VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2023-1698 WAGO - Remote Command Execution compact_controller_100_firmware	远程代码执行	严重	9.8	82.0%	PoC	2023/05/15
CVE-2023-0600 WP Visitor Statistics (Real Time Traffic) < 6.9 - SQL Injection wp_visitor_statistics	SQL注入	严重	9.8	4.2%	PoC	2023/05/15
CVE-2023-30192 PrestaShop 'possearchproducts' <= 1.7 - SQL Injection PrestaShop	SQL注入	严重	9.8	2.7%	PoC	2023/05/12
Secnet Intelligent Routing System actpt_5g.data - Information Leak 安网科技智能路由系统	信息泄露	高危	—	—	PoC	2023/05/12
CVE-2023-32243 WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset essential_addons_for_elementor	密码重置	严重	9.8	75.5%	PoC	2023/05/11
CVE-2023-30256 Webkul QloApps 1.5.2 - Cross-site Scripting QloApps	跨站脚本攻击	中危	6.1	9.1%	PoC	2023/05/11
CVE-2023-2648 Weaver E-Office 9.5 - Remote Code Execution e-office	远程代码执行	严重	9.8	28.5%	PoC	2023/05/11
CVE-2023-30194 Prestashop posstaticfooter <= 1.0.0 - SQL Injection	SQL注入	严重	9.8	32.4%	PoC	2023/05/10
CVE-2023-29336 CVE-2023-29336 Windows-Server-2008 Windows-Server-2012 Windows-Server-2016	使用后释放	高危	7.8	41.2%	PoC	2023/05/09
CVE-2023-28128 CVE-2023-28128 avalanche	文件上传	高危	7.2	84.7%	PoC	2023/05/09
CVE-2023-24955 CVE-2023-24955 Sharepoint-Server	远程代码执行	高危	7.2	85.0%	PoC	2023/05/09
CVE-2023-27922 Newsletter < 7.6.9 - Cross-Site Scripting newsletter	跨站脚本攻击	中危	6.1	1.2%	PoC	2023/05/09
CVE-2023-24488 Citrix Gateway and Citrix ADC - Cross-Site Scripting Citrix Gateway	跨站脚本攻击	中危	6.1	80.9%	PoC	2023/05/09
CVE-2023-2114 CVE-2023-2114 nex-forms	SQL注入	高危	7.2	44.6%	PoC	2023/05/08
CVE-2023-30019 Imgproxy <= 3.14.0 - Server-side request forgery (SSRF) Imgproxy	服务端请求伪造	中危	5.3	2.2%	PoC	2023/05/08
CVE-2023-1408 Video List Manager <= 1.7 - SQL Injection video_list_manager	SQL注入	高危	7.2	3.2%	PoC	2023/05/08
CVE-2023-0948 WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting japanized_for_woocommerce	跨站脚本攻击	中危	6.1	0.85%	PoC	2023/05/08
CVE-2023-0514 Membership Database <= 1.0 - Cross-Site Scripting membership	跨站脚本攻击	中危	6.1	0.85%	PoC	2023/05/08
CNVD-2023-08743 Hongjing Human Resource Management System - SQL Injection 宏景人力资源信息管理系统	SQL注入	严重	—	—	PoC	2023/05/06
CVE-2023-32235 Ghost CMS < 5.42.1 - Path Traversal ghost	路径穿越	高危	7.5	39.1%	PoC	2023/05/05