CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
10,858条匹配记录
PoC绿色表示已收录,灰色表示暂无
漏洞与影响对象漏洞类型风险等级CVSSEPSSPoC 状态披露时间
CVE-2026-28409RCE
WeGIA <= 3.6.4 - Remote Code Execution
WeGIA
远程代码执行严重—3.8%
PoC
2026/06/25
CVE-2026-3584RCE
WordPress Kali Forms <= 2.4.9 - Remote Code Execution
kali-forms
未授权访问严重—4.4%
PoC
2026/06/25
CVE-2026-27176
MajorDoMo - Cross-Site Scripting
majordomo
跨站脚本攻击中危—0.60%
PoC
2026/06/25
CVE-2026-34885
WordPress Media Library Assistant <= 3.34 - SQL Injection
media_library_assistant
SQL注入高危—1.2%
PoC
2026/06/25
CVE-2026-41492
Dgraph <= 25.3.2 - Admin Token Disclosure
Dgraph
信息泄露严重—2.5%
PoC
2026/06/25
CVE-2026-25545
Astro SSR - Server-Side Request Forgery
Astro
服务端请求伪造高危—1.9%
PoC
2026/06/25
CVE-2026-47717
FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure
fuxa
未授权访问高危—1.4%
PoC
2026/06/25
CVE-2026-33534
EspoCRM <= 9.3.3 - Server-Side Request Forgery
espocrm
服务端请求伪造中危—1.7%
PoC
2026/06/25
CVE-2026-34910RCE
UniFi OS Server - Command Injection
UniFi-OS
远程代码执行严重—45.8%
PoC
2026/06/25
CVE-2026-4810RCE
Google ADK-Python - Unauthenticated Builder Endpoint
Google ADK-Python
未授权访问严重—2.2%
PoC
2026/06/25
CVE-2026-3300RCE
Everest Forms Pro <= 1.9.12 - Unauthenticated RCE via Calculation Formula Injection
everest-forms-pro
未授权访问严重—4.4%
PoC
2026/06/25
CVE-2026-54069
SiYuan Note <= 3.6.5 - Authentication Bypass
SiYuan Note
未授权访问高危—0.58%
PoC
2026/06/25
CVE-2026-1306RCE
WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload
midi-synth
远程代码执行严重—4.5%
PoC
2026/06/25
CVE-2026-5027RCE
Langflow <= 1.8.4 - Path Traversal to RCE via File Upload
Langflow
文件包含高危—4.8%
PoC
2026/06/25
CVE-2026-33057RCE
Mesop AI Sandbox <= 1.2.2 - Remote Code Execution
Mesop
远程代码执行严重—4.1%
PoC
2026/06/25
CVE-2026-49777RCE
WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE
woo-product-slider-pro
未授权访问严重—2.0%
PoC
2026/06/25
CVE-2026-33439RCE
OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization
openam
远程代码执行严重—8.4%
PoC
2026/06/25
CVE-2026-28496RCE
FOSSBilling - Server-Side Template Injection
fossbilling
远程代码执行严重—1.9%
PoC
2026/06/25
CVE-2026-40466RCE
Apache ActiveMQ - Remote Code Execution via HTTP Discovery Transport Bypass
activemq
未授权访问高危—4.1%
PoC
2026/06/25
CVE-2026-8839
WordPress MapPress Maps <= 2.96.6 - Unauthenticated IDOR
mappress-google-maps-for-wordpress
信息泄露中危—1.3%
PoC
2026/06/25
← 上一页30 / 543下一页 →