | Web App Scanning | Component Vulnerability | 2025/7/24 | 2025/10/7 | critical |
| 114165 | Ivanti Connect Secure 9.x / 22.x Authentication Bypass | Web App Scanning | Component Vulnerability | 2024/1/26 | 2024/1/26 | critical |
| 115139 | Roundcube Webmail 1.6.x < 1.6.11 Remote Code Execution | Web App Scanning | Component Vulnerability | 2026/2/11 | 2026/2/11 | high |
| 115357 | Langflow < 1.10.1 Remote Code Execution | Web App Scanning | Artificial Intelligence | 2026/8/11 | 2026/8/11 | critical |
| 98638 | Atlassian Confluence 6.14.x < 6.14.2 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 2019/7/17 | 2023/3/14 | critical |
| 115040 | Fortinet FortiWeb Authentication Bypass | Web App Scanning | Component Vulnerability | 2025/11/14 | 2025/11/17 | critical |
| 115424 | Metabase 0.60.x < 0.60.17 SQL Injection | Web App Scanning | Component Vulnerability | 2026/8/19 | 2026/8/19 | critical |
| 115428 | Metabase 0.58.x < 0.58.24 SQL Injection | Web App Scanning | Component Vulnerability | 2026/8/19 | 2026/8/19 | critical |
| 113075 | Apache Log4j Remote Code Execution (Log4Shell) | Web App Scanning | Component Vulnerability | 2021/12/11 | 2024/3/6 | critical |
| 113903 | Adobe ColdFusion ComponentFilter Remote Code Execution | Web App Scanning | Component Vulnerability | 2023/5/31 | 2023/10/5 | critical |
| 114196 | Ivanti Connect Secure 9.x / 22.x Server-Side Request Forgery | Web App Scanning | Component Vulnerability | 2024/2/7 | 2024/2/7 | critical |
| 114668 | Langflow < 1.3.0 Unauthenticated Remote Code Execution | Web App Scanning | Artificial Intelligence | 2025/3/18 | 2025/4/10 | critical |
| 114922 | Fortinet FortiWeb Fabric Connector SQL Injection | Web App Scanning | Component Vulnerability | 2025/7/24 | 2025/7/24 | critical |
| 115120 | Vite < 4.5.11 / 5.0.x < 5.4.16 / 6.0.x < 6.0.13 / 6.1.x < 6.1.3 / 6.2.x < 6.2.4 Arbitrary File Read | Web App Scanning | Component Vulnerability | 2026/1/28 | 2026/1/28 | medium |
| 115704 | Atlassian Jira 10.4.x < 11.3.7 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 2026/10/16 | 2026/10/16 | high |
| 115688 | Ivanti Connect Secure < 22.8R2.5 / 25.1.1.x < 25.1.1.2 / 25.1.2.x < 25.1.3.1 Authentication Bypass | Web App Scanning | Component Vulnerability | 2026/10/16 | 2026/10/16 | medium |
| 115524 | WordPress 6.8.x < 6.8.10 Path Traversal | Web App Scanning | Component Vulnerability | 2026/9/23 | 2026/9/23 | critical |
| 115526 | WordPress 6.6.x < 6.6.9 Path Traversal | Web App Scanning | Component Vulnerability | 2026/9/23 | 2026/9/23 | critical |
| 115529 | WordPress 6.3.x < 6.3.12 Path Traversal | Web App Scanning | Component Vulnerability | 2026/9/23 | 2026/9/23 | critical |
| 115530 | WordPress 6.2.x < 6.2.13 Path Traversal | Web App Scanning | Component Vulnerability | 2026/9/23 | 2026/9/23 | critical |
| 115646 | Atlassian Bitbucket 10.3.x < 10.5.1 Path Traversal | Web App Scanning | Component Vulnerability | 2026/10/8 | 2026/10/8 | critical |
| 115649 | Atlassian Crowd < 6.3.7 Path Traversal | Web App Scanning | Component Vulnerability | 2026/10/8 | 2026/10/8 | critical |
| 112294 | Apache Tomcat 9.0.0.M1 < 9.0.1 通过 JSP Upload 进行的远程代码执行 | Web App Scanning | Component Vulnerability | 2018/11/5 | 2023/3/14 | high |
| 112300 | Apache Tomcat 8.5.x < 8.5.23 通过 JSP Upload 进行的远程代码执行 | Web App Scanning | Component Vulnerability | 2018/11/5 | 2023/3/14 | high |
| 112430 | Drupal 8.8.x < 8.8.6 多个漏洞 | Web App Scanning | Component Vulnerability | 2020/6/9 | 2023/3/14 | medium |
| 112485 | Joomla! 2.5.x < 3.9.19 多个漏洞 | Web App Scanning | Component Vulnerability | 2020/6/26 | 2023/3/14 | high |
