VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2022-4306 WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting panda_pods_repeater_field	跨站脚本攻击	中危	5.4	0.84%	PoC	2023/01/31
CVE-2022-4395 CVE-2022-4395	文件上传	严重	9.8	17.6%	PoC	2023/01/30
CVE-2023-24657 phpIPAM - 1.6 - Cross-Site Scripting phpipam	跨站脚本攻击	中危	6.1	3.9%	PoC	2023/01/30
CVE-2023-0563 Bank Locker Management System - Cross-Site Scripting bank_locker_management_system	跨站脚本攻击	中危	4.8	37.6%	PoC	2023/01/29
CVE-2023-0562 Bank Locker Management System v1.0 - SQL Injection bank_locker_management_system	SQL注入	严重	9.8	44.3%	PoC	2023/01/29
CVE-2022-48012 OpenCATS 0.9.7 - Cross-Site Scripting opencats	跨站脚本攻击	中危	6.1	1.4%	PoC	2023/01/28
CVE-2023-0527 Online Security Guards Hiring System - Cross-Site Scripting online_security_guards_hiring_system	跨站脚本攻击	中危	6.1	6.1%	PoC	2023/01/27
CVE-2023-0448 WP Helper Lite < 4.3 - Cross-Site Scripting wp_helper_premium	跨站脚本攻击	中危	6.1	42.9%	PoC	2023/01/27
CVE-2022-47615 LearnPress Plugin < 4.2.0 - Local File Inclusion learnpress	文件包含	严重	9.8	5.1%	PoC	2023/01/27
CVE-2022-45808 LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi learnpress	SQL注入	严重	9.8	4.3%	PoC	2023/01/26
CVE-2022-31711 VMware vRealize Log Insight < v8.10.2 - Information Disclosure vRealize-Log-Insight	信息泄露	中危	5.3	24.0%	PoC	2023/01/26
CVE-2022-31706 VMware vRealize Log Insight - Path Traversal vRealize-Log-Insight	文件包含	严重	9.8	87.1%	PoC	2023/01/26
CVE-2022-31704 VMware vRealize Log Insight - Improper Access Control to RCE vRealize-Log-Insight	身份验证绕过	严重	9.8	81.0%	PoC	2023/01/26
Easypost Test API Token	信息泄露	低危	—	—	PoC	2023/01/26
Hashicorp API Token	信息泄露	低危	—	—	PoC	2023/01/26
Flutterwave Public Key	信息泄露	低危	—	—	PoC	2023/01/26
finnhub Access Token	信息泄露	低危	—	—	PoC	2023/01/26
Asana Client Secret	信息泄露	低危	—	—	PoC	2023/01/26
Asana Client ID	信息泄露	低危	—	—	PoC	2023/01/26
Alibaba Secret Key ID	信息泄露	低危	—	—	PoC	2023/01/26