Nessus 的 CGI abuses 系列

ID名称严重性
279127PHP 8.3.x < 8.3.29 多个漏洞
high
279000SonicWall SMA 1000 系列 <= 12.4.3-03093 / 12.5.x <= 12.5.0-02283 本地权限升级 (SNWLID-2025-0019)
medium
278978Kibana 7.0.x < 8.19.8 / 9.0.x < 9.1.8 / 9.2.x < 9.2.2 XSS (ESA-2025-28)
medium
278526Unraid < 6.8.1 多个漏洞
critical
278130Jenkins 插件多个漏洞 (2025-12-10)
medium
278129Jenkins LTS < 2.528.3 / Jenkins weekly < 2.541 多个漏洞
medium
278112WordPress Plugin 'Sneeit Framework' < 8.4 代码执行
critical
278111Mattermost Server 10.5.x <= 10.5.12 / 10.11.x <= 10.11.4 访问控制不当 (MMSA-2025-00517)
medium
278110Mattermost Server 10.5.x <= 10.5.12 / 10.11.x <= 10.11.4 / 10.12.x <= 10.12.1 / 11.0.x <= 11.0.3 不当身份验证 (MMSA-2025-00547)
critical
278109Mattermost Server 10.5.x <= 10.5.12 / 10.11.x <= 10.11.4 / 10.12.x <= 10.12.1 / 11.0.x <= 11.0.2 多个漏洞 (CVE-2025-12421、MMSA-2025-00526、CVE-2025-12756)
critical
277601rConfig RCE (CVE-2020-10221)
high
277585React Server Components 19.0 / 19.1.0 / 19.1.1 / 19.2.0 远程代码执行 (React2Shell)
critical
277584WatchGuard Firebox OS 2025.1 / 12.x < 12.11.4 / 12.5.x < 12.5.13 / 11.x 越界写入漏洞
critical
277116Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1204)
medium
277115Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.1 (SVD-2025-1203)
medium
277114Splunk Enterprise 9.2 < 9.2.10、9.3 < 9.3.8、9.4 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1202)
medium
277113Splunk Enterprise 9.2 < 9.2.10、9.3 < 9.3.8、9.4 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1208)
medium
277112Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1201)
medium
277111Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1206)
medium
277110Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1209)
high
277109Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1205)
medium
277106Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.1 (SVD-2025-1207)
low
276820Apache Roller < 6.1.5 密码更改时不充分的会话到期 (CVE-2025-24859)
high
275872Kibana 8.12.x < 8.19.7 / 9.1.x < 9.1.7 / 9.2.x < 9.2.1 (ESA-2025-24)
medium
275848Atlassian Confluence < 8.5.25 / 8.6.x < 9.2.7 / 9.3.x < 10.0.2 (CONFSERVER-100907)
high
275845Mattermost Server < 11.0.0 多种漏洞 (MMSA-2024-00337、 MMSA-2025-00493、 MMSA-2025-00540)
high
275844Mattermost Server 10.5.x < 10.5.12 / 10.11.x 10.11.4 / 10.12.x < 10.12.1 / 11.0.0 多个漏洞MMSA-2025-00541、 MMSA-2025-00492]
medium
275839Mattermost Server 10.5.x < 10.5.12 / 10.11.x 10.11.4 / 11.0.0 缺少授权 (MMSA-2025-00518)
medium
275455ManageEngine OpManager 存储的 XSS (CVE-2025-9227)
medium
275434NetScaler ADC 和 NetScaler Gateway XSS (CTX695486)
medium
275249Drupal 8.x/9.x/10.x < 10.4.9 / 10.5.x < [ 10.5.6 / 11.1.x < 11.1.9 / 11.2.x < 11.2.8 多个漏洞 (drupal-2025-11-12)
critical
275170Splunk Enterprise 9.2.0 < 9.2.9、9.3.0 < 9.3.7、9.4.0 < 9.4.5、10.0.0 < 10.0.1 (SVD-2025-1101)
low
275169Splunk Enterprise 9.2.0 < 9.2.9、9.3.0 < 9.3.7、9.4.0 < 9.4.5、10.0.0 < 10.0.1 (SVD-2025-1102)
low
275168Splunk Enterprise 9.2.0 < 9.2.9、9.3.0 < 9.3.7、9.4.0 < 9.4.5、10.0.0 < 10.0.1 (SVD-2025-1103)
high
274363Gladinet CentreStack <= 16.7.10368.56560 本地文件包含
high
272741MantisBT < 2.27.2 未授权泄露 (GHSA-g582-8vwr-68h2)
medium
272738Liferay Portal 7.4.0 < 7.4.3.120 密码枚举
medium
272044ArcGIS Server 11.3 / 11.4 / 11.5 SQLi (CVE-2025-57870)
critical
271969GitLab 17.1 < 18.3.5/18.4 < 18.4.3/18.5 < 18.5.1 (CVE-2025-11702)
high
271958Jenkins 插件多个漏洞 (2025-10-29)
high
271923Dotnetnuke < 10.1.1 通过上传 SVG 存储的跨站脚本 (XSS) (CVE-2025-64094)
medium
271814Arcserve UDP < 5.0 Update 4 目录遍历
critical
271813Ghost Web 应用程序检测
info
271812Ghost CMS 5.42.1 - 路径遍历 (CVE-2023-32235)
high
271810Mattermost Server 10.5.x < 10.5.11 / 10.10.x < 10.10.3 / 10.11.x 10.11.2 / 10.12.0 多个漏洞MMSA-2025-00507、 MMSA-2025-00508]
high
271809Mattermost Server 10.5.x < 10.5.11 / 10.10.x < 10.10.3 / 10.11.x 10.11.3 / 10.12.0 缺少授权 (MMSA-2025-00525)
medium
271500GitLab 17.10 < 18.3.5 / 18.4 < 18.4.3 / 18.5 < 18.5.1 (CVE-2025-10497)
high
271499GitLab 11.7 < 18.3.5 / 18.4 < 18.4.3 / 18.5 < 18.5.1 (CVE-2025-11974)
medium
271498GitLab 10.6 < 18.3.5 / 18.4 < 18.4.3 / 18.5 < 18.5.1 (CVE-2025-11971)
medium
271497GitLab 11.0 < 18.3.5 / 18.4 < 18.4.3 / 18.5 < 18.5.1 (CVE-2025-11447)
high