VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2022-40879 kkFileView 4.1.0 - Cross-Site Scripting kkfileview	跨站脚本攻击	中危	6.1	1.3%	PoC	2022/09/30
CVE-2022-40083 Labstack Echo 4.8.0 - Open Redirect echo	不安全的重定向	严重	9.6	3.2%	PoC	2022/09/28
CVE-2022-41352 Zimbra Collaboration - Unrestricted File Upload collaboration	文件包含	严重	9.8	95.5%	PoC	2022/09/26
CVE-2022-3038 CVE-2022-3038 Fedora	使用后释放	高危	8.8	24.7%	PoC	2022/09/26
CVE-2022-38553 Academy Learning Management System <5.9.1 - Cross-Site Scripting academy_learning_management_system	跨站脚本攻击	中危	6.1	3.0%	PoC	2022/09/26
CVE-2022-3062 Simple File List < 4.4.12 - Cross Site Scripting simple-file-list	跨站脚本攻击	中危	6.1	44.1%	PoC	2022/09/26
CVE-2022-41343 CVE-2022-41343	文件包含	高危	7.5	6.0%	PoC	2022/09/25
CVE-2022-40359 Kae's File Manager <=1.4.7 - Cross-Site Scripting kfm	跨站脚本攻击	中危	6.1	1.8%	PoC	2022/09/24
CVE-2022-36944 CVE-2022-36944 Fedora	远程代码执行	严重	9.8	10.6%	PoC	2022/09/23
CVE-2022-35951 CVE-2022-35951 Redis Fedora	整数溢出	严重	7.0	3.9%	PoC	2022/09/23
CVE-2022-3236RCE Sophos Firewall <= 19.0 MR1 - Remote Code Execution Sophos-Firewall	命令注入	严重	9.8	98.9%	PoC	2022/09/23
Topsec Topacm - Remote Code Execution 天融信上网行为管理系统	远程代码执行	严重	—	—	PoC	2022/09/20
Seeyon OA wpsAssistServlet - Arbitrary File Upload 致远OA	文件上传	严重	—	—	PoC	2022/09/20
Seeyon OA A6 setextno.jsp - SQL Injection 致远OA	SQL注入	高危	—	—	PoC	2022/09/20
Seeyon OA Fastjson Remote Code Execution 致远OA	远程代码执行	严重	—	—	PoC	2022/09/20
Seeyon OA A6 initDataAssess.jsp - Information Disclosure 致远OA	信息泄露	中危	—	—	PoC	2022/09/20
Seeyon OA A6 createMysql.jsp Database - Information Disclosure 致远OA	信息泄露	中危	—	—	PoC	2022/09/20
CVE-2022-35914RCE GLPI <=10.0.2 - Remote Command Execution GLPI	远程代码执行	严重	9.8	99.9%	PoC	2022/09/20
CVE-2022-3242 Microweber <1.3.2 - Cross-Site Scripting 米可微伯	跨站脚本攻击	中危	6.1	1.9%	PoC	2022/09/20
CVE-2022-22963RCE Spring Cloud - Remote Code Execution spring_cloud_function	远程代码执行	严重	9.8	99.9%	PoC	2022/09/20