Nessus 的 CGI abuses 系列

ID名稱嚴重性
173813GitLab 15.0 <15.8.5/15.9 < 15.9.4/15.10 < 15.10.1 (CVE-2023-1710)
medium
173812GitLab 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1787)
medium
173811GitLab 15.1 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0838)
low
173810GitLab 11.10 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2022-3375)
low
173809GitLab 8.1 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0450)
medium
173808GitLab 1.0 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1708)
critical
173807GitLab 11.5 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1098)
medium
173806GitLab 12.8 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2022-3513)
medium
173708ForgeRock Access Management 6.0.0.x / 6.5.0.x / 6.5.2.x / 6.5.3 / 6.5.4 / 7.0.x / 7.1 / 7.1.1 多個弱點
medium
173193Jenkins Enterprise 和 Operations Center 2.346.x < 2.346.40.0.12 多個弱點 (CloudBees 2023-03-21-security-advisory 安全公告)
critical
173034IBM Aspera Faspex Web 偵測
info
173033IBM Aspera Faspex < 4.4.2 修補程式層級 2 多個弱點
critical
172641ManageEngine SupportCenter Plus < 14.0 Build 14001 DoS
high
172640ManageEngine AssetExplorer < 6.9 Build 6988 多個弱點
medium
172639ManageEngine SupportCenter Plus < 14.0 Build 14000 權限提升
medium
172584Drupal 7.x < 7.95 / 9.4.x < 9.4.12 / 9.5.x < 9.5.5 / 10.x < 10.0.5 多個弱點 (drupal-2023-03-15)
high
172578ManageEngine ServiceDesk Plus < 14.0 Build 14104 多個弱點
medium
172498NETGEAR WNR2000 RCE (PSV-2016-0261)
critical
172490ManageEngine ADSelfService Plus < build 6122 命令插入
medium
172489已安裝 SonicWall SonicOS
info
172394Jenkins LTS < 2.375.4/Jenkins 每週版 < 2.394 多個弱點
critical
172376Atlassian Confluence < 7.13.14 / 7.14.x < 7.19.6 / 7.20.x < 8.1.0 (CONFSERVER-82436)
medium
172368Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.8 多個弱點 (CloudBees 2023 年 3 月 8 日安全公告)
critical
172122Atlassian Jira < 9.5.1 (JRASERVER-74771)
medium
172085Jenkins 外掛程式多個弱點 (2022 年 10 月 19 日)
critical
172078GitLab 13.7 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2023-0050)
medium
172077GitLab 9.0 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2023-1072)
medium
172076GitLab 15.1 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2022-4331)
high
172075GitLab 12.1 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2023-0483)
low
172074GitLab 12.8 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2022-4462)
medium
172073GitLab 15.3 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2022-4289)
medium
172072GitLab 0.0 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2023-1084)
low
172071GitLab 15.5 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2023-0223)
medium
172070GitLab 15.3 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2022-4007)
medium
172069GitLab 10.0 <15.7.8/15.8 < 15.8.4/15.9 < 15.9.2 (CVE-2022-3381)
medium
172068GitLab 15.5 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2022-3758)
medium
172032D-Link 路由器 RCE (CVE-2019-16057)
critical
172029D-Link 路由器未經驗證的 RCE (CVE-2022-26258)
critical
171929Jenkins plugins 多個弱點 (2023 年 1 月 24 日)
critical
171893ManageEngine Firewall Analyzer REST API 金鑰洩漏 (CVE-2022-36923)
high
171884GitLab 0.0 < 15.6.8 / 15.7 < 15.7.7 / 15.8 < 15.8.2 (CVE-2023-22490)
medium
171883GitLab 0.0 < 15.6.8 / 15.7 < 15.7.7 / 15.8 < 15.8.2 (CVE-2023-23946)
high
171788Atlassian Jira < 9.0.0 資訊洩漏 (JRASERVER-73926)
medium
171771Fortra GoAnywhere Managed File Transfer (MFT) < 7.1.2 預先驗證命令插入 (CVE-2023-0669)
high
171707ManageEngine Access Manager Plus 未經驗證的 RCE (CVE-2022-47966)
critical
171606WordPress 外掛程式「GDPR Cookie Consent」< 1.8.3 多個弱點 (CVE-2020-20633)
medium
171570Splunk Enterprise 8.1 < 8.1.13、8.2.0 < 8.2.10、9.0.0 < 9.0.4 (SVD-2023-0205)
high
171569Splunk Enterprise 8.1 < 8.1.13、8.2.0 < 8.2.10、9.0.0 < 9.0.4 (SVD-2023-0212)
medium
171568Splunk Enterprise 8.1 < 8.1.13、8.2.0 < 8.2.10、9.0.0 < 9.0.4 (SVD-2023-0211)
high
171567Splunk Enterprise 8.1 < 8.1.13、8.2.0 < 8.2.10、9.0.0 < 9.0.4 (SVD-2023-0207)
medium