Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities that can be detected with Pentest-Tools.com and the exploits that are currently available in the platform.

We detect more than 15,000 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 84 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Pentest-Tools.com Vulnerabilities
Name	CVE	Detectable with	Published	Updated	Severity	CVSSv3 score	Exploitable with Sniper
GLPI - Remote Code Execution	CVE-2022-35914	Network Scanner	Jan 2023	Jan 2023	Critical	9.8	Yes
Webmin - Remote Code Execution	CVE-2019-15107	Network Scanner	Jan 2023	Jan 2023	Critical	9.8	Yes
Cisco Small Business RV Series - Remote Code Execution	CVE-2021-1472	Network Scanner	Jan 2023	Jan 2023	Critical	9.8	Yes
Apache APISIX - Remote Code Execution	CVE-2022-24112	Network Scanner	Dec 2022	Dec 2022	Critical	9.8	Yes
Cisco Small Business RV Series - Information Disclosure	CVE-2019-1653	Network Scanner	Dec 2022	Dec 2022	High	7.5	Yes
pfSense pfBlocker-NG - Remote Code Execution	CVE-2022-31814	Network Scanner	Dec 2022	Dec 2022	Critical	9.8	Yes
Node.js - Remote Code Execution	CVE-2022-29078	Network Scanner	Nov 2022	Nov 2022	Critical	9.8	Yes
WordPress - Server Side Request Forgery	CVE-2022-1386	Network Scanner	Nov 2022	Nov 2022	Critical	9.8	Yes
ManageEngine ADAudit Plus - XML External Entity Injection	CVE-2022-28219	Network Scanner	Oct 2022	Oct 2022	Critical	9.8	No
FortiOS, FortiProxy and FortiSwitchManager - Authentification Bypass	CVE-2022-40684	Network Scanner	Oct 2022	Oct 2022	Critical	9.6	Yes
Grafana - Authentication Bypass	CVE-2021-39226	Network Scanner	Oct 2022	Oct 2022	High	7.3	No
Microsoft Exchange - Remote Code Execution	CVE-2022-41040 CVE-2022-41082	Network Scanner	Oct 2022	Oct 2022	High	8.8	No
Bitbucket Server & Data Center - Remote Code Execution	CVE-2022-36804	Network Scanner	Oct 2022	Oct 2022	High	8.8	Yes
Jenkins - Remote Code Execution	CVE-2018-1000861 CVE-2019-1003005 CVE-2019-1003029	Network Scanner	Sep 2022	Sep 2022	Critical	9.9	Yes
Sophos XG Firewall - Authentication Bypass	CVE-2022-1040	Network Scanner	Sep 2022	Sep 2022	Critical	9.8	No
ManageEngine Password Manager Pro & PAM360 - Remote Code Execution	CVE-2022-35405	Network Scanner	Sep 2022	Sep 2022	Critical	9.8	Yes
Gitlab CE/EE - Remote Code Execution	CVE-2022-2884	Network Scanner	Sep 2022	Sep 2022	Critical	9.9	No
ManageEngine ADSelfService Plus - Stored Cross-Site Scripting	CVE-2022-24681	Network Scanner	Aug 2022	Aug 2022	Medium	6.1	No
Apache - Memory Corruption	CVE-2020-9490	Network Scanner	Aug 2022	Aug 2022	High	7.5	No
Jira - Arbitrary File Read	CVE-2020-29453	Network Scanner	Aug 2022	Aug 2022	Medium	5.3	Yes
Zimbra ZCS - Remote Code Execution	CVE-2022-27925 CVE-2022-37042	Network Scanner	Aug 2022	Aug 2022	Critical	9.8	Yes
Jira - Arbitrary File Read	CVE-2021-26086	Network Scanner	Aug 2022	Aug 2022	Medium	5.3	Yes
VMware Workspace One - Arbitrary File Read	CVE-2022-31656	Network Scanner	Aug 2022	Aug 2022	Critical	9.8	Yes
BlueKeep - Remote Code Execution	CVE-2019-0708	Network Scanner	Aug 2022	Aug 2022	Critical	9.8	No
Jira - Arbitrary File Read	CVE-2019-8442	Network Scanner	Aug 2022	Aug 2022	High	7.5	Yes
Jira - Information Disclosure	CVE-2020-14179	Network Scanner	Aug 2022	Aug 2022	Medium	5.3	Yes
Emlog - Path Disclosure	CVE-2021-3293	Network Scanner	Aug 2022	Aug 2022	High	7.5	No
Atlassian Confluence - Arbitrary File Read	CVE-2021-26085	Network Scanner	Aug 2022	Aug 2022	Medium	5.3	Yes
Drupal - Remote Code Execution	CVE-2018-7600	Network Scanner	May 2022	Aug 2022	Critical	9.8	Yes
Apache Tomcat Server - Open Redirect	CVE-2018-11784	Network Scanner	Aug 2022	Aug 2022	Medium	4.3	No
Cisco ASA and Cisco FTD - Cross-Site Scripting	CVE-2020-3580	Network Scanner	Aug 2022	Aug 2022	Medium	6.1	No
Atlassian Confluence - Authentication Bypass	CVE-2022-26138	Network Scanner	Aug 2022	Aug 2022	Critical	9.8	No
Microsoft SharePoint - Remote Code Execution	CVE-2019-0604	Network Scanner	Jul 2022	Jul 2022	Critical	9.8	Yes
Spring - Remote Code Execution	CVE-2022-22980	Network Scanner	Jul 2022	Jul 2022	Critical	9.8	No
Atlassian Crowd - Remote Code Execution	CVE-2019-11580	Network Scanner	Jul 2022	Jul 2022	Critical	9.8	Yes
Kibana - Remote Code Execution	CVE-2019-7609	Network Scanner	Jul 2022	Jul 2022	Critical	10	Yes
Drupal Core - Remote Code Execution	CVE-2019-6340	Network Scanner	Jul 2022	Jul 2022	High	8.1	Yes
Atlassian Confluence - Remote Code Execution	CVE-2021-26084	Network Scanner	Sep 2021	Jul 2022	Critical	9.8	Yes
Pulse Secure - Local File Inclusion	CVE-2019-11510	Network Scanner	Sep 2021	Jul 2022	Critical	10	Yes
ZyXEL Firewall - Unauthenticated Remote Command Injection	CVE-2022-30525	Network Scanner	Jun 2022	Jun 2022	Critical	9.8	Yes
F5 BIG-IP - Remote Code Execution	CVE-2022-1388	Network Scanner	May 2022	Jun 2022	Critical	9.8	Yes
Atlassian Confluence - Remote Code Execution	CVE-2022-26134	Network Scanner	Jun 2022	Jun 2022	Critical	9.8	Yes
Zabbix - Authentication Bypass and Remote Code Execution	CVE-2022-23131	Network Scanner	Mar 2022	Jun 2022	Critical	9.8	Yes
DotCMS - Remote Code Execution	CVE-2022-26352	Network Scanner	Jun 2022	Jun 2022	Critical	9.8	Yes
Gitlab CE/EE - Remote Code Execution	CVE-2021-22205	Network Scanner	Nov 2021	Jun 2022	Critical	10	Yes
Spring Core - Remote Code Execution	CVE-2022-22965	Network Scanner	Apr 2022	May 2022	Critical	9.8	Yes
Grafana - Arbitrary File Read	CVE-2021-43798	Network Scanner	Jan 2022	May 2022	High	7.5	Yes
Oracle WebLogic - Local File Inclusion	CVE-2022-21371	Network Scanner	May 2022	May 2022	High	7.5	No
Jira - Authentication Bypass	CVE-2022-0540	Network Scanner	May 2022	May 2022	Critical	9.8	No
F5 BIG-IP - Remote Code Execution	CVE-2020-5902	Network Scanner	Aug 2021	May 2022	Critical	9.8	Yes
F5 BIG-IP - Remote Code Execution	CVE-2021-22986	Network Scanner	Dec 2021	May 2022	Critical	9.8	Yes
Redis - Remote Code Execution	CVE-2022-0543	Network Scanner	May 2022	May 2022	Critical	10	Yes
Magento - Remote Code Execution	CVE-2022-24086	Network Scanner	Mar 2022	May 2022	Critical	9.8	Yes
WSO2 - Unrestricted File Upload and Remote Code Execution	CVE-2022-29464	Network Scanner	May 2022	May 2022	Critical	9.8	Yes
Apache Struts - Remote Code Execution	CVE-2021-31805	Network Scanner	May 2022	May 2022	Critical	9.8	Yes
Adobe Coldfusion - Remote Code Execution	CVE-2018-15961	Network Scanner	May 2022	May 2022	Critical	9.8	Yes
Jira - Remote Code Execution	CVE-2019-11581	Network Scanner	May 2022	May 2022	Critical	9.8	No
Apache Struts - Remote Code Execution	CVE-2020-17530	Network Scanner	Sep 2021	May 2022	Critical	9.8	Yes
VMware Workspace One - Remote Code Execution	CVE-2022-22954	Network Scanner	May 2022	May 2022	Critical	9.8	Yes
ManageEngine - Remote Code Execution	CVE-2021-44077	Network Scanner	May 2022	May 2022	Critical	9.8	Yes
Spring Cloud Function - Remote Code Execution	CVE-2022-22963	Network Scanner	Apr 2022	Apr 2022	Critical	9.8	Yes
Microsoft Exchange - Remote Code Execution	CVE-2021-26855 CVE-2021-27065	Network Scanner	May 2021	Apr 2022	Critical	9.8	Yes
Microsoft Exchange - ProxyLogon Backdoor Webshells	CVE-2021-26855 CVE-2021-27065	Network Scanner	Mar 2021	Apr 2022	Critical	9.8	No
Spring Cloud Gateway - Remote Code Execution	CVE-2022-22947	Network Scanner	Mar 2022	Mar 2022	Critical	10	Yes
VMware vCenter - Remote Code Execution	CVE-2021-21985	Network Scanner	Sep 2021	Mar 2022	Critical	9.8	Yes
Microsoft EternalBlue - Remote Code Execution	CVE-2017-0144	Network Scanner	Mar 2022	Mar 2022	High	8.1	Yes
Apache Tomcat - Remote Code Execution	CVE-2021-44228	Network Scanner	Dec 2021	Mar 2022	Critical	10	Yes
Log4j - Remote Code Execution	CVE-2021-44228	Network Scanner	Dec 2021	Mar 2022	Critical	10	Yes
Log4j - Remote Code Execution	CVE-2021-45046	Network Scanner	Mar 2022	Mar 2022	Critical	9	No
Apache Struts - Remote Code Execution	CVE-2017-12611	Network Scanner	Mar 2022	Mar 2022	Critical	9.8	Yes
Apache Solr - Remote Code Execution	CVE-2021-44228	Network Scanner	Dec 2021	Mar 2022	Critical	10	No
MobileIron - Remote Code Execution	CVE-2021-44228	Network Scanner	Dec 2021	Mar 2022	Critical	10	No
Apache Flink - Remote Code Execution	CVE-2021-44228	Network Scanner	Dec 2021	Mar 2022	Critical	10	No
Apache Struts - Remote Code Execution	CVE-2021-44228	Network Scanner	Dec 2021	Mar 2022	Critical	10	Yes
ManageEngine Desktop Central - Authentication Bypass and Remote Code Execution	CVE-2021-44515	Network Scanner	Mar 2022	Mar 2022	Critical	9.8	Yes
VMware vCenter - Remote Code Execution	CVE-2021-44228	Network Scanner	Dec 2021	Feb 2022	Critical	10	No
Apache Druid - Remote Code Execution	CVE-2021-44228	Network Scanner	Dec 2021	Feb 2022	Critical	10	No
Oracle Weblogic - Remote Code Execution	CVE-2018-2894	Network Scanner	Feb 2022	Feb 2022	Critical	9.8	Yes
Apache Struts 2 - Remote Code Execution	CVE-2018-11776	Network Scanner	Feb 2022	Feb 2022	High	8.1	Yes
Oracle Weblogic - Path Traversal	CVE-2020-14882	Network Scanner	Feb 2022	Feb 2022	Critical	9.8	No
Oracle Weblogic - Remote Command Execution	CVE-2020-14883	Network Scanner	Feb 2022	Feb 2022	High	7.2	Yes
ManageEngine ADSelfService Plus - Remote Code Execution	CVE-2021-40539	Network Scanner	Oct 2021	Feb 2022	Critical	9.8	Yes
Log4j 1.x - Remote Code Execution	CVE-2019-17571	Network Scanner	Jan 2022	Jan 2022	Critical	9.8	Yes
Elasticsearch - Remote Code Execution	CVE-2021-44228	Network Scanner	Dec 2021	Jan 2022	Critical	10	No
Apache MOD Proxy - Server Side Request Forgery	CVE-2021-40438	Network Scanner	Jan 2022	Jan 2022	Critical	9	No
Netgear - Admin Credentials Disclosure & Remote Code Execution	CVE-2020-17409 CVE-2020-27866	Network Scanner	Jan 2022	Jan 2022	High	8.8	Yes
Apache OFBiz - Remote Code Execution	CVE-2021-26295	Network Scanner	Feb 2021	Dec 2021	Critical	9.8	Yes
Microsoft Exchange - Reflected Cross-Site Scripting	CVE-2021-41349	Network Scanner	Dec 2021	Dec 2021	Medium	6.5	No
Apache Struts 2 - Remote Code Execution	CVE-2019-0230	Network Scanner	Dec 2021	Dec 2021	Critical	9.8	Yes
Apache Tomcat - Remote Code Execution	CVE-2017-12617	Network Scanner	Dec 2021	Dec 2021	High	8.1	Yes
Exim - Remote Code Execution	CVE-2019-10149	Network Scanner	Dec 2021	Dec 2021	Critical	9.8	Yes
Laravel - Remote Code Execution	CVE-2021-3129	Network Scanner	Dec 2021	Dec 2021	Critical	9.8	Yes
Node.js Systeminformation - Command Injection	CVE-2021-21315	Network Scanner	May 2021	Dec 2021	High	7.8	Yes
Sophos SG UTM - Remote Code Execution	CVE-2020-25223	Network Scanner	Sep 2021	Dec 2021	Critical	9.8	Yes
Apache Struts - Remote Code Execution	CVE-2017-9791	Network Scanner	Dec 2021	Dec 2021	Critical	9.8	Yes
Apache Tomcat Server - Local File Inclusion	CVE-2020-1938	Network Scanner	Nov 2021	Nov 2021	Critical	9.8	Yes
Citrix ADC - Directory Traversal/Remote Code Execution	CVE-2019-19781	Network Scanner	Nov 2021	Nov 2021	Critical	9.8	Yes
Micro Focus OBM - Authentication Bypass	CVE-2020-11853	Network Scanner	Nov 2021	Nov 2021	High	8.8	No
Visual Tools DVR - Remote Code Execution	CVE-2021-42071	Network Scanner	Nov 2021	Nov 2021	Critical	9.8	Yes
Apache Server - Remote Code Execution	CVE-2014-6271	Network Scanner	Nov 2021	Nov 2021	Critical	9.8	Yes
Node-Red - Local File Inclusion	CVE-2021-3223	Network Scanner	Oct 2021	Oct 2021	High	7.5	Yes
Microsoft Exchange - Reflected Cross-Site Scripting	CVE-2021-31195	Network Scanner	Sep 2021	Oct 2021	High	8.8	No
Cisco ASA VPN/FTD - Arbitrary File Read	CVE-2020-3452	Network Scanner	Oct 2021	Oct 2021	High	7.5	Yes
Apache Server - Arbitrary File Read	CVE-2021-41773	Network Scanner	Oct 2021	Oct 2021	High	7.5	Yes
Apache Server - Remote Code Execution	CVE-2021-41773	Network Scanner	Oct 2021	Oct 2021	High	7.5	Yes
Apache Server - Arbitrary File Read	CVE-2021-42013	Network Scanner	Oct 2021	Oct 2021	Critical	9.8	Yes
Apache Server - Remote Code Execution	CVE-2021-42013	Network Scanner	Oct 2021	Oct 2021	Critical	9.8	Yes
FortiOS SSL VPN - Arbitrary File Read	CVE-2018-13379	Network Scanner	Aug 2021	Sep 2021	Critical	9.8	Yes
Azure OMI - Remote Code Execution	CVE-2021-38647	Network Scanner	Sep 2021	Sep 2021	Critical	9.8	Yes
Cisco ASA VPN and Cisco FTD - Unauthenticated Arbitrary File Deletion	CVE-2020-3187	Network Scanner	Sep 2021	Sep 2021	Critical	9.1	No
VMware vCenter - Remote Code Execution	CVE-2021-22005	Network Scanner	Sep 2021	Sep 2021	Critical	9.8	No
Microsoft Exchange - Remote Code Execution	CVE-2021-34473 CVE-2021-34523 CVE-2021-31207	Network Scanner	Sep 2021	Sep 2021	Critical	9.8	Yes
VMware vCenter - Remote Code Execution	CVE-2021-21972	Network Scanner	Apr 2021	Sep 2021	Critical	9.8	Yes
Modern Events Calendar Lite Wordpress Plugin - Unauthenticated Events Export	CVE-2021-24146	Network Scanner	Sep 2021	Sep 2021	High	7.5	No
vRealize Operations Manager API - Server Side Request Forgery	CVE-2021-21975	Network Scanner	Sep 2021	Sep 2021	High	7.5	No
Citrix ADC - Reflected Code Injection	CVE-2020-8194	Network Scanner	Sep 2021	Sep 2021	Medium	6.5	Yes
Citrix ADC - Arbitrary File Read	CVE-2020-8193 CVE-2020-8195 CVE-2020-8196	Network Scanner	Sep 2021	Sep 2021	Medium	6.5	Yes
Microsoft Exchange - Remote Code Execution	CVE-2021-28480 CVE-2021-28481 CVE-2021-28482 CVE-2021-28483	Network Scanner	May 2021	May 2021	Critical	9.8	No