Nessus 的 CGI abuses 系列

ID名称严重性
164184ManageEngine NCM 12.5.x < 12.5.658 / 12.6.x < 12.6.003 / 12.6.105 / 12.6.120 RCE
high
164091Questions for Confluence 应用默认凭据 (CVE-2022-26138)
critical
164078Splunk Enterprise 和 Universal Forwarder < 9.0 不当证书验证
high
164077Splunk Universal Forwarder < 9.0 不安全的默认配置
high
164076Splunk Enterprise < 9.0 多个漏洞
critical
164075Splunk Enterprise 部署服务器 < 9.0 RCE
critical
164074Splunk Enterprise Deployment Server < 9.0 不当授权
high
164017NodeJS 系统信息库命令注入 (CVE-2021-21315)
high
163997GitLab 12.6 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2497)
medium
163939VMware Workspace One Access / VMware Identity Manager 多个漏洞 (VMSA-2022-0021)
critical
163933Splunk Enterprise 8.1.x < 8.1.7 信息泄露
medium
163932Splunk Enterprise < 8.1.0 信息泄露
medium
163888GitLab 13.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2307)
low
163885GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2303)
medium
163846GitLab 13.7 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2095)
medium
163839GitLab 13.10 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2499)
medium
163838GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2456)
low
163836GitLab 12.5 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2531)
medium
163835GitLab 12.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2501)
high
163834GitLab 14.6 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2539)
medium
163833GitLab 12.8 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2498)
high
163832GitLab 12.10 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2417)
medium
163831GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2326)
high
163830GitLab 15.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2512)
medium
163790GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2459)
low
163789GitLab 9.3 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2534)
medium
163760GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2500)
medium
163657Atlassian Jira < 8.13.20 / 8.20.x < 8.20.8 / 8.22.x < 8.22.2 / 9.0.x < 9.0.0 (JRASERVER-73739)
high
163605GitLab < 14.10.5 (CVE-2022-2227)
medium
163599JQuery UI < 1.13.2 XSS
medium
163514Citrix ADC and Citrix Gateway 12.1.x < 12.1-65.15 / 13.0.x < 13.0-86.17 / 13.1.x < 13.1-24.38 未经验证的重定向 (CTX457836)
medium
163486VMware Workspace One Access / VMware Identity Manager 多个漏洞 (VMSA-2022-0014)
critical
163453Apache Apereo CAS Log4Shell 直接检查 (CVE-2021-44228)
critical
163434Splunk Enterprise 8.1.x < 8.1.5、8.2.x < 8.2.1 验证绕过
high
163328Oracle Primavera Gateway(2022 年 7 月 CPU)
critical
163327Atlassian Confluence < 7.4.17 / 7.13.x < 7.13.6 / < 7.14.3 / 7.15.x < 7.15.2 / 7.16.x < 7.16.4 / 7.17.x < 7.17.2 (CONFSERVER-79483)
critical
163318Drupal 7.x < 7.91 / 9.3.x < 9.3.19 / 9.4.x < 9.4.3 多个漏洞 (drupal-2022-07-20)
high
163293Oracle MySQL Enterprise Monitor DOS(2022 年 7 月 CPU)
high
163292Oracle MySQL Enterprise Monitor DOS(2022 年 7 月 CPU)
critical
163289Oracle Primavera Unifier(2022 年 7 月 CPU)
high
163259Jenkins 插件 多个漏洞(2022 年 6 月 22 日)
critical
163258Jenkins LTS < 2.332.4 / Jenkins weekly < 2.356 多个漏洞
critical
163257Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 23 / 9.0.0 < 9.0.0 Patch 16 多个漏洞
critical
163255Fortinet FortiAnalyzer 缓冲区溢出漏洞 (FG-IR-21-206)
medium
163099VMware vRealize Log Insight 8.x < 8.8.2 XSS 漏洞 (VMSA-2022-0019)
medium
163086GitLab 12.4 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-2270)
medium
163085GitLab 8.13 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-1999)
medium
163084GitLab 12.5 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-2281)
medium
163075GitLab 11.1 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-2250)
medium
163074GitLab 14.5 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-2235)
medium