CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
10,858条匹配记录
PoC绿色表示已收录,灰色表示暂无
漏洞与影响对象漏洞类型风险等级CVSSEPSSPoC 状态披露时间
CVE-2025-59528RCE
Flowise - Remote Code Execution
Flowise
远程代码执行严重—86.2%
PoC
2026/06/25
CVE-2025-49002
DataEase - Remote Code Execution
dataease
远程代码执行高危—50.0%
PoC
2026/06/25
CVE-2025-54597
Heimdall Application Dashboard < 2.7.3 - Reflected XSS
Heimdall Application Dashboard
未授权访问中危—0.56%
PoC
2026/06/25
CVE-2025-68602
Accept Donations with PayPal <= 1.5.2 - Open Redirect
Accept Donations with PayPal
未授权访问中危—0.49%
PoC
2026/06/25
CVE-2025-13339
Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read
Hippoo Mobile App for WooCommerce
文件包含高危—2.2%
PoC
2026/06/25
CVE-2025-59136
WordPress Gerencianet Oficial <= 3.1.3 - Unauthenticated Order Status Disclosure
woo-gerencianet-official
信息泄露中危—0.67%
PoC
2026/06/25
CVE-2023-7327
Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read
ozeki_10_sms
未授权访问高危—2.1%
PoC
2026/06/25
CVE-2022-44727
PrestaShop lgcookieslaw - SQL Injection
PrestaShop
未授权访问严重—2.6%
PoC
2026/06/25
CVE-2026-8054
dotCMS Core Publish Audit API - Unauthenticated SQL Injection
DotCMS
未授权访问严重—1.6%
PoC
2026/06/25
CVE-2026-27833
Piwigo < 16.3.0 - Unauthenticated Information Disclosure via History API
Piwigo相册系统
未授权访问高危—1.7%
PoC
2026/06/25
CVE-2026-9082
Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query
Drupal
SQL注入严重—15.7%
PoC
2026/06/25
CVE-2026-41176
Rclone RC - Broken Access Control
Rclone
未授权访问严重—3.2%
PoC
2026/06/25
CVE-2026-21445
Langflow - Broken Access Control
Langflow
未授权访问严重—33.3%
PoC
2026/06/25
CVE-2026-46725RCE
TYPO3 ceselector Extension - Insecure Deserialization
typo3
远程代码执行严重—1.9%
PoC
2026/06/25
CVE-2026-5073
WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection
armember
未授权访问严重—1.6%
PoC
2026/06/25
CVE-2026-33340
LoLLMs WEBUI - Server-Side Request Forgery
LOLLMS WebUI
服务端请求伪造严重—1.7%
PoC
2026/06/25
CVE-2026-31816
Budibase - Authentication Bypass
Budibase
身份验证绕过严重—2.2%
PoC
2026/06/25
CVE-2026-21643
Fortinet FortiClientEMS 7.4.4 - SQL Injection
FortiClientEMS
SQL注入严重—93.7%
PoC
2026/06/25
CVE-2026-1296
Frontend Post Submission Manager Lite <= 1.2.7 - Open Redirect
frontend-post-submission-manager-lite
不安全的重定向中危—0.46%
PoC
2026/06/25
CVE-2026-0740RCE
Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload
Ninja Forms File Uploads
远程代码执行严重—62.9%
PoC
2026/06/25
← 上一页27 / 543下一页 →