Nessus 的 CGI abuses 系列

ID名称严重性
174989GitLab 12.0 < 15.10.5 / 15.11 < 15.11.1 (CVE-2023-1621)
medium
174988GitLab < 15.9.6 (CVE-2023-0756)
high
174987GitLab 8.6 < 15.9.6 / 15.10 < 15.10.5 / 15.11 < 15.11.1 (CVE-2023-1178)
medium
174986GitLab 10.0 < 12.9.8/12.10 < 12.10.7/13.0 < 13.0.1 (CVE-2023-2069)
medium
174985GitLab 15.2 < 15.9.6/15.10 < 15.10.5/15.11 < 15.11.1 (CVE-2022-4376)
medium
174984GitLab 5.1 < 15.9.6 / 15.10 < 15.10.5 / 15.11 < 15.11.1 (CVE-2023-1836)
medium
174983GitLab 15.2 < 15.9.6 / 15.10 < 15.10.5 / 15.11 < 15.11.1 (CVE-2023-0805)
high
174925VMware Aria Operations for Logs 8.10.2 RCE (VMSA-2023-0007)
critical
174924VMware Aria Operations for Logs 8.6.x / 8.8.x / 8.10 / 8.10.2 命令注入 (VMSA-2023-0007)
high
174901Mattermost Server < 7.1.6 / 7.2.x < 7.7.2 / 7.8.x < 7.8.1 信息泄露 (MMSA-2023-00141)
medium
174900Mattermost Server < 7.1.6 / 7.2.x < 7.7.2 XSS (MMSA-2023-00139)
medium
174748PaperCut NG 检测
info
174747PaperCut NG 绕过身份验证 (CVE-2023-27350)
critical
174552Oracle Primavera P6 Enterprise Project Portfolio Management(2023 年 4 月 CPU)
critical
174528Oracle MySQL Enterprise Monitor(2023 年 4 月 CPU)
high
174523ForgeRock Access Management 7.x 不当授权
critical
174488Drupal 7.x < 7.96 / 9.4.x < 9.4.14 / 9.5.x < 9.5.8 / 10.x < 10.0.8 Drupal 漏洞 (SA-CORE-2023-005)
high
174471Oracle Primavera Unifier(2023 年 4 月 CPU)
critical
174447SolarWinds Platform 2023.0 < 2023.2 多个漏洞
high
174253Jenkins Enterprise 和 Operations Center 2.346.x < 2.346.40.0.15 多个漏洞(CloudBees 安全公告 2023-04-12)
high
174244ManageEngine ADSelfService Plus 6218 之前版本 DoS
high
174002Kibana ESA-2023-02
medium
174001ManageEngine OpManager 12.6.x < 12.6.141 / 12.6.154 / 12.6.169 XML 外部实体
medium
173998Zimbra Collaboration Server 8.8.x < 8.8.15 补丁 38 / 9.0.0 < 9.0.0 补丁 31 多个漏洞
critical
173922Jenkins Enterprise 和 Operations Center 2.346.x < 2.346.40.0.14 多个漏洞 (CloudBees 安全公告 2023-04-05)
high
173821GitLab 13.6 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0319)
medium
173820GitLab 15.6 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0523)
medium
173819GitLab 13.11 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0485)
medium
173818GitLab 15.7 < 15.8.5/15.9 < 15.9.4/15.10 < 15.10.1 (CVE-2023-0155)
medium
173817GitLab 12.3.0 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1167)
medium
173816GitLab 15.5 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1071)
medium
173815GitLab 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1417)
medium
173814GitLab 11.10 < 15.8.5/15.9 < 15.9.4/15.10 < 15.10.1 (CVE-2023-1733)
high
173813GitLab 15.0 < 15.8.5/15.9 < 15.9.4/15.10 < 15.10.1 (CVE-2023-1710)
medium
173812GitLab 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1787)
medium
173811GitLab 15.1 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0838)
low
173810GitLab 11.10 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2022-3375)
low
173809GitLab 8.1 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0450)
medium
173808GitLab 1.0 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1708)
critical
173807GitLab 11.5 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1098)
medium
173806GitLab 12.8 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2022-3513)
medium
173708ForgeRock Access Management 6.0.0.x / 6.5.0.x / 6.5.2.x / 6.5.3 / 6.5.4 / 7.0.x / 7.1 / 7.1.1 多个漏洞
medium
173193Jenkins Enterprise 和 Operations Center 2.346.x < 2.346.40.0.12 多个漏洞(CloudBees 安全公告 2023-03-21-security-advisory)
critical
173034IBM Aspera Faspex Web 检测
info
173033IBM Aspera Faspex < 4.4.2 版补丁级别 2 多种漏洞
critical
172641ManageEngine SupportCenter Plus < 14.0 Build 14001 DoS
high
172640ManageEngine AssetExplorer < 6.9 Build 6988 多种漏洞
medium
172639ManageEngine SupportCenter Plus < 14.0 Build 14000 特权提升
medium
172584Drupal 7.x < 7.95 / 9.4.x < 9.4.12 / 9.5.x < 9.5.5 / 10.x < 10.0.5 多个漏洞 (drupal-2023-03-15)
high
172578ManageEngine ServiceDesk Plus < 14.0 Build 14104 多个漏洞
medium