VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2023-29489 cPanel < 11.109.9999.116 - Cross-Site Scripting cPanel	跨站脚本攻击	中危	6.1	65.5%	PoC	2023/04/26
CVE-2023-29552 CVE-2023-29552 vmware-ESXi	拒绝服务	高危	7.5	64.0%	PoC	2023/04/25
CVE-2023-28771 CVE-2023-28771 ZyWALL ZyXEL-USG310 ZyXEL-ZyWALL-310+9	远程代码执行	严重	9.8	99.3%	PoC	2023/04/25
Weaver E-Office v9.5 - Arbitrary File Upload e-office	文件上传	高危	—	—	PoC	2023/04/25
CVE-2023-27524 Apache Superset - Authentication Bypass Apache Superset	身份验证绕过	严重	9.8	97.4%	PoC	2023/04/25
CVE-2023-26843 ChurchCRM 4.5.3 - Cross-Site Scripting churchcrm	跨站脚本攻击	中危	5.4	1.4%	PoC	2023/04/25
CVE-2023-25346 ChurchCRM 4.5.3 - Cross-Site Scripting churchcrm	跨站脚本攻击	中危	6.1	1.5%	PoC	2023/04/25
CVE-2023-1020 Steveas WP Live Chat Shoutbox <= 1.4.2 - SQL Injection wp_live_chat_shoutbox	SQL注入	严重	9.8	4.9%	PoC	2023/04/25
CVE-2023-2256 WordPress Product Addons & Fields for WooCommerce < 32.0.7 - Cross-Site Scripting woocommerce-product-addon	跨站脚本攻击	中危	6.1	0.95%	PoC	2023/04/24
瑞友天翼应用虚拟化系统默认口令瑞友天翼应用虚拟化系统	弱口令	高危	—	—	PoC	2023/04/24
CVE-2023-31059 Repetier Server - Directory Traversal repetier-server	文件包含	高危	7.5	5.6%	PoC	2023/04/24
CVE-2023-2227 Modoboa < 2.1.0 - Improper Authorization Modoboa	信息泄露	严重	9.1	44.0%	PoC	2023/04/21
CVE-2023-1892 Sidekiq < 7.0.8 - Cross-Site Scripting sidekiq	跨站脚本攻击	严重	9.6	2.7%	PoC	2023/04/21
CVE-2023-20864 VMware Aria Operations for Logs - Unauthenticated Remote Code Execution vRealize-Log-Insight	远程代码执行	严重	9.8	70.4%	PoC	2023/04/21
CVE-2023-27351 PaperCut NG - Authentication Bypass papercut	身份验证绕过	高危	7.5	78.1%	PoC	2023/04/20
CVE-2023-29922 PowerJob V4.3.1 - Authentication Bypass powerjob	身份验证绕过	中危	5.3	3.0%	PoC	2023/04/20
CVE-2023-29923 PowerJob <=4.3.2 - Unauthenticated Access powerjob	未授权访问	中危	5.3	9.5%	PoC	2023/04/19
CVE-2023-29887 Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion spreadsheet-reader	文件包含	高危	7.5	4.7%	PoC	2023/04/19
CVE-2023-21931 CVE-2023-21931 Weblogic Server	信息泄露	高危	7.5	82.3%	PoC	2023/04/18
CVE-2023-2130 Purchase Order Management v1.0 - SQL Injection purchase_order_system	SQL注入	严重	9.8	4.1%	PoC	2023/04/18