Nessus 的 CGI abuses 系列

ID名称严重性
346273GitLab 18.11 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-16794)
medium
346272GitLab 13.0 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-8030)
medium
346271GitLab 19.0 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-19619)
medium
346270GitLab 13.9 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-7514)
medium
346269GitLab 15.3 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-78252)
medium
346268GitLab 18.4.6 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-1168)
high
346267GitLab 18.7 < 18.11.12 / 19.0 < 19.0.9 / 19.1 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-85706)
critical
346266GitLab 18.3 < 18.11.12 / 19.0 < 19.0.9 / 19.1 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-87719)
critical
346265GitLab 10.1.0 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-82837)
medium
346264GitLab 12.3 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-88765)
high
346263GitLab 18.6 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-12910)
medium
346262GitLab 15.7 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-13210)
high
344716EcoStruxure IT Data Center Expert < 9.1.2 多个漏洞 (SEVD-2026-251-01)
high
344715Apache ActiveMQ < 5.19.11 / 6.x < 6.3.2 clientId 欺骗
high
344324Kibana 9.1.x < 9.4.6 / 9.5.x < 9.5.2 错误授权 (ESA-2026-130)
medium
344323Kibana 9.3.x < 9.4.6 DoS (ESA-2026-84)
medium
344322Kibana 7.x / 8.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 缺少授权 (ESA-2026-144)
medium
344321Kibana 8.x < 8.19.18 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 路径遍历 (ESA-2026-158)
high
344320Kibana 9.4.x < 9.4.5 缺少授权 (ESA-2026-147)
medium
344319Kibana 9.3.x < 9.4.3 权限提升 (ESA-2026-61)
high
344318Kibana 8.x < 8.19.16 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 DoS (ESA-2026-163)
medium
344315Kibana 8.x < 8.19.17 / 9.0.x < 9.3.0 DoS (ESA-2026-31)
medium
344314Kibana 8.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 错误授权 (ESA-2026-169)
medium
344313Kibana 9.4.x < 9.4.4 信息泄露 (ESA-2026-161)
medium
344312Kibana 9.4.x < 9.4.5 / 9.5.x < 9.5.1 信息泄露 (ESA-2026-168)
medium
344311Kibana 9.4.x < 9.4.6 / 9.5.x < 9.5.1 错误授权 (ESA-2026-122)
medium
344310Kibana 8.x < 8.19.19 / 9.0.x < 9.3.8 / 9.4.x < 9.4.4 错误授权 (ESA-2026-156)
medium
344309Kibana 8.19.11 < 8.19.21 / 9.3.x < 9.4.6 / 9.5.x < 9.5.2 错误授权 (ESA-2026-142)
medium
344308Kibana 8.19.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 DoS (ESA-2026-125)
medium
344307Kibana 8.x < 8.19.19 / 9.0.x < 9.3.5 DoS (ESA-2026-48)
medium
344306Kibana 8.x < 8.19.18 / 9.x < 9.4.3 路径遍历 (ESA-2026-157)
medium
344305Kibana 9.1.7 < 9.4.5 / 9.5.x < 9.5.1 DoS (ESA-2026-115)
medium
344303Kibana 7.x / 8.x < 8.19.16 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 路径遍历 (ESA-2026-160)
high
344302Kibana 8.x < 8.19.21 / 9.0.3 < 9.4.6 缺少授权 (ESA-2026-155)
medium
344301Kibana 8.x < 8.19.17 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 路径遍历 (ESA-2026-159)
medium
344300Kibana 9.0.x < 9.4.6 / 9.5.x < 9.5.1 缺少授权 (ESA-2026-149)
medium
342663SonicWall SMA 1000 Series <= 12.4.3-03453 / 12.5.x <= 12.5.0-02835 多种漏洞 (SNWLID-2026-0016)
critical
342639Dell iDRAC9 7.0.x < 7.00.00.182 / 7.20.x < 7.20.30.50 访问控制不当 (DSA-2026-374)
medium
342634Dell PowerProtect Cyber Recovery < 20.3.0.0 多种漏洞 (DSA-2026-370)
high
342633ManageEngine PAM360 < Build 8561 SQLi (CVE-2026-14828)
high
342632ManageEngine Access Manager Plus < Build 4405 SQLi (CVE-2026-14828)
high
342631ManageEngine Password Manager Pro < Build 13235 SQLi (CVE-2026-14828)
high
342614Roundcube Webmail 1.6.x < 1.6.18/1.7.x < 1.7.3 多个漏洞
critical
342361Jenkins 插件多个漏洞 (2026-09-02)
high
342360Jenkins LTS < 2.568.3 / Jenkins weekly < 2.580 多个漏洞
high
342267ServiceNow Platform 未经身份验证的 SQL 盲注 (CVE-2024-8924)
high
341085GitLab 18.3 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-4398)
medium
340724GitLab 12.8 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-77801)
medium
340723GitLab 11.3 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-3035)
medium
340688GitLab 13.1 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-7487)
low