CloudMap
漏洞情报库
漏洞库
厂商
产品
风险排行
开发者中心
开始检索
↗
VULNERABILITY INTELLIGENCE
漏洞情报库
组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
验证信息保护
仅展示 PoC 是否收录
不公开内容、路径和下载地址
⌕
/
搜索漏洞
10,858
条匹配记录
PoC
绿色表示已收录,灰色表示暂无
漏洞与影响对象
漏洞类型
风险等级
CVSS
EPSS
PoC 状态
披露时间
CVE-2026-28409
RCE
WeGIA <= 3.6.4 - Remote Code Execution
WeGIA
远程代码执行
严重
—
3.8%
PoC
2026/06/25
CVE-2026-3584
RCE
WordPress Kali Forms <= 2.4.9 - Remote Code Execution
kali-forms
未授权访问
严重
—
4.4%
PoC
2026/06/25
CVE-2026-27176
MajorDoMo - Cross-Site Scripting
majordomo
跨站脚本攻击
中危
—
0.60%
PoC
2026/06/25
CVE-2026-34885
WordPress Media Library Assistant <= 3.34 - SQL Injection
media_library_assistant
SQL注入
高危
—
1.2%
PoC
2026/06/25
CVE-2026-41492
Dgraph <= 25.3.2 - Admin Token Disclosure
Dgraph
信息泄露
严重
—
2.5%
PoC
2026/06/25
CVE-2026-25545
Astro SSR - Server-Side Request Forgery
Astro
服务端请求伪造
高危
—
1.9%
PoC
2026/06/25
CVE-2026-47717
FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure
fuxa
未授权访问
高危
—
1.4%
PoC
2026/06/25
CVE-2026-33534
EspoCRM <= 9.3.3 - Server-Side Request Forgery
espocrm
服务端请求伪造
中危
—
1.7%
PoC
2026/06/25
CVE-2026-34910
RCE
UniFi OS Server - Command Injection
UniFi-OS
远程代码执行
严重
—
45.8%
PoC
2026/06/25
CVE-2026-4810
RCE
Google ADK-Python - Unauthenticated Builder Endpoint
Google ADK-Python
未授权访问
严重
—
2.2%
PoC
2026/06/25
CVE-2026-3300
RCE
Everest Forms Pro <= 1.9.12 - Unauthenticated RCE via Calculation Formula Injection
everest-forms-pro
未授权访问
严重
—
4.4%
PoC
2026/06/25
CVE-2026-54069
SiYuan Note <= 3.6.5 - Authentication Bypass
SiYuan Note
未授权访问
高危
—
0.58%
PoC
2026/06/25
CVE-2026-1306
RCE
WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload
midi-synth
远程代码执行
严重
—
4.5%
PoC
2026/06/25
CVE-2026-5027
RCE
Langflow <= 1.8.4 - Path Traversal to RCE via File Upload
Langflow
文件包含
高危
—
4.8%
PoC
2026/06/25
CVE-2026-33057
RCE
Mesop AI Sandbox <= 1.2.2 - Remote Code Execution
Mesop
远程代码执行
严重
—
4.1%
PoC
2026/06/25
CVE-2026-49777
RCE
WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE
woo-product-slider-pro
未授权访问
严重
—
2.0%
PoC
2026/06/25
CVE-2026-33439
RCE
OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization
openam
远程代码执行
严重
—
8.4%
PoC
2026/06/25
CVE-2026-28496
RCE
FOSSBilling - Server-Side Template Injection
fossbilling
远程代码执行
严重
—
1.9%
PoC
2026/06/25
CVE-2026-40466
RCE
Apache ActiveMQ - Remote Code Execution via HTTP Discovery Transport Bypass
activemq
未授权访问
高危
—
4.1%
PoC
2026/06/25
CVE-2026-8839
WordPress MapPress Maps <= 2.96.6 - Unauthenticated IDOR
mappress-google-maps-for-wordpress
信息泄露
中危
—
1.3%
PoC
2026/06/25
← 上一页
30 / 543
下一页 →