组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| Ruby Kernel#open/URI.open RCE | 远程代码执行 | 高危 | — | — | PoC | ||
| Esafenet CDG mysql - File Read | 文件包含 | 高危 | — | — | PoC | ||
RCE Node.js Express NODE_ENV Development Mode | 安全配置错误 | 中危 | — | — | PoC | ||
| Balada Injector Malware - Detect | 信息泄露 | 高危 | — | — | PoC | ||
| H2O - Arbitrary Path Lookup | 文件包含 | 中危 | — | — | PoC | ||
| Misconfigured CDN Cache Poisoning via X-Amz-Server-Side-Encryption Header | 未分类 | 未知 | — | — | PoC | ||
| Node ecstatic Directory Listing | 目录列举 | 低危 | — | — | PoC | ||
| Microsoft Access Database File - Detect | 信息泄露 | 中危 | 5.3 | — | PoC | ||
| Drupal JSON:API Username Listing - Detect | 信息泄露 | 中危 | 5.3 | — | PoC | ||
| Structurizr - Default Login | 安全配置错误 | 高危 | — | — | PoC | ||
RCE ClockWatch Enterprise - Remote Code Execution | 远程代码执行 | 严重 | 10.0 | — | PoC | ||
| PostgreSQL - Unauthenticated Access | 未授权访问 | 高危 | — | — | PoC | ||
| TiDB - Unauthenticated Access | 未授权访问 | 高危 | — | — | PoC | ||
| TiDB - Password Vulnerability | 弱口令 | 低危 | 5.3 | — | PoC | ||
| SAPRouter - Routing information leak | 信息泄露 | 严重 | — | — | PoC | ||
| Unauthorized Printer Access | 未授权访问 | 低危 | — | — | PoC | ||
| Memcached stats disclosure | 信息泄露 | 低危 | — | — | PoC | ||
| Ganglia XML Grid Monitor | 未分类 | 低危 | — | — | PoC | ||
| ClickHouse - Unauthorized Access | 未授权访问 | 高危 | — | — | PoC | ||
| ClamAV Server - Unauthenticated Access | 未授权访问 | 高危 | — | — | PoC |