CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
10,858条匹配记录
PoC绿色表示已收录,灰色表示暂无
漏洞与影响对象漏洞类型风险等级CVSSEPSSPoC 状态披露时间
CVE-2026-33497
Langflow < 1.7.0 - Path Traversal
Langflow
路径穿越高危—2.0%
PoC
2026/07/28
CVE-2026-8732
WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation
WP Maps Pro
未授权访问严重—1.9%
PoC
2026/07/28
CVE-2026-46442RCE
Flowise < 3.1.2 - node-custom-function Unauthorized RCE
Flowise
远程代码执行严重—3.4%
PoC
2026/07/28
CVE-2026-23696
Windmill < 1.603.3 - SQL Injection
Windmill
SQL注入严重—13.6%
PoC
2026/07/28
CVE-2025-14047
User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion
wp-user-frontend
访问控制错误中危—0.90%
PoC
2026/07/28
CVE-2026-58455RCE
Dockwatch <= 0.6.567 - OS Command Injection
Dockwatch
远程代码执行严重—8.0%
PoC
2026/07/28
CVE-2026-42796RCE
Arelle < 2.39.10 - Remote Code Execution
Arelle
未授权访问严重—3.9%
PoC
2026/07/28
CVE-2026-3296KEV
Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection
everest-forms
反序列化严重—3.0%
PoC
2026/07/28
CVE-2026-15094
WP Hotel Booking <= 2.3.2 - Cross-Site Scripting
wp_hotel_booking
跨站脚本攻击中危—0.69%
PoC
2026/07/28
CVE-2026-9198RCE
IBM Langflow - Remote Code Execution
Langflow
身份验证绕过严重—28.7%
PoC
2026/07/28
CVE-2026-6875RCE
ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE
ServiceNow
远程代码执行严重—1.4%
PoC
2026/07/28
CVE-2026-8385
WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data Disclosure
wp-google-maps
未授权访问中危—0.73%
PoC
2026/07/28
CVE-2021-47795
GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting
geowebserver
跨站脚本攻击高危—2.9%
PoC
2026/07/28
vLLM OpenAI-Compatible API - Unauthenticated Exposure
vLLM
未授权访问中危——
PoC
2026/07/28
SMB - Default Logins
smb
弱口令高危——
PoC
2026/07/28
CVE-2026-48908KEVRCE
Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCE
SP Page Builder
远程代码执行严重—88.5%
PoC
2026/07/28
CVE-2026-15409KEV
SonicWall SMA1000 - Server-Side Request Forgery
SonicWall SMA
服务端请求伪造严重—6.8%
PoC
2026/07/28
CVE-2026-48909RCE
Joomla SP LMS <= 4.1.3 - Remote Code Execution
Joomla
未授权访问严重—4.9%
PoC
2026/07/28
RCE
Windows Command Injection - Generic Detection
远程代码执行高危——
PoC
2026/07/28
RCE
Unix Command Injection - Generic Detection
远程代码执行高危——
PoC
2026/07/28
← 上一页16 / 543下一页 →