CGI abuses Family for Nessus

IDNameSeverity
207740IBM Cognos Analytics 11.2.x < 11.2.4 FP4 Interim Fix 2 / 12.0.x < 12.0.3 Interim Fix 2 (7160700)
medium
207454Mattermost Desktop < 5.9.0 (Windows) (MMSA-2024-00307)
high
207453Mattermost Desktop < 5.9.0 (Windows / Unix) (MMSA-2024-00372)
medium
207343Fortinet FortiAnalyzer Authorization Bypass (FG-IR-23-204)
medium
207297GitLab 11.1 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-4283)
medium
207296GitLab 16.7 < 17.1.7 / 17.3 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-6685)
medium
207243Apache OFBiz < 18.12.16 Multiple Vulnerabilities
critical
207111GitLab 16.8 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-8635)
medium
207110GitLab 16.11 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-8640)
high
207109GitLab 13.3 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-2743)
critical
207108GitLab 8.14 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-6678)
high
207107GitLab 16.6 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-8631)
high
207106GitLab 17.1 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-6446)
low
207105GitLab 13.7 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-8641)
high
207104GitLab 11.2 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-4660)
high
207103GitLab 16.4 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-8124)
high
207102GitLab 16.5 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-4472)
medium
207101GitLab 12.9 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-4612)
medium
207100GitLab 16.9.7 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-8754)
high
207099GitLab 17.1 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-6389)
medium
207098GitLab 15.10 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-5435)
medium
207097GitLab 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-8311)
medium
207061Kibana < 8.15.1 (ESA-2024-27)
high
207060Kibana 8.10.x < 8.15.1 (ESA-2024-28)
critical
206971WordPress Plugin 'LiteSpeed Cache' < 6.5.0.1. Unauthenticated Account Takeover
critical
206970WordPress Plugin 'LiteSpeed Cache' < 5.7.0.1 Stored XSS
high
206798Atlassian Confluence < 7.19.26 / 7.20.x < 8.5.14 / 8.6.x < 9.0.1 (CONFSERVER-97720)
high
206714ManageEngine Endpoint Central < 11.3.2400.15 , < 11.3.2406.08 Incorrect Authorization vulnerability
high
206450Atlassian Confluence < 7.19.26 / 7.20.x < 8.5.14 / 8.6.x < 8.9.5 / 9.0.1 (CONFSERVER-97657)
high
206393Apache OFBiz < 18.12.15 Remote Code Execution (CVE-2024-38856)
critical
206317ManageEngine PAM360 < 7.0 Build 7001 SQLi
high
206316ManageEngine Password Manager Pro < 12.4 Build 12431 SQLi
high
206305Mattermost Server 9.5.x < 9.5.8 / 9.8.x < 9.8.3 / 9.9.x < 9.9.2 / 9.10.x < 9.10.1 Multiple Vulnerabilities (MMSA-2024-00353/MMSA-2024-00357)
medium
206304Mattermost Server 9.10.x < 9.10.1 / 9.5.x < 9.5.8 (MMSA-2024-00352)
low
206274Magento XXE (CVE-2024-34102)
critical
206273SolarWinds Web Help Desk < 12.8.3 HF 2 HardCoded Credentials
critical
206271ManageEngine OpManager RCE (CVE-2024-5466)
high
206181ManageEngine SupportCenter Plus < 14.8 Build 14810
medium
206166Acronis Cyber Infrastructure 5.1.x < 5.1.1-71 / 5.2.x < 5.2.1-69 / 5.3.x < 5.3.1-53 / 5.4.x < 5.4.4-132 / < 5.0.1-61 (SEC-6452)
critical
206164WordPress Plugin 'LiteSpeed Cache' < 6.4 Privilege Escalation
critical
206151ManageEngine ServiceDesk Plus MSP < 14.8 Build 14810
medium
206120GitLab < 17.1.6 / 17.2 < 17.2.4 / 17.3 < 17.3.1 (CVE-2024-8041)
medium
206119GitLab 12.5 < 17.1.6 / 17.2 < 17.2.4 / 17.3 < 17.3.1 (CVE-2024-3127)
medium
206118GitLab 17.1 < 17.1.6 / 17.2 < 17.2.4 / 17.3 < 17.3.1 (CVE-2024-7110)
medium
206117GitLab 8.2 < 17.1.6 / 17.2 < 17.2.4 / 17.3 < 17.3.1 (CVE-2024-6502)
medium
206037Joomla 3.0.x < 3.10.17 / 4.0.x < 4.4.7 / 5.0.x < 5.1.3 Multiple Vulnerabilities (5910-joomla-5-1-3-and-4-4-7-security-and-bug-fix-release)
critical
205871WordPress Plugin 'GiveWP - Donation Plugin and Fundraising Platform' < 3.14.2 RCE
critical
205618SolarWinds Web Help Desk < 12.8.3 HF 1 Deserialization RCE
critical
205602Dorsett Controls InfoScan < 1.38 Multiple Vulnerabilities (July 2024)
high
205597Kibana 7.7.x < 7.17.23 / 8.0.x < 8.14.2 (ESA-2024-22)
high