Software
Software with known CVEs
As of 2026-10-07, 126 software products were seen with known CVEs on services open at the hosts' latest check; the most widespread is OpenSSH.
| Software | Hosts with CVEs | Versions | CVEs |
|---|---|---|---|
| OpenSSH openssh | 4 928 993 | 226 | 131 |
| nginx nginx | 446 141 | 302 | 41 |
| Apache HTTP Server http_server | 292 207 | 149 | 329 |
| MySQL mysql | 210 966 | 548 | 1 641 |
| PHP php | 172 115 | 649 | 718 |
| OpenSSL openssl | 79 826 | 201 | 306 |
| lighttpd lighttpd | 68 398 | 124 | 36 |
| Microsoft IIS internet_information_services | 56 741 | 16 | 86 |
| MariaDB mariadb | 39 060 | 633 | 399 |
| OpenResty openresty | 35 731 | 70 | 6 |
| vsftpd vsftpd | 34 438 | 27 | 7 |
| Exim exim | 26 763 | 59 | 72 |
| Python python | 25 432 | 232 | 135 |
| boa boa | 22 608 | 12 | 5 |
| routeros routeros | 16 443 | 312 | 89 |
| dropbear ssh dropbear_ssh | 13 137 | 27 | 20 |
| Apache mod_ssl mod_ssl | 11 083 | 51 | 1 |
| Squid squid | 10 933 | 78 | 117 |
| perl perl | 10 613 | 56 | 45 |
| bftpd bftpd | 10 110 | 15 | 5 |
| filezilla server filezilla_server | 9 844 | 47 | 7 |
| ProFTPD proftpd | 7 629 | 47 | 46 |
| Eclipse Jetty jetty | 6 778 | 264 | 62 |
| Sendmail sendmail | 6 132 | 66 | 26 |
| Werkzeug werkzeug | 5 937 | 56 | 14 |
| Kong Gateway kong_gateway | 5 037 | 95 | 2 |
| mini httpd mini_httpd | 4 916 | 9 | 4 |
| Apache mod_wsgi mod_wsgi | 2 803 | 46 | 4 |
| mailenable mailenable | 2 568 | 103 | 44 |
| jquery jquery | 2 396 | 56 | 9 |
| serv-u serv-u | 2 195 | 72 | 82 |
| rompager rompager | 1 996 | 10 | 4 |
| Serv-U FTP Server serv-u_ftp_server | 1 962 | 75 | 7 |
| Tornado tornado | 1 895 | 51 | 19 |
| Apache mod_perl mod_perl | 1 816 | 26 | 2 |
| gsoap gsoap | 1 688 | 3 | 4 |
| thttpd thttpd | 1 574 | 20 | 11 |
| bootstrap bootstrap | 956 | 30 | 7 |
| GoAhead goahead | 890 | 2 | 12 |
| tinyproxy tinyproxy | 849 | 7 | 5 |
| wordpress wordpress | 702 | 139 | 236 |
| uc-httpd uc-httpd | 651 | 1 | 1 |
| grafana grafana | 545 | 141 | 79 |
| ws ftp ws_ftp | 440 | 48 | 1 |
| caddy caddy | 258 | 3 | 11 |
| couchdb couchdb | 255 | 7 | 14 |
| resin resin | 253 | 51 | 22 |
| Wowza Streaming Engine streaming_engine | 247 | 35 | 25 |
| jellyfin jellyfin | 220 | 24 | 16 |
| portainer portainer | 218 | 43 | 17 |
| passenger passenger | 216 | 50 | 10 |
| icewarp server icewarp_server | 201 | 46 | 7 |
| mod fcgid mod_fcgid | 198 | 3 | 2 |
| mongoose mongoose | 187 | 12 | 36 |
| flask flask | 186 | 22 | 3 |
| axtls axtls | 150 | 4 | 7 |
| MongoDB mongodb | 150 | 70 | 150 |
| xlight ftp server xlight_ftp_server | 147 | 8 | 4 |
| cherokee cherokee | 144 | 11 | 8 |
| glassfish server glassfish_server | 136 | 8 | 36 |
| icecast icecast | 130 | 5 | 3 |
| wu-ftpd wu-ftpd | 120 | 3 | 13 |
| jenkins jenkins | 109 | 59 | 130 |
| libssh libssh | 101 | 12 | 36 |
| webrick webrick | 97 | 7 | 3 |
| tengine tengine | 86 | 1 | 1 |
| appweb appweb | 79 | 7 | 5 |
| PostgreSQL postgresql | 77 | 22 | 134 |
| niagara ax niagara_ax | 75 | 9 | 2 |
| cPanel cpanel | 66 | 21 | 138 |
| twistedweb twistedweb | 43 | 1 | 1 |
| litespeed web server litespeed_web_server | 38 | 12 | 3 |
| realvnc realvnc | 36 | 1 | 1 |
| bind bind | 35 | 8 | 67 |
| paramiko paramiko | 33 | 10 | 3 |
| angular.js angular.js | 31 | 10 | 1 |
| moodle moodle | 31 | 9 | 203 |
| rocket.chat rocket.chat | 30 | 15 | 35 |
| java system web server java_system_web_server | 26 | 4 | 11 |
| communigate pro communigate_pro | 25 | 16 | 1 |
| miniupnpd miniupnpd | 25 | 3 | 11 |
| varnish cache varnish_cache | 22 | 1 | 6 |
| cherrypy cherrypy | 20 | 3 | 1 |
| cups cups | 20 | 6 | 10 |
| directadmin directadmin | 20 | 12 | 2 |
| iplanet web server iplanet_web_server | 17 | 1 | 7 |
| gunicorn gunicorn | 16 | 1 | 1 |
| java system web proxy server java_system_web_proxy_server | 15 | 3 | 9 |
| JBoss Enterprise Application Platform jboss_enterprise_application_platform | 15 | 7 | 41 |
| drupal drupal | 13 | 23 | 103 |
| data ontap data_ontap | 11 | 6 | 10 |
| phusion passenger phusion_passenger | 11 | 9 | 1 |
| aiohttp aiohttp | 10 | 3 | 26 |
| Redis redis | 10 | 6 | 48 |
| squirrelmail squirrelmail | 10 | 4 | 28 |
| abyss web server x1 abyss_web_server_x1 | 9 | 2 | 1 |
| mediawiki mediawiki | 8 | 5 | 183 |
| wing ftp server wing_ftp_server | 8 | 4 | 15 |
| apisix apisix | 7 | 5 | 6 |
| influxdb influxdb | 6 | 1 | 1 |
| mod python mod_python | 6 | 5 | 4 |
| netweaver application server java netweaver_application_server_java | 6 | 1 | 4 |
| personal web server personal_web_server | 6 | 2 | 4 |
| restlet restlet | 6 | 3 | 1 |
| teamcity teamcity | 6 | 5 | 104 |
| java system application server java_system_application_server | 5 | 1 | 2 |
| Ruby ruby | 5 | 4 | 30 |
| sharepoint server sharepoint_server | 5 | 3 | 45 |
| fasttrack server fasttrack_server | 4 | 2 | 3 |
| mitmproxy mitmproxy | 4 | 4 | 3 |
| phpmyadmin phpmyadmin | 4 | 4 | 28 |
| gocd gocd | 3 | 3 | 19 |
| imail server imail_server | 3 | 2 | 4 |
| mdaemon mdaemon | 3 | 2 | 8 |
| monit monit | 3 | 3 | 2 |
| sql anywhere sql_anywhere | 3 | 3 | 1 |
| aspen aspen | 2 | 1 | 1 |
| Postfix postfix | 2 | 2 | 5 |
| standard manageability standard_manageability | 2 | 2 | 3 |
| sync gateway sync_gateway | 2 | 2 | 2 |
| Apache Tomcat tomcat | 2 | 1 | 28 |
| traffic server traffic_server | 2 | 2 | 44 |
| groupwise groupwise | 1 | 1 | 4 |
| lotus domino lotus_domino | 1 | 1 | 14 |
| ntopng ntopng | 1 | 1 | 3 |
| weblogic server weblogic_server | 1 | 1 | 1 |
Hosts with CVEs: hosts whose reported software version has at least one known CVE on a service open at their latest check. A match is an indication, not proof. 101 more products were seen only in older observations. Counted 2026-10-07 03:22 UTC.