CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
10,858条匹配记录
PoC绿色表示已收录,灰色表示暂无
漏洞与影响对象漏洞类型风险等级CVSSEPSSPoC 状态披露时间
CVE-2026-33032
Nginx UI - Broken Access Control
Nginx UI
未授权访问严重—2.5%
PoC
2026/06/25
CVE-2026-35616
FortiClient EMS - Authentication Bypass
FortiClientEMS
身份验证绕过高危—9.1%
PoC
2026/06/25
CVE-2026-52815
Gogs < 0.14.3 - Unauthenticated Organization Teams Disclosure
Gogs
未授权访问低危—1.5%
PoC
2026/06/25
CVE-2026-54066
SiYuan <= 3.6.5 - Unauthenticated Path Traversal
SiYuan Note
路径穿越高危—2.4%
PoC
2026/06/25
CVE-2026-35029RCE
LiteLLM - Arbitrary File Read
litellm
访问控制错误高危—4.0%
PoC
2026/06/25
CVE-2026-40105
XWiki - Cross-Site Scripting
XWiki
跨站脚本攻击中危—0.78%
PoC
2026/06/25
CVE-2026-10580
Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover
Hippoo Mobile App for WooCommerce
身份验证绕过严重—2.9%
PoC
2026/06/25
CVE-2026-26980
Ghost CMS Content API - SQL Injection
ghost
SQL注入严重—5.0%
PoC
2026/06/25
CVE-2026-8679
WordPress AudioIgniter <= 2.0.2 - Unauthenticated IDOR
audioigniter
信息泄露高危—1.9%
PoC
2026/06/25
CVE-2026-4020
Gravity SMTP WordPress Plugin - Sensitive Information Exposure
Gravity SMTP
信息泄露高危—2.2%
PoC
2026/06/25
CVE-2026-27174RCE
MajorDoMo - Unauthenticated RCE
majordomo
未授权访问严重—5.1%
PoC
2026/06/25
CVE-2026-42208
LiteLLM - SQL Injection
litellm
SQL注入严重—5.8%
PoC
2026/06/25
CVE-2026-34197RCE
Apache ActiveMQ - Remote Code Execution
activemq
远程代码执行严重—15.5%
PoC
2026/06/25
CVE-2026-42569
phpVMS < 7.0.6 - Legacy Importer Authorization Bypass
phpVMS
未授权访问严重—1.3%
PoC
2026/06/25
CVE-2026-39808RCE
Fortinet FortiSandbox - Command Injection
FortiSandbox
远程代码执行严重—47.4%
PoC
2026/06/25
CVE-2026-38361RCE
dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks
Dash Uploader
未授权访问高危—2.8%
PoC
2026/06/25
CVE-2026-29066
TinaCMS - Path Traversal
TinaCMS
文件包含中危—0.56%
PoC
2026/06/25
CVE-2026-42647
JoomSport <= 5.7.7 - SQL Injection
joomsport
SQL注入严重—1.3%
PoC
2026/06/25
CVE-2026-53787
Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload
magento
未授权访问严重—6.5%
PoC
2026/06/25
CVE-2026-25527
changedetection.io <= 0.52.9 - Unauthenticated Path Traversal
changedetection
未授权访问中危—0.89%
PoC
2026/06/25
← 上一页29 / 543下一页 →