搜尋 Plugin

ID名稱產品系列已發布已更新嚴重性
29314MS07-065:Message Queuing 中的弱點可導致遠端程式碼執行 (937894) (未經認證的檢查)NessusWindows2007/12/122018/11/15
critical
29225NetScaler Web Management ws/generic_api_call.pl standalone 參數 XSSNessusCGI abuses : XSS2007/12/62022/4/11
medium
280123Mattermost Server 10.11.x < 10.11.8 / 10.12.x < 10.12.4 / 11.0.x <= 11.0.6 / 11.1.x <= 11.1.1 不當驗證 (MMSA-2025-00555)NessusCGI abuses2025/12/292026/2/24
high
28181PHP < 5.2.5 多種弱點NessusCGI abuses2007/11/122025/5/26
medium
31299Centreon include/doc/get_image.php 'img' 參數遍歷任意檔案存取NessusCGI abuses2008/2/282026/4/22
medium
313114PHP 8.3.x < 8.3.31 多個弱點NessusCGI abuses2026/5/72026/5/15
critical
31787SmarterMail 主旨欄位 XSSNessusCGI abuses : XSS2008/4/72022/4/7
medium
31790Site Sift Listingsdetail.php id 參數 SQL 插入NessusCGI abuses2008/4/82022/4/11
high
31860HP OpenView Network Node Manager OpenView5.exe 動作參數遍歷任意檔案存取權NessusCGI abuses2008/4/152021/1/19
medium
31863Novell eDirectory 主機環境服務 (dhost.exe) HTTP 連線標頭 DoSNessusDenial of Service2008/4/162018/11/15
high
31720eggBlog _lib/user.php eb_login 函式 Cookie 處理 SQL 插入NessusCGI abuses2008/4/12022/4/11
medium
317393Mattermost 伺服器 10.11.x < 10.11.17 / 11.5.x < 11.5.5 / 11.6.x < 11.6.2 授權不當 (MMSA-2026-00629)NessusCGI abuses2026/5/282026/6/1
medium
31357eScan Management Console (eserv.exe) FTP 伺服器任意檔案下載NessusFTP2008/3/72018/11/15
medium
31608PHPAuction 多個指令碼 include_path 參數遠端檔案引入NessusCGI abuses2008/3/192022/4/11
high
31626Joomla! Acajoom 元件 'mailingid' 參數 SQLiNessusCGI abuses2008/3/192025/5/14
high
31640MDaemon IMAP Server FETCH 命令存在遠端緩衝區溢位弱點NessusWindows2008/3/212022/4/11
high
316488D-Link DCS-2530L < 1.07 和 DCS-2670L < 2.03 多個漏洞NessusCGI abuses2026/5/222026/5/23
high
316489Mattermost 伺服器 10.11.x <= 10.11.13 / 11.5.x <= 11.5.1 多個弱點 (MMSA-2026-00570 / MMSA-2026-00575 / MMSA-2026-00582 / ) MMSA-2026-00622NessusCGI abuses2026/5/222026/6/2
medium
316490Mattermost 伺服器 11.5.x < 11.5.2 缺少授權 (MMSA-2026-00645)NessusCGI abuses2026/5/222026/5/25
medium
316491Mattermost 伺服器 11.4.x <= 11.4.3 / 11.5.x <= 11.5.1 來源驗證錯誤 (MMSA-2026-00636)NessusCGI abuses2026/5/222026/5/25
medium
314667Microsoft SQL Server 的安全性更新 (2026 年 5 月) (遠端)NessusMisc.2026/5/142026/5/15
high
315201MantisBT 1.3.0 < 2.28.2 移動附件管理頁面儲存的 XSS (GHSA-7mqj-8gj2-cg59)NessusCGI abuses : XSS2026/5/182026/5/19
high
315204MantisBT 2.11.0 < 2.28.2 字型系列喜好設定 XSS (GHSA-j3v9-553h-x28j)NessusCGI abuses : XSS2026/5/182026/5/28
high
315205MantisBT 2.26.1 < 2.28.2 私人問題監控授權繞過 (GHSA-v4vggw7-9675-6)NessusCGI abuses2026/5/182026/5/19
medium
315207MantisBT 1.0.0 < 2.28.2 動態自訂文字區域欄位反射 XSS (GHSA-j7v9-f46r-2rp4)NessusCGI abuses : XSS2026/5/182026/6/2
medium
315230Ivanti 虛擬流量管理員 (vTM) < 22.9R4 作業系統命令插入 (CVE-2026-8051)NessusCGI abuses2026/5/182026/5/20
high
315734ISC BIND 9.18.36 < 9.18.49 / 9.18.36-S1 < 9.18.49-S1 / 9.20.8 < 9.20.23 / 9.20.9-S1 < 9.20.23-S1 / 9.21.7 < 9.21.22 弱點 (cve-2026-5950)NessusDNS2026/5/202026/5/26
medium
318691PHP 8.5.x < 8.5.7 多個弱點NessusCGI abuses2026/6/42026/6/4
medium
318721Kibana 8.x < 8.19.16 / 9.0.x < 9.3.5 多個弱點 (ESA-2026-30 / ESA-2026-33 / ESA-2026-34 / ) ESA-2026-36NessusCGI abuses2026/6/42026/6/8
high
318724Kibana < / < / <多個漏洞 (ESA-2026-35 / ESA-2026-38) 9.4.29.3.59.4.x9.0.x8.19.168.xNessusCGI abuses2026/6/42026/6/8
medium
29829CMS Made Simple modules/TinyMCE/content_css.php templateid 參數 SQL 插入NessusCGI abuses2008/1/22022/4/7
high
29834Atlassian JIRA 500page.jsp XSSNessusCGI abuses : XSS2008/1/32025/5/14
medium
29855MS07-063:SMBv2 中的弱點可導致遠端程式碼執行 (8942624 (未經認證的檢查)NessusWindows2008/1/72022/1/26
critical
298815ISC BIND 9.18.40 < 9.18.44 / 9.18.40-S1 < 9.18.44-S1 / 9.20.13 < 9.20.18 / 9.20.13-S1 < 9.20.18-S1 / 9.21.12 < 9.21.17 弱點 (cve-2025-13878)NessusDNS2026/2/122026/2/12
high
29895IceWarp Mail Server admin/index.html message 參數 XSSNessusCGI abuses : XSS2008/1/92022/4/11
medium
298972Neo4j < 5.26.21 資訊洩漏弱點 (CVE-2026-1622)NessusCGI abuses2026/2/132026/2/16
medium
29996MyBB forumdisplay.php 'sortby' 參數任意 PHP 程式碼執行NessusCGI abuses2008/1/172025/5/14
high
30211Symantec Backup Exec System Recovery Manager FileUpload Class 未經授權檔案上傳NessusCGI abuses2008/2/92021/1/19
critical
302113SAP NetWeaver AS Java 多個弱點 (3700960)NessusWeb Servers2026/3/132026/3/16
high
30213MikroTik RouterOS 使用空白密碼 (telnet 檢查)NessusMisc.2008/2/112022/4/11
critical
300235VMWare Aria Operations 8.x < 8.18.6 多個弱點 (VMSA-2026-0001)NessusCGI abuses2026/3/22026/4/21
critical
300293IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.3 (7261761)NessusWeb Servers2026/3/22026/3/20
critical
30052boastMachine mail.php id 參數 SQL 插入NessusCGI abuses2008/1/232022/4/11
high
30056ManageEngine Applications Manager 無效 URL 遠端資訊洩漏NessusCGI abuses2008/1/262021/1/19
medium
300912Kibana 8.x < 8.19.12 / 9.2.x < 9.2.6 / 9.3.x < 9.3.1 (ESA_2026_13)NessusCGI abuses2026/3/52026/4/30
high
30107CandyPress Store admin/utilities_ConfigHelp.asp helpfield 參數 SQL 插入NessusCGI abuses2008/1/282022/4/11
high
30108vTiger CRM 目錄檔案洩漏NessusCGI abuses2008/1/282022/4/11
medium
30123Citadel SMTP makeuserkey 函式 RCPT TO 命令存在遠端溢位弱點NessusSMTP problems2008/1/292018/7/6
high
30129WordPress AdServe 'adclick.php' 'id' 參數 SQL 插入NessusCGI abuses2008/1/302025/5/14
high
297197Grafana Labs 10.2.0 < 11.6.9+security-01 / 12.0.0 < 12.0.8+security-01 / 12.1.0 < 12.1.5+security-01 / 12.2.0 < 12.2.3+security-01 / 12.3.0 < 12.3.1+security- 01 權限提升 (CVE-2026-21721)NessusWeb Servers2026/1/302026/4/30
high