Nessus 的 CGI abuses 系列

ID名称严重性
306393Adobe Connect <= 12.10 多个漏洞 (APSB26-37)
critical
306169Dotnetnuke < 10.2.2 已触发安全代码分析规则 (GHSA-fcpv-w245-r2q7)
high
306168Dotnetnuke < 10.2.2 通过上传 SVG 存储的跨站脚本 (XSS) (CVE-2026-40321)
high
305982Dotnetnuke < 10.2.2 所有新安装的 HostGUID 相同 (CVE-2026-40306)
high
305981Dotnetnuke 6.0.x < 10.2.2 强制接受好友请求 (CVE-2026-40305)
medium
305964Dotnetnuke < 10.2.2 所有新安装的 HostGUID 相同 (GHSA-2rhw-gw3f-477j)
high
305963Dotnetnuke < 10.2.2 通过上传 SVG 存储的跨站脚本 (XSS) (GHSA-ffq7-898w-9jc4)
high
305962Dotnetnuke 6.0.x < 10.2.2 强制接受好友请求 (GHSA-fpj4-9qhx-5m6m)
high
305955Apache ActiveMQ < 5.19.4 / 6.x < 6.2.3 不当输入验证代码注入
high
305954Apache ActiveMQ < 5.19.3 / 5.19.4, 6.x < 6.2.2 / 6.2.3 Classpath 路径遍历
medium
305940SonicWall SMA 1000 系列 <= 12.4.3-03245 / 12.5.x <= 12.5.0-02283 多个漏洞 (SNWLID-2026-0003)
high
305938Kibana 8.x < 8.19.14 / 9.0.x < 9.2.8 / 9.3.x < 9.3.3 多个漏洞 (ESA-2026-21 / ESA-2026-24 / ESA-2026-25 / ESA-2026-26)
high
305638GitLab 18.2 < 18.8.9 / 18.9 < 18.9.5 / 18.10 < 18.10.3 (CVE-2026-1101)
medium
305637GitLab 11.3 < 18.8.9 / 18.9 < 18.9.5 / 18.10 < 18.10.3 (CVE-2026-1752)
medium
305636GitLab 16.9.6 < 18.8.9 / 18.9 < 18.9.5 / 18.10 < 18.10.3 (CVE-2026-5173)
high
305635GitLab 18.0.0 < 18.8.9 / 18.9 < 18.9.5 / 18.10 < 18.10.3 (CVE-2026-1516)
medium
305634GitLab 18.2 < 18.8.9 / 18.9 < 18.9.5 / 18.10 < 18.10.3 (CVE-2026-4332)
medium
305633GitLab 18.6 < 18.8.9 / 18.9 < 18.9.5 / 18.10 < 18.10.3 (CVE-2026-2619)
medium
305632GitLab 18.2 < 18.8.9 / 18.9 < 18.9.5 / 18.10 < 18.10.3 (CVE-2026-4916)
low
305631GitLab 12.10 < 18.8.9 / 18.9 < 18.9.5 / 18.10 < 18.10.3 (CVE-2026-1092)
high
305630GitLab 18.2 < 18.8.9 / 18.9 < 18.9.5 / 18.10 < 18.10.3 (CVE-2026-2104)
medium
305301Atlassian Confluence 9.0.1 < 9.0.2 / 9.2.5 < 9.2.15 / 9.5.1 < 10.2.7 (CONFSERVER-102542)
high
304414Joomla 4.0.x < 5.4.4 / 6.0.x < 6.0.4 Joomla 6.0.4 & 5.4.4 安全和缺陷补丁版本 (5944-joomla-6-0-4-5-4-4-security-bugfix-release)
high
304390Metabase Enterprise < 1.54.22 / 1.55.x < 1.55.22 / 1.56.x < 1.56.22 / 1.57.x < 1.57.16 / 1.58.x < 1.58.10 / 1.59.x < 1.59.4 RCE (GHSA-fppj-vcm3-w229)
high
304265GitLab 14.3 < 18.8.7 / 18.9 < 18.9.3 / 18.10 < 18.10.1 (CVE-2026-2370)
high
303800NetScaler ADC 和 NetScaler Gateway 内存过度读取 (CTX696300 / CVE-2026-3055)
critical
303799NetScaler ADC 和 NetScaler 网关争用条件 (CTX696300 / CVE-2026-4368)
high
303627GitLab 17.10 < 18.8.7 / 18.9 < 18.9.3 / 18.10 < 18.10.1 (CVE-2026-3857)
high
303626GitLab 18.5 < 18.8.7 / 18.9 < 18.9.3 / 18.10 < 18.10.1 (CVE-2026-1724)
high
303625GitLab 11.10 < 18.8.7 / 18.9 < 18.9.3 / 18.10 < 18.10.1 (CVE-2026-2726)
medium
303624GitLab 15.4 < 18.8.7 / 18.9 < 18.9.3 / 18.10 < 18.10.1 (CVE-2026-2995)
medium
303623GitLab 7.11 < 18.8.7 / 18.9 < 18.9.3 / 18.10 < 18.10.1 (CVE-2026-2745)
high
303622GitLab 18.1 < 18.8.7 / 18.9 < 18.9.3 / 18.10 < 18.10.1 (CVE-2026-4363)
low
303621GitLab 18.5 < 18.8.7 / 18.9 < 18.9.3 / 18.10 < 18.10.1 (CVE-2026-3988)
high
303620GitLab 17.7 < 18.8.7 / 18.9 < 18.9.3 / 18.10 < 18.10.1 (CVE-2026-2973)
medium
303601Atlassian Bamboo 9.6.x < 9.6.24 / 10.x < 10.2.16 / 11.x / 12.x < 12.1.3 多个漏洞
high
303587Kibana 8.x < 8.19.12 / 9.x < 9.2.6 / 9.3.x < 9.3.1 缺少授权 (ESA-2026-19)
medium
303586Kibana 8.x < 8.19.13 / 9.x < 9.2.7 / 9.3.x < 9.3.2 DoS (ESA-2026-20)
medium
303451Unraid < 7.2.4 多种漏洞 (ZDI-26-171 / ZDI-26-172)
high
303449MantisBT < 2.28.1 SOAP API 身份验证绕过漏洞 (GHSA-phrq-pc6r-f6gh)
critical
303195Cockpit < 2.13.5 SQLi (GHSA-7x5c-vfhj-9628)
medium
303190Dell iDRAC9 < 7.00.00.174 / 7.10.90.00 信息泄露 (DSA-2026-113)
medium
302915Splunk Universal Forwarders 10.0.0 < 10.0.4、10.2 < 10.2.1 (SVD-2026-0314)
high
302903Jenkins 插件多个漏洞 (2026-03-18)
high
302902Jenkins LTS < 2.541.3 / Jenkins weekly < 2.555 多个漏洞
high
301998EcoStruxure IT Data Center Expert <= 9.0 硬编码凭据的使用 (SEVD-2026-069-05)
high
301912GitLab 8.14 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-1182)
medium
301879GitLab 14.4 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-1663)
medium
301878GitLab 10.6 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-1090)
medium
301877GitLab 8.11 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-3848)
medium