CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
10,858条匹配记录
PoC绿色表示已收录,灰色表示暂无
漏洞与影响对象漏洞类型风险等级CVSSEPSSPoC 状态披露时间
CVE-2026-39339
ChurchCRM - API Authentication Bypass via URL Injection
churchcrm
身份验证绕过严重—1.8%
PoC
2026/06/25
CVE-2026-42271RCE
LiteLLM - Command Injection
litellm
远程代码执行严重—92.6%
PoC
2026/06/25
CVE-2026-45397
Open WebUI < 0.9.5 - Information Disclosure
openwebui
信息泄露中危—0.81%
PoC
2026/06/25
CVE-2026-20253RCE
Splunk Enterprise & Cloud Platform - Unrestricted File Upload
Splunk
文件上传严重—96.9%
PoC
2026/06/25
CVE-2026-41641
NocoBase - SQL Injection
NocoBase
SQL注入高危—2.4%
PoC
2026/06/25
CVE-2026-1581
wpForo Forum <= 2.4.14 - SQL Injection
wpforo
未授权访问严重—2.6%
PoC
2026/06/25
CVE-2026-1314
WordPress 3D FlipBook <= 1.16.17 - Information Disclosure
interactive-3d-flipbook-powered-physics-engine
信息泄露中危—0.89%
PoC
2026/06/25
CVE-2026-27483RCE
MindsDB - Remote Code Execution
mindsdb
未授权访问高危—8.8%
PoC
2026/06/25
CVE-2026-31809
SiYuan <= v3.5.9 - Cross Site Scripting
SiYuan Note
跨站脚本攻击中危—0.57%
PoC
2026/06/25
CVE-2026-26190
Milvus - Unauthenticated Metrics API Access
Milvus
未授权访问严重—4.1%
PoC
2026/06/25
CVE-2026-33476
SiYuan <= v3.6.1 - Path Traversal
SiYuan Note
信息泄露高危—3.1%
PoC
2026/06/25
CVE-2026-27826
mcp-atlassian < 0.17.0 - Server-Side Request Forgery
MCP Atlassian
服务端请求伪造高危—1.0%
PoC
2026/06/25
CVE-2026-27944
Nginx UI < 2.3.3 - Information Disclosure
Nginx UI
未授权访问严重—1.0%
PoC
2026/06/25
CVE-2026-30928
Glances - Information Disclosure
Glances
信息泄露高危—1.6%
PoC
2026/06/25
CVE-2026-40151
PraisonAI AgentOS - Information Disclosure
PraisonAI AgentOS
信息泄露中危—0.84%
PoC
2026/06/25
CVE-2026-22739
Spring Cloud Config Server - Path Traversal
spring_cloud_config
文件包含高危—1.2%
PoC
2026/06/25
CVE-2026-1368
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation
video-conferencing-with-zoom-api
未授权访问高危—1.2%
PoC
2026/06/25
CVE-2026-40887
Vendure Core - SQL Injection
Vendure
SQL注入严重—2.2%
PoC
2026/06/25
CVE-2026-29183
SiYuan Note - Cross-Site Scripting
SiYuan Note
跨站脚本攻击中危—0.69%
PoC
2026/06/25
CVE-2026-2413
Ally – Web Accessibility & Usability <= 4.0.3 - SQL Injection
pojo-accessibility
未授权访问高危—2.3%
PoC
2026/06/25
← 上一页31 / 543下一页 →