Nessus 的 CGI abuses 系列

ID名稱嚴重性
334944GitLab 17.7 <19.0.6/19.1 < 19.1.4/19.2 < 19.2.2 (CVE-2026-18244)
medium
334943GitLab 19.0 <19.0.6/19.1 < 19.1.4/19.2 < 19.2.2 (CVE-2026-15423)
high
334942GitLab 17.6 <19.0.6/19.1 < 19.1.4/19.2 < 19.2.2 (CVE-2026-8667)
medium
334941GitLab 19.2 < 19.2.2 (CVE-2026-16627)
critical
334940GitLab 18.5 <19.0.6/19.1 < 19.1.4/19.2 < 19.2.2 (CVE-2026-7427)
high
334921WordPress 7.0.0 < 7.0.4
high
334690Metabase 0.58.x < 0.58.24 / 0.59.x < 0.59.21 / 0.60.x < 0.60.17 / 0.61.x < 0.61.11 / 0.62.x < 0.62.9 / 0.63.x < 0.63.5 / 1.58.x < 1.58.24 / 1.59.x < 1.59.21 / 1.60.x < 1.60.17 / 1.61.x < 1.61.11 / 1.62.x < 1.62.9 / 1.63.x < 1.63.5 多個漏洞
critical
334528WordPress XSS2Shell 4.7.0 < 4.7.34 / 4.8.0 < 4.8.29 / 4.9.0 < 4.9.30 / 5.0.0 < 5.0.26 / 5.1.0 < 5.1.23 / 5.2.0 < 5.2.25 / 5.3.0 < 5.3.22 / 5.4.0 < / 5.5.0 < 5.4.20 / 5.6.0 < 5.6.185.5.19 / 5.7.0 < 5.7.16 / 5.8.0 < 5.8.14 / 5.9.0 < / 6.0.0 < 5.9.146.0.13 / 6.1.0 < 6.1.11 / 6.2.0 < 6.2.10 / 6.3.0 < 6.3.9 / 6.4.0 < 6.4.9 / 6.5.0 < 6.5.9 / 6.6.0 < 6.6.6 / 6.7.0 < 6.7.6 / 6.8.0 < 6.8.7 / 6.9.0 < 6.9.6 / 7.0.0<7.0.3登入畫面 XSS
high
332686Jenkins plugins 多個漏洞 (2026-08-05)
critical
332685Jenkins LTS < 2.568.2/Jenkins 每週版 < 2.576 多個弱點
medium
331862Metabase 0.58.x < 0.58.15 / 0.59.x < 0.59.12 / 0.60.x < 0.60.6.3 / 0.61.x < 0.61.1.4 / 1.58.x < 1.58.15 / 1.59.x < 1.59.12 / 1.60.x < 1.60.6.3 / 1.61.x < 1.61.1.4 RCE (CVE-2026-59827)
high
331861Metabase 0.55.0 < 0.58.15.1 / 0.59.x < 0.59.12 / 0.60.x < 0.60.7 / 0.61.x < 0.61.2 / 1.55.0 < 1.58.15.1 / 1.59.x < 1.59.12 / 1.60.x < 1.60.7 / 1.61.x < 1.61.2 RCE (CVE-2026-59826)
critical
331393GitLab 18.4 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-4672)
medium
331392GitLab 17.0 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-13113)
medium
331391GitLab 8.8 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-14351)
medium
331390GitLab 16.6 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-6336)
medium
331389GitLab 11.8 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-15975)
high
331388GitLab 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-15831)
medium
331387GitLab 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-15077)
medium
331386GitLab 12.8 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-14341)
medium
331385GitLab 18.0 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-12436)
high
331384GitLab 14.0 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-3093)
medium
331383GitLab 10.1.0 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-6267)
medium
331382GitLab 18.8 <19.0.5/19.1 < 19.1.3/19.2 < 19.2.1 (CVE-2026-16553)
medium
331343ManageEngine ADAudit Plus < Build 8606 未經身份驗證的 RCE
critical
331334Atlassian Confluence 9.0.1 / 9.1.x / 9.2.x < 9.2.17 / 9.3.1 / 10.0.29.5.110.1.x9.4.x10.2.x < 10.2.7 (CONFSERVER-104334)
high
331281PHP 8.4.x < 8.4.24 多個弱點 SQLI
critical
331280PHP 8.3.x < 8.3.33 多個弱點 SQLI
critical
331218PHP 8.5.x < 8.5.9 多個弱點 SQLI
critical
331105MantisBT 1.3.0 < 2.28.4 RCE (GHSA-v84x-qvhg-f36r)
high
331104MantisBT < 2.28.4 多個弱點
critical
331102PHP 8.2.x < 8.2.33 多個弱點 SQLI
critical
330836Apache ActiveMQ < 5.19.9 / 6.x < 6.2.8 多個漏洞
medium
330625Joomla! 擴充功能「iCagenda」3.2.1 < 3.9.15 / 4.x < 4.0.8 任意檔案上載
critical
330370Kibana 8.7.0 < 8.19.18 / 9.0.x < 9.3.7 / 9.4.x < 9.4.3 授權繞過 (ESA-2026-59)
high
330369Kibana 9.4.x < 9.4.3 多個弱點 (ESA-2026-54 / ESA-2026-58)
medium
330368Kibana 9.3.x < 9.3.7 / 9.4.x < 9.4.4 DoS (ESA-2026-55)
medium
330367Kibana 8.x < 8.19.19 / 9.3.x < 9.3.8 / 9.4.x < 9.4.4 DoS (ESA-2026-63)
medium
330366Kibana < / <9.4.4多個漏洞 (ESA-2026-65 / ESA-2026-67) 9.4.x9.3.89.3.x
medium
330365Kibana 8.x < 8.19.19 / 9.0.x < 9.3.8 / 9.4.x <9.4.4多個漏洞 (ESA-2026-66 / ESA-2026-69 / ESA-2026-71 / ) ESA-2026-72
medium
330364Kibana 9.4.x < 9.4.4 多個弱點 (ESA-2026-70 / ESA-2026-73)
medium
330086Atlassian Confluence 7.17.x / 7.19.x / 9.0.18.9.x9.2.x9.1.x8.5.x < 9.2.22 / 10.0.2 / 10.1.x < 10.2.x10.2.14 (CONFSERVER-104340)
high
329328Zimbra Collaboration Server 10.1.x < 10.1.20 多個漏洞
high
329318IBM Cognos Analytics 12.1.3 爭用情形 (7280311)
medium
329221Oracle Primavera P6 企業專案組合管理 (2026 年 7 月 CPU)
high
329220Oracle Primavera Unifier (2026 年 7 月 CPU)
medium
329219Oracle Primavera 閘道 (2026 年 7 月 CPU)
medium
327666WordPress 7.0 < 7.0.2
critical
327419Mattermost 伺服器 10.11.x < 10.11.20 / 11.6.x < 11.6.5 / 11.7.x < 11.7.2 授權錯誤 (MMSA-2026-00653)
medium
327418Mattermost 伺服器 10.11.x < 10.11.20 / 11.6.x < 11.6.5 / 11.7.x < 11.7.3 多個漏洞 (MMSA-2026-00658, MMSA-2026-00676, MMSA-2026-00688MMSA-2026-00689MMSA-2026-00680MMSA-2026-00683) MMSA-2026-00690
medium