VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2022-29775 iSpy 7.2.2.0 - Authentication Bypass ispy	身份验证绕过	严重	9.8	60.3%	PoC	2022/06/21
CVE-2021-25104 WordPress Ocean Extra <1.9.5 - Cross-Site Scripting ocean_extra	跨站脚本攻击	中危	6.1	1.4%	PoC	2022/06/20
CVE-2022-32444 u5cms v8.3.5 - Open Redirect u5CMS	不安全的重定向	中危	6.1	2.4%	PoC	2022/06/18
CVE-2022-31299 Haraj 3.7 - Cross-Site Scripting haraj	跨站脚本攻击	中危	6.1	5.1%	PoC	2022/06/17
Exposed DS_Store File Apache HTTP Server	信息泄露	低危	—	—	PoC	2022/06/16
SolarView Compact 6.00 - Cross-Site Scripting solarview	跨站脚本攻击	高危	7.2	—	PoC	2022/06/14
CVE-2022-33174 Powertek Firmware <3.30.30 - Authorization Bypass basic_pdu_firmware	身份验证绕过	高危	7.5	14.1%	PoC	2022/06/14
CVE-2022-31847 WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure Wavlink-WiFi-APP	信息泄露	高危	7.5	6.6%	PoC	2022/06/14
CVE-2022-31846 WAVLINK WN535 G3 - Information Disclosure Wavlink-WiFi-APP	信息泄露	高危	7.5	7.4%	PoC	2022/06/14
CVE-2022-31845 WAVLINK WN535 G3 - Information Disclosure Wavlink-WiFi-APP	信息泄露	高危	7.5	8.7%	PoC	2022/06/14
CVE-2022-29455 WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting website_builder	跨站脚本攻击	中危	6.1	23.7%	PoC	2022/06/14
CNVD-2022-42853 ZenTao CMS - SQL Injection 禅道	SQL注入	严重	10.0	—	PoC	2022/06/14
CVE-2022-1707 CVE-2022-1707	跨站脚本攻击	中危	6.1	89.3%	PoC	2022/06/13
CVE-2022-29455 WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting website_builder	跨站脚本攻击	中危	6.1	23.7%	PoC	2022/06/13
CVE-2022-1768 WordPress RSVPMaker <=9.3.2 - SQL Injection rsvpmaker	SQL注入	高危	7.5	12.9%	PoC	2022/06/13
CVE-2022-1756 Newsletter < 7.4.5 - Cross-Site Scripting newsletter	跨站脚本攻击	中危	6.1	1.9%	PoC	2022/06/13
CVE-2022-1724 WordPress Simple Membership <4.1.1 - Cross-Site Scripting simple_membership	跨站脚本攻击	中危	6.1	1.8%	PoC	2022/06/13
CVE-2022-1595 WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure hc_custom_wp-admin_url	未授权访问	中危	5.3	2.9%	PoC	2022/06/13
CVE-2022-0885 Member Hero <=1.0.9 - Remote Code Execution member_hero	远程代码执行	严重	9.8	9.4%	PoC	2022/06/13
CVE-2022-0827 WordPress Best Books <=2.6.3 - SQL Injection bestbooks	SQL注入	严重	9.8	9.1%	PoC	2022/06/13