插件搜索

ID名称产品系列发布时间最近更新时间严重程度
27619Firefly Media Server webserver.c ws_addarg 函数 /xml-rpc 授权标头远程格式字符串NessusGain a shell remotely2007/11/32018/11/15
high
270697SAP NetWeaver AS ABAP 多个漏洞2025 年 10 月NessusWeb Servers2025/10/172025/10/17
medium
271365Oracle E-Business Suite(2025 年 10 月 CPU)NessusMisc.2025/10/242026/2/24
critical
271392Oracle MySQL Cluster 8.0.x < 8.0.44 2025 年 10 月 CPUNessusDatabases2025/10/242026/2/24
critical
276746Grafana Enterprise SCIM 配置权限提升(CVE-2025-41115)NessusWeb Servers2025/11/252026/3/3
critical
276933Fluent Bit < 4.0.12 / 4.1.x < 4.1.1 多种漏洞NessusMisc.2025/12/12026/3/3
critical
297197Grafana Labs 10.2.0 < 11.6.9+security-01 / 12.0.0 < 12.0.8+security-01 / 12.1.0 < 12.1.5+security-01 / 12.2.0 < 12.2.3+security-01 / 12.3.0 < 12.3.1+security- 01 权限升级CVE-2026-21721NessusWeb Servers2026/1/302026/4/30
high
297198Grafana Labs 3.0.0 < 11.6.9+security-01 / 12.0.0 < 12.0.8+security-01 / 12.1.0 < 12.1.5+security-01 / 12.2.0 < 12.2.3+security-01 / 12.3.0 < 12.3.1+security-01 DoS (CVE-2026-21720)NessusWeb Servers2026/1/302026/4/30
high
297229Oracle APEX 示例应用程序 (Brookstrut) (CVE-2026-21931)NessusWeb Servers2026/1/302026/2/3
medium
29727CUPS SNMP 后端 (backend/snmp.c) asn1_get_string 函数构建的 SNMP 响应远程溢出NessusMisc.2007/12/192018/11/15
high
297831Dotnetnuke 9.0.x < 9.13.10 / 10.0.x < 10.2.0 模块删除确认模式中的存储 XSS (CVE-2026-24837)NessusCGI abuses2026/2/42026/2/6
medium
297849ManageEngine OpManager 的子网详细信息中的存储型 XSS (CVE-2025-9226)NessusCGI abuses2026/2/42026/2/6
medium
298040FreePBX 13.x < 13.0.197.14 / 14.x < 14.0.13.12 / 15.x < 15.0.16.27 远程管理员认证绕过NessusCGI abuses2026/2/52026/2/6
critical
29314MS07-065: Message Queuing 中的漏洞可允许远程代码执行 (937894)(无凭据检查)NessusWindows2007/12/122018/11/15
critical
294982Oracle MySQL Cluster 8.4.x < 8.4.8 2026 年 1 月 CPUNessusDatabases2026/1/222026/4/23
medium
29855MS07-063: SMBv2 中的漏洞可允许远程代码执行 (942624)(无凭据检查)NessusWindows2008/1/72022/1/26
critical
298815ISC BIND 9.18.40 < 9.18.44 / 9.18.40-S1 < 9.18.44-S1 / 9.20.13 < 9.20.18 / 9.20.13-S1 < 9.20.18-S1 / 9.21.12 < 9.21.17 漏洞 (cve-2025-13878NessusDNS2026/2/122026/2/12
high
298972Neo4j < 5.26.21 信息泄露漏洞 (CVE-2026-1622)NessusCGI abuses2026/2/132026/2/16
medium
305981Dotnetnuke 6.0.x < 10.2.2 强制接受好友请求 (CVE-2026-40305)NessusCGI abuses2026/4/102026/4/24
medium
300912Kibana 8.x < 8.19.12 / 9.2.x < 9.2.6 / 9.3.x < 9.3.1 (ESA_2026_13)NessusCGI abuses2026/3/52026/4/30
high
30123Citadel SMTP makeuserkey 函数 RCPT TO 命令远程溢出NessusSMTP problems2008/1/292018/7/6
high
304689Grafana 8.1.0 < 11.6.14 / 12.0.0 < 12.1.10 / 12.2.0 < 12.2.8 / 12.3.0 < 12.3.6 / 12.4.0 < 12.4.2 DoS (CVE-2026-28375)NessusWeb Servers2026/4/22026/4/6
medium
303190Dell iDRAC9 < 7.00.00.174 / 7.10.90.00 信息泄露 (DSA-2026-113)NessusCGI abuses2026/3/202026/5/8
medium
303195Cockpit < 2.13.5 SQLi (GHSA-7x5c-vfhj-9628)NessusCGI abuses2026/3/202026/3/23
medium
303449MantisBT < 2.28.1 SOAP API 身份验证绕过漏洞 (GHSA-phrq-pc6r-f6gh)NessusCGI abuses2026/3/242026/3/27
critical
303597ISC BIND 9.20.0 < 9.20.21 / 9.20.9-S1 < 9.20.21-S1 / 9.21.0 < 9.21.20 断言失败 (cve-2026-3104)NessusDNS2026/3/252026/3/27
high
303933Squid < 7.5 多个漏洞NessusFirewalls2026/3/272026/7/29
critical
302113SAP NetWeaver AS Java 多个漏洞 (3700960)NessusWeb Servers2026/3/132026/3/16
high
30213MikroTik RouterOS(密码为空)(telnet 检查)NessusMisc.2008/2/112022/4/11
critical
306733SAP NetWeaver AS Java 代码注入 (3719397)NessusWeb Servers2026/4/162026/4/20
medium
300235VMWare Aria Operations 8.x < 8.18.6 多个漏洞 (VMSA-2026-0001)NessusCGI abuses2026/3/22026/4/21
critical
300293IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.3 (7261761)NessusWeb Servers2026/3/22026/3/20
critical
31118Apache 2.2.x < 2.2.8 多个漏洞(XSS、DoS)NessusWeb Servers2008/2/202018/6/29
medium
31131CUPS < 1.3.6 process_browse_data() 函数双重释放 DoSNessusMisc.2008/2/212018/7/6
low
315201MantisBT 1.3.0 < 2.28.2 移动附件管理页面存储的 XSS (GHSA-7mqj-8gj2-cg59)NessusCGI abuses : XSS2026/5/182026/5/19
high
315204MantisBT 2.11.0 < 2.28.2 字体系列首选项 XSS (GHSA-j3v9-553h-x28j)NessusCGI abuses : XSS2026/5/182026/5/28
high
315205MantisBT 2.26.1 < 2.28.2 私人问题监控授权绕过 (GHSA-v4vggw7-9675-6)NessusCGI abuses2026/5/182026/5/19
medium
315207MantisBT 1.0.0 < 2.28.2 动态自定义 textarea 字段反射型 XSS (GHSA-j7v9-f46r-2rp4)NessusCGI abuses : XSS2026/5/182026/6/2
medium
315230Ivanti Virtual Traffic Manager (vTM) < 22.9R4 OS 命令注入 (CVE-2026-8051)NessusCGI abuses2026/5/182026/5/20
high
313114PHP 8.3.x < 8.3.31 多个漏洞NessusCGI abuses2026/5/72026/5/15
critical
31357eScan Server Management Console (eserv.exe) FTP Server 任意文件下载NessusFTP2008/3/72018/11/15
medium
314667Microsoft SQL 服务器的安全更新(2026 年 5 月)(远程)NessusMisc.2026/5/142026/5/15
high
315734ISC BIND 9.18.36 < 9.18.49 / 9.18.36-S1 < 9.18.49-S1 / 9.20.8 < 9.20.23 / 9.20.9-S1 < 9.20.23-S1 / 9.21.7 < 9.21.22 漏洞 (cve-2026-5950)NessusDNS2026/5/202026/5/26
medium
31640MDaemon IMAP Server FETCH 命令远程缓冲区溢出NessusWindows2008/3/212022/4/11
high
316488D-Link DCS-2530L < 1.07 和 DCS-2670L < 2.03 多个漏洞NessusCGI abuses2026/5/222026/5/23
high
316489最重要的服务器 10.11.x <= 10.11.13 / 11.5.x <= 11.5.1 多个漏洞 (MMSA-2026-00570 / MMSA-2026-00575 / MMSA-2026-00582 / MMSA-2026-00622)NessusCGI abuses2026/5/222026/6/2
medium
316490最重要的服务器 11.5.x < 11.5.2 缺少授权 (MMSA-2026-00645)NessusCGI abuses2026/5/222026/5/25
medium
316491最重要的服务器 11.4.x <= 11.4.3 / 11.5.x <= 11.5.1 来源验证错误 (MMSA-2026-00636)NessusCGI abuses2026/5/222026/5/25
medium
32132Asterisk IAX2 多种方法握手欺骗 DoSNessusDenial of Service2008/5/62018/11/15
medium
321511Squid < 7.6 基于堆的缓冲区溢出NessusFirewalls2026/6/182026/7/23
medium