Nessus 的 CGI abuses 系列

ID名稱嚴重性
167069GitLab 9.3 < 15.3.5 / 15.4 < 15.4.4 / 15.5 < 15.5.2 開放式重新導向
medium
167068GitLab 12.6 < 15.3.5 / 15.4 < 15.4.4 / 15.5 < 15.5.2 XSRF
critical
167048GitLab 12.1 < 15.3.5 / 15.4 < 15.4.4 / 15.5 < 15.5.2 資訊洩漏
medium
166969GitLab < 15.3.5 / 15.4 < 15.4.4 / 15.5 < 15.5.2 未經授權的命令執行
high
166966D-Link 路由器 RCE (CVE-2020-25506)
critical
166964Metabase SSRF (CVE-2022-39359)
medium
166963GitLab 10.1 < 15.3.5 / 15.4 < 15.4.4 / 15.5 < 15.5.2 開放式重新導向
medium
166962GitLab 14.4 < 15.3.5 / 15.4 < 15.4.4 / 15.5 < 15.5.2 資訊洩漏
medium
166961ManageEngine OpManager SQLi (CVE-2022-27908)
high
166933Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9、9.0.0 < 9.0.2 (SVD-2022-1112)
medium
166932Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9、9.0.0 < 9.0.2 (SVD-2022-1108)
medium
166931Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9 (SVD-2022-1105)
high
166930Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9、9.0.0 < 9.0.2 (SVD-2022-1106)
high
166926Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9 (SVD-2022-1103)
high
166925Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9、9.0.0 < 9.0.2 (SVD-2022-1101)
medium
166924Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9、9.0.0 < 9.0.2 (SVD-2022-1107)
high
166923Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9、9.0.0 < 9.0.2 (SVD-2022-1102)
medium
166922Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9、9.0.0 < 9.0.2 (SVD-2022-1110)
medium
166921Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9、9.0.0 < 9.0.2 (SVD-2022-1111)
high
166920Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9、9.0.0 < 9.0.2 (SVD-2022-1109)
medium
166919Splunk Enterprise 8.1 < 8.1.12、8.2.0 < 8.2.9 (SVD-2022-1104)
medium
166901PHP 7.4.x < 7.4.33 多個弱點
critical
166891D-Link 路由器 RCE (CVE-2021-45382)
critical
166889D-Link 路由器未經驗證的 RCE (CVE-2019-16920)
critical
166703PHP 8.1.x < 8.1.12 多個弱點
critical
166677PHP 8.0.x < 8.0.25 多個弱點
critical
166623Citrix ADC 和 Citrix Gateway 緩衝區溢位弱點 (CTX263807)
high
166618Citrix SD-WAN WANOP 無限配置 (CTX319135)
high
166617Citrix ADC 和 Citrix Gateway 多個弱點 (CTX319135)
high
166616Citrix ADC 和 Citrix Gateway 工作階段劫持弱點 (CTX319135)
medium
166606IBM Cognos Analytics 多個弱點 (6828527)
critical
166605SolarWinds Orion Platform < 2022.4 多個弱點
high
166467Joomla 4.0.x < 4.2.4 多個弱點 (5870-joomla-4-2-4-security-release)
medium
166331Oracle Primavera Gateway (2022 年 10 月 CPU)
high
166325Oracle MySQL Enterprise Monitor (2022 年 10 月 CPU)
medium
166322GitLab < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 作業記錄存取
medium
166321GitLab < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 DoS
high
166305Oracle Primavera Unifier (2022 年 10 月 CPU)
critical
166177WordPress None < 6.0.3
high
166143GitLab 12.0 < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 安全性繞過
high
166142GitLab < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 內容操控
medium
166141GitLab 14.2 < 15.2.5/15.3 < 15.3.4/15.4 < 15.4.1 IP 限制繞過
medium
166140GitLab 12.7 < 15.2.5/15.3 < 15.3.4/15.4 < 15.4.1 不當存取控制
high
166138GitLab 15.0 < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 資訊洩漏
medium
166137GitLab 14.9 < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 資訊洩漏
medium
166132Dotnetnuke < 9.11.0 相對路徑遊走
medium
166098Zimbra Collaboration Server 8.8.15 < 8.8.15 修補程式 34 多個弱點
critical
166097Zimbra Collaboration Server 9.0.0 < 9.0.0 修補程式 27 多個弱點
critical
166059ManageEngine Access Manager Plus < 4.3 Build 4303 RCE
critical
166058ManageEngine Password Manager Pro < 12.1 Build 12101 RCE
critical