Nessus 的 CGI abuses 系列

ID名稱嚴重性
205423Sunhillo SureLine < 8.7.0.1.1 未經驗證的 OS 命令插入 (CVE-2021-36380)
critical
205389Atlassian Bitbucket < 8.9.13 / 8.19.2 開放重新導向
low
205309Atlassian Confluence < 7.19.25 / 7.20.x < 8.5.12 / 8.6.x < 8.9.4 (CONFSERVER-96135)
low
205301Progress WhatsUp Gold 檔案上傳 RCE (CVE-2024-4884)
critical
205297Roundcube Webmail 1.5.x < 1.5.8 / 1.6.x < 1.6.8 多個弱點
high
205292Mattermost Server 9.0.x < 9.9.1 / 9.10.0 / 9.5.x < 9.5.7 (MMSA-2024-00356)
low
205263Cisco Smart Software Manager 內部部署密碼變更弱點 (CVE-2024-20419)
critical
205207GitLab 1 < 17.0.6 / 17.1 < 17.1.4 / 17.2 < 17.2.2 (CVE-2024-5423)
medium
205206GitLab 8.16 <17.0.6/17.1 < 17.1.4/17.2 < 17.2.2 (CVE-2024-6329)
medium
205205GitLab 8.12 <17.0.6/17.1 < 17.1.4/17.2 < 17.2.2 (CVE-2024-3035)
medium
205204GitLab 5.1 <17.0.6/17.1 < 17.1.4/17.2 < 17.2.2 (CVE-2024-4207)
medium
205203GitLab 11.10 <17.0.6/17.1 < 17.1.4/17.2 < 17.2.2 (CVE-2024-3114)
medium
205202GitLab 15.9 <17.0.6/17.1 < 17.1.4/17.2 < 17.2.2 (CVE-2024-7610)
medium
205201GitLab 16.7 <17.0.6/17.1 < 17.1.4/17.2 < 17.2.2 (CVE-2024-4784)
medium
205200GitLab < 17.0.6 / 17.1 < 17.1.4 / 17.2 < 17.2.2 (CVE-2024-3958)
medium
205199GitLab 13.9 <17.0.6/17.1 < 17.1.4/17.2 < 17.2.2 (CVE-2024-7554)
medium
205198GitLab 12.6 <17.0.6/17.1 < 17.1.4/17.2 < 17.2.2 (CVE-2024-4210)
medium
205197GitLab 11.3 <17.0.6/17.1 < 17.1.4/17.2 < 17.2.2 (CVE-2024-2800)
medium
205143Jenkins LTS < 2.452.4/Jenkins 每週版 < 2.471 多個弱點
critical
205025GeoServer Jai-EXT RCE (CVE-2022-24816)
critical
204972OSGeo GeoServer RCE (CVE-2024-36401)
critical
204971OSGeo GeoTools RCE (CVE-2024-36404)
critical
204970ManageEngine OpManager SQLi (CVE-2024-6748)
high
204968WordPress < 6.6.1
high
204785Progress Telerik Report Server 不安全還原序列化 (CVE-2024-6327)
critical
204778Atlassian Bamboo < 9.2.16 / < 9.6.4 檔案包含 (CVE-2024-21687)
high
204676GitLab 16.6 <17.0.5/17.1 < 17.1.3/17.2 < 17.2.1 (CVE-2024-7047)
high
204675GitLab 16.7 <17.0.5/17.1 < 17.1.3/17.2 < 17.2.1 (CVE-2024-7057)
medium
204674GitLab 12.0 <17.0.5/17.1 < 17.1.3/17.2 < 17.2.1 (CVE-2024-0231)
low
204673GitLab 16.11 <17.0.5/17.1 < 17.1.3/17.2 < 17.2.1 (CVE-2024-5067)
medium
204672GitLab 15.4 <17.0.5/17.1 < 17.1.3/17.2 < 17.2.1 (CVE-2024-7060)
low
204671GitLab 15.6 <17.0.5/17.1 < 17.1.3/17.2 < 17.2.1 (CVE-2024-7091)
medium
202697Openfire SSRF (CVE-2019-18394)
critical
202696Atlassian Confluence 7.19.23 < 7.19.25 / 8.5.x < 8.5.12 / 8.9.x < 8.9.4 (CONFSERVER-96102)
high
202692Atlassian Confluence 7.19.23 < 7.19.25 / 8.5.x < 8.5.12 / 8.9.x < 8.9.4 (CONFSERVER-96103)
high
202691Atlassian Confluence 7.19.23 < 7.19.25 / 8.5.x < 8.5.12 / 8.9.x < 8.9.4 (CONFSERVER-96100)
high
202626Atlassian Confluence < 7.19.25 / 8.5.x < 8.5.12 / 8.9.x < 8.9.4 (CONFSERVER-96099)
high
202624Atlassian Confluence < 7.19.25 / 8.5.x < 8.5.12 / 8.9.x < 8.9.4 (CONFSERVER-96101)
high
202623Oracle Primavera Gateway (2024 年 7 月 CPU)
high
202597Oracle MySQL Enterprise Monitor (2024 年 7 月 CPU)
high
202594Oracle Primavera Unifier (2024 年 7 月 CPU)
high
202558GitLab 11.8 <16.11.6/17.0 < 17.0.4/17.1 < 17.1.2 (CVE-2024-6595)
medium
202323NetScaler SDX 拒絕服務 (CTX677998)
medium
202259Dell EMC iDRAC9 < 7.00.00.172 / 7.10.00.00 < 7.10.50.00 (DSA-2024-099)
high
202183GitLab 17.0 < 17.0.4 / 17.1 < 17.1.2 (CVE-2024-5257)
low
202182GitLab 15.8 <16.11.6/17.0 < 17.0.4/17.1 < 17.1.2 (CVE-2024-6385)
critical
202181GitLab 17.0 < 17.0.4 / 17.1 < 17.1.2 (CVE-2024-5470)
low
202180GitLab 16.5 <16.11.6/17.0 < 17.0.4/17.1 < 17.1.2 (CVE-2024-2880)
low
202083NetScaler ADC 和 NetScaler Gateway 多個弱點 (CTX677944)
high
202059GitLab 16.3 <16.11.5/17.0 < 17.0.3/17.1 < 17.1.1 (CVE-2024-2177)
medium