组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| GDidees CMS v3.9.1 - Arbitrary File Download | 本地文件读取 | 高危 | 7.5 | 60.8% | PoC | ||
| Lexmark Printers - Command Injection | 命令注入 | 高危 | 8.1 | 37.8% | PoC | ||
| CVE-2023-26068 | 不安全的输入验证 | 严重 | 9.8 | 11.6% | PoC | ||
| Apache OFBiz < 18.12.07 - Local File Inclusion | 文件包含 | 高危 | 7.5 | 10.2% | PoC | ||
| ServiceNow - Cross-site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 1.1% | PoC | ||
| CVE-2023-29017 | 身份验证绕过 | 严重 | 10.0 | 63.2% | PoC | ||
| Phpmyfaq v3.1.11 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 1.6% | PoC | ||
| WCFM Membership <= 2.10.0 - Broken Access Control | 访问控制错误 | 中危 | 6.5 | 1.1% | PoC | ||
| CVE-2023-28342 | 远程代码执行 | 高危 | 7.5 | 78.3% | PoC | ||
| Twilio API Key | 信息泄露 | 低危 | — | — | PoC | ||
| Telegram Bot Token | 信息泄露 | 低危 | — | — | PoC | ||
| StackHawk API Key | 信息泄露 | 低危 | — | — | PoC | ||
| Square OAuth Secret | 信息泄露 | 低危 | — | — | PoC | ||
| Square Access Token | 信息泄露 | 低危 | — | — | PoC | ||
| Shopify Access Token (Public App) | 信息泄露 | 低危 | — | — | PoC | ||
| Shopify Access Token (Legacy Private App) | 信息泄露 | 低危 | — | — | PoC | ||
| Shopify Access Token (Custom App) | 信息泄露 | 低危 | — | — | PoC | ||
| Shopify App Secret | 信息泄露 | 低危 | — | — | PoC | ||
| Segment Public API Token | 信息泄露 | 低危 | — | — | PoC | ||
| Sauce Token | 信息泄露 | 低危 | — | — | PoC |