Nessus 的 CGI abuses 系列

ID名称严重性
266443Splunk Enterprise 9.2.0 < 9.2.8、9.3.0 < 9.3.6、9.4.0 < 9.4.4 (SVD-2025-1001)
medium
266411Splunk Enterprise 9.2.0 < 9.2.8、9.3.0 < 9.3.6、9.4.0 < 9.4.4 (SVD-2025-1004)
medium
266410Splunk Enterprise 9.2.0 < 9.2.8、9.3.0 < 9.3.6、9.4.0 < 9.4.4 (SVD-2025-1002)
medium
266409Splunk Enterprise 9.2.0 < 9.2.8、9.3.0 < 9.3.6、9.4.0 < 9.4.4 (SVD-2025-1003)
medium
266359Splunk Enterprise 9.2.0 < 9.2.8、9.3.0 < 9.3.6、9.4.0 < 9.4.4、10.0.0 < 10.0.1 (SVD-2025-1005)
medium
266358Splunk Enterprise 9.2.0 < 9.2.8、9.3.0 < 9.3.6、9.4.0 < 9.4.4、10.0.0 < 10.0.1 (SVD-2025-1006)
high
266292Joomla 4.0.x < 4.4.14 / 5.0.x < 5.3.4 Joomla 5.3.4 安全和缺陷补丁版本 (5936-joomla-5-3-4-security-bugfix-release)
high
266222Mattermost Server 10.5.x < 10.5.10 / 10.11.0 URL 重定向 (MMSA-2025-00511)
medium
266221Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.11.0 授权绕过 (MMSA-2025-00502)
medium
266220Mattermost Server 10.5.x < 10.5.10 / 10.9.x < 10.9.5 / 10.10.x < 10.10.2 / 10.11.0 URL 重定向 (MMSA-2025-00509)
high
266219Mattermost Server 10.10.x < 10.10.2 / 10.11.0 缺少授权 (MMSA-2025-00513)
medium
266069Apache Solr 6.6.x < 9.8.0 相对路径遍历
medium
266024GitLab 11.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-8014)
high
265988GitLab 17.2 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-11042)
medium
265987GitLab 14.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-9642)
high
265982GitLab 18.1 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-10867)
low
265981GitLab 16.6 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-7691)
medium
265961GitLab 17.4 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-10868)
low
265960GitLab 17.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-5069)
low
265959GitLab 16.6 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-10871)
low
265958GitLab 14.10 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-9958)
medium
265957GitLab < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-10858)
high
265948Dell Data Domain OS 命令注入 (DSA-2025-159)
high
265947Dell Data Domain OS 身份验证绕过 (DSA-2025-159)
critical
265946Fortra GoAnywhere Managed File Transfer (MFT) < 7.8.1 中断访问控制 (fi-2025-009)
medium
265889Apache Solr < 9.8.0 通过 <lib> 注入导致的 ConfigSet 权限升级 (CVE-2025-24814)
medium
265789Dotnetnuke < 10.1.0 使用后端管理员凭据存储的 XSS (CVE-2025-59546)
low
265757Dotnetnuke < 10.1.0 Prompt 模块中的存储跨站脚本 (XSS) (CVE-2025-59545)
critical
265756Dotnetnuke < 10.1.0 使用 url 进行配置文件的反射型跨站脚本 (XSS) (CVE-2025-59821)
medium
265752Dotnetnuke < 10.1.0 通过查询参数在匿名客户端上加载未使用的主题 (CVE-2025-59535)
medium
265721Dotnetnuke < 10.1.0 Prompt 模块中的存储跨站脚本 (XSS) (GHSA-2qxc-mf4x-wr29)
high
265720Dotnetnuke < 10.1.0 使用后端管理员凭据存储的 XSS (GHSA-gj8m-5492-q98h)
high
265718Dotnetnuke < 10.1.0 使用 url 进行配置文件的反射型跨站脚本 (XSS) (GHSA-jc4g-c8ww-5738)
high
265441Atlassian Confluence 2.0 < 8.5.24 / 8.6.x < 9.2.6 / 9.3.x < 9.5.2 / 10.0.x < 10.0.3 RCE (CONFSERVER-100795)
high
265438Fortra GoAnywhere Managed File Transfer (MFT) < 7.6.3 / 7.7.x < 7.8.4 反序列化 (CVE-2025-10035)
critical
265328Openfire < 5.0.2 / 5.1.0 身份欺骗
medium
265325Jenkins LTS < 2.516.3 / Jenkins weekly < 2.528 多个漏洞
high
264901Mattermost Server 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.4 / 10.10.x < 10.10.1 / 10.11.0 路径遍历 (MMSA-2025-00501)
medium
264900Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.4 / 10.10.x < 10.10.1 / 10.11.0 不当验证 (MMSA-2025-00506)
medium
264899Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.3 / 10.10.0 多种漏洞(MMSA-2025-00498、 MMSA-2025-00499)
medium
264626Mattermost 服务器 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.3 / 10.10.x < 10.10.1 / 10.11.0 不受限制的文件上传 (MMSA-2025-00505)
medium
264625Mattermost Server 10.5.x < 10.5.9 / 10.10.0 错误授权 (MMSA-2025-00470)
medium
264624Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.10.0 错误授权 (MMSA-2025-00485)
low
264600GitLab 10.7 < 18.1.6 / 18.2 < 18.2.6 / 18.3 < 18.3.2 (CVE-2025-10094)
medium
264599GitLab 7.8 < 18.1.6 / 18.2 < 18.2.6 / 18.3 < 18.3.2 (CVE-2025-7337)
medium
264598GitLab 15.1 < 18.1.6 / 18.2 < 18.2.6 / 18.3 < 18.3.2 (CVE-2025-6769)
medium
264597GitLab 15.0 < 18.1.6 / 18.2 < 18.2.6 / 18.3 < 18.3.2 (CVE-2025-1250)
medium
264596GitLab 7.12 < 18.1.6 / 18.2 < 18.2.6 / 18.3 < 18.3.2 (CVE-2025-2256)
high
264595GitLab 16.11 < 18.1.6 / 18.2 < 18.2.6 / 18.3 < 18.3.2 (CVE-2025-6454)
high
261788TYPO3 9.0.0 < 9.5.55 ELTS / 10.0.0 < 10.4.54 ELTS / 11.0.0 < 11.5.48 ELTS / 12.0.0 < 12.4.37 / 13.0.0 < 13.4.18 (TYPO3-CORE-SA-2025-020)
medium