CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
10,858条匹配记录
PoC绿色表示已收录,灰色表示暂无
漏洞与影响对象漏洞类型风险等级CVSSEPSSPoC 状态披露时间
CVE-2026-22778
vLLM 0.8.3 - 0.14.0 - Information Disclosure
vLLM
信息泄露严重—11.2%
PoC
2026/07/19
CVE-2026-10823
YMC Filter WordPress - Unauthenticated Post Disclosure
YMC Filter
信息泄露高危—1.5%
PoC
2026/07/19
CVE-2026-3326
XStore Theme < 9.7.3 - SQL Injection
XStore WordPress Theme
SQL注入高危—1.6%
PoC
2026/07/19
CVE-2026-48313
ColdFusion - Path Traversal
ColdFusion
文件包含高危—3.0%
PoC
2026/07/19
CVE-2026-63030
WordPress Core 6.9-7.0.1 - Pre-Auth Blind SQL Injection (Batch-Route Confusion)
wordpress
SQL注入严重—10.1%
PoC
2026/07/19
CVE-2026-48611
phpBB < 3.3.17 - Authentication Bypass
phpbb
身份验证绕过严重—2.9%
PoC
2026/07/19
CVE-2026-48282RCE
Adobe ColdFusion - RDS Arbitrary File Write
ColdFusion
远程代码执行严重—42.4%
PoC
2026/07/19
CVE-2026-3891
Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload
payment-gateway-pix-for-woocommerce
远程代码执行严重—29.7%
PoC
2026/07/19
CVE-2026-46339RCE
9Router <= 0.4.36 - Unauthenticated RCE
9Router
远程代码执行严重—3.4%
PoC
2026/07/19
CVE-2026-13731
WPBot <= 8.4.9 - Cross-Site Scripting
wpbot
跨站脚本攻击高危—0.89%
PoC
2026/07/19
CVE-2026-52774
YesWiki Bazar Widget - Reflected XSS via 'id' Parameter
yeswiki
跨站脚本攻击中危—0.66%
PoC
2026/07/19
CVE-2026-44381
MISP < 2.5.37 - SQL Injection
MISP
SQL注入中危—0.76%
PoC
2026/07/19
CVE-2026-8037RCE
Progress ADC LoadMaster - Command Injection
Progress-Kemp-LoadMaster
命令注入严重—77.4%
PoC
2026/07/19
CVE-2026-50229
Apache Tomcat - Cross-Site Scripting
Apache Tomcat
跨站脚本攻击中危—4.1%
PoC
2026/07/19
ZoneMinder System Log - Detect
zoneminder
信息泄露低危——
PoC
2026/07/19
GoDaddy Parked Domain - Subdomain Takeover
安全配置错误中危——
PoC
2026/07/19
CVE-2025-29635RCE
D-Link DIR-823X set_prohibiting - Command Injection
D-Link DIR-823X
命令注入高危—87.9%
PoC
2026/07/19
PHPJabbers Event Booking Calendar - Reflected XSS
PHPJabbers Event Booking Calendar
跨站脚本攻击中危——
PoC
2026/06/25
Dify < 1.13.0 - Unauthenticated SSRF via Remote File Upload
dify
服务端请求伪造高危——
PoC
2026/06/25
RCE
Weaver Ecology ExecForStr Remote Command Execution
泛微-OA(e-cology)
远程代码执行严重——
PoC
2026/06/25
← 上一页18 / 543下一页 →