Nessus 的 CGI abuses 系列

ID名称严重性
164898Jenkins LTS < 2.361.1 / Jenkins Weekly < 2.363
high
164810Atlassian Bitbucket < 7.6.17 / 7.17.10 / 7.21.4 / 8.0.4 / 8.1.3 / 8.2.2 / 8.3.1 RCE
high
164652IBM Cognos Analytics 多个漏洞 (6616285)
critical
164551SonicWall Secure Mobile Access (SMA) < 10.2.1.5-34sv 缓冲区溢出 (SNWLID-2022-0019)
high
164533Joomla 4.2.0 < 4.2.1 Joomla 4.2.1 安全和缺陷补丁版本 (5866-joomla-4-2-1-release)
medium
164521WordPress 6.0 < 6.0.2 / 5.9 < 5.9.4 / 5.8 < 5.8.5 / 5.7 < 5.7.7 / 5.6 < 5.6.9 / 5.5 < 5.5.10 / 5.4 < 5.4.11 / 5.3 < 5.3.13 / 5.2 < 5.2.16 / 5.1 < 5.1.14 / 5.0 < 5.0.17 / 4.9 < 4.9.21 / 4.8 < 4.8.20 / 4.7 < 4.7.24 / 4.6 < 4.6.24 / 4.5 < 4.5.27 / 4.4 < 4.4.28 / 4.3 < 4.3.29 / 4.2 < 4.2.33 / 4.1 < 4.1.36 / 4.0 < 4.0.36 / 3.9 < 3.9.37 / 3.8 < 3.8.39 / 3.7 < 3.7.39
high
164478GitLab 14.8 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-2244)
medium
164452Jenkins 插件多个漏洞(2022 年 8 月 23 日)
medium
164451ManageEngine OpManager 12.5.x < 12.5.657 / 12.6.x < 12.6.002 / 12.6.104 / 12.6.118 身份验证绕过
high
164450ManageEngine Firewall Analyzer 12.5.x < 12.5.657 / 12.6.x < 12.6.002 / 12.6.104 / 12.6.118 认证绕过
high
164449ManageEngine NCM 12.5.x < 12.5.657 / 12.6.x < 12.6.002 / 12.6.104 / 12.6.118 身份验证绕过
high
164431GitLab 11.3.4 < 15.1.5/15.2 < 15.2.3/15.3 < 15.3.1 RCE
critical
164341Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 33 / 9.0.0 < 9.0.0 Patch 26 多个漏洞
critical
164329Splunk Enterprise 8.1 < 8.1.11, 8.2.0 < 8.2.7.1 / Universal Forwarders 8.1 < 8.1.11, 8.2.0 < 8.2.7.1 (SVD-2022-0803)
medium
164328Splunk Enterprise 9.0.0 < 9.0.1 (SVD-2022-0801)
critical
164274Oracle Primavera Unifier 不受支持的版本检测
critical
164272Splunk Enterprise < 9.0.1 信息泄露
low
164184ManageEngine NCM 12.5.x < 12.5.658 / 12.6.x < 12.6.003 / 12.6.105 / 12.6.120 RCE
high
164091Questions for Confluence 应用默认凭据 (CVE-2022-26138)
critical
164078Splunk Enterprise 和 Universal Forwarder < 9.0 不当证书验证
high
164077Splunk Universal Forwarder < 9.0 不安全的默认配置
high
164076Splunk Enterprise < 9.0 多个漏洞
critical
164075Splunk Enterprise 部署服务器 < 9.0 RCE
critical
164074Splunk Enterprise Deployment Server < 9.0 不当授权
high
164017NodeJS 系统信息库命令注入 (CVE-2021-21315)
high
163997GitLab 12.6 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2497)
medium
163939VMware Workspace One Access / VMware Identity Manager 多个漏洞 (VMSA-2022-0021)
critical
163933Splunk Enterprise 8.1.x < 8.1.7 信息泄露
medium
163932Splunk Enterprise < 8.1.0 信息泄露
medium
163888GitLab 13.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2307)
low
163885GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2303)
medium
163846GitLab 13.7 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2095)
medium
163839GitLab 13.10 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2499)
medium
163838GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2456)
low
163836GitLab 12.5 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2531)
medium
163835GitLab 12.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2501)
high
163834GitLab 14.6 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2539)
medium
163833GitLab 12.8 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2498)
high
163832GitLab 12.10 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2417)
medium
163831GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2326)
high
163830GitLab 15.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2512)
medium
163790GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2459)
low
163789GitLab 9.3 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2534)
medium
163760GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2500)
medium
163657Atlassian Jira < 8.13.20 / 8.20.x < 8.20.8 / 8.22.x < 8.22.2 / 9.0.x < 9.0.0 (JRASERVER-73739)
high
163605GitLab < 14.10.5 (CVE-2022-2227)
medium
163599JQuery UI < 1.13.2 XSS
medium
163514Citrix ADC and Citrix Gateway 12.1.x < 12.1-65.15 / 13.0.x < 13.0-86.17 / 13.1.x < 13.1-24.38 未经验证的重定向 (CTX457836)
medium
163486VMware Workspace One Access / VMware Identity Manager 多个漏洞 (VMSA-2022-0014)
critical
163453Apache Apereo CAS Log4Shell 直接检查 (CVE-2021-44228)
critical