VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-25074 WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect webp_converter_for_media	不安全的重定向	中危	6.1	2.2%	PoC	2022/01/24
CVE-2021-25028 WordPress Event Tickets < 5.2.2 - Open Redirect event_tickets	不安全的重定向	中危	6.1	1.9%	PoC	2022/01/24
CVE-2021-25008 The Code Snippets WordPress Plugin < 2.14.3 - Cross-Site Scripting code_snippets	跨站脚本攻击	中危	6.1	2.3%	PoC	2022/01/24
CVE-2022-23808 phpMyAdmin < 5.1.2 - Cross-Site Scripting phpMyAdmin	跨站脚本攻击	中危	6.1	7.9%	PoC	2022/01/22
CVE-2022-22733 Apache ShardingSphere ElasticJob-UI privilege escalation shardingsphere_elasticjob-ui	信息泄露	中危	6.5	37.6%	PoC	2022/01/20
CVE-2022-0281 Microweber Information Disclosure 米可微伯	信息泄露	高危	7.5	10.5%	PoC	2022/01/20
CVE-2021-26247 Cacti - Cross-Site Scripting Cacti	跨站脚本攻击	中危	6.1	7.1%	PoC	2022/01/20
CVE-2021-46005 Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting car_rental_management_system	跨站脚本攻击	中危	5.4	2.9%	PoC	2022/01/19
OpenBMCS 2.4 - Server-Side Request Forgery / Remote File Inclusion openbmcs	服务端请求伪造	中危	6.8	—	PoC	2022/01/18
OpenBMCS 2.4 - Information Disclosure openbmcs	信息泄露	高危	7.5	—	PoC	2022/01/18
CVE-2022-0250 Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting redirection_for_contact_form_7	跨站脚本攻击	中危	6.1	1.6%	PoC	2022/01/17
CVE-2021-25067 Landing Page Builder < 1.4.9.6 - Cross-Site Scripting landing_page	跨站脚本攻击	中危	5.4	1.1%	PoC	2022/01/17
CVE-2021-25065 Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting smash_balloon_social_post_feed	跨站脚本攻击	中危	5.4	1.0%	PoC	2022/01/17
CVE-2021-24838 WordPress AnyComment <0.3.5 - Open Redirect anycomment	不安全的重定向	中危	6.1	2.2%	PoC	2022/01/17
CVE-2022-23178 Crestron Device - Credentials Disclosure hd-md4x2-4k-e_firmware	信息泄露	严重	9.8	75.2%	PoC	2022/01/15
CVE-2022-23134 Zabbix Setup Configuration Authentication Bypass Zabbix	身份验证绕过	中危	5.3	95.3%	PoC	2022/01/14
CVE-2022-23131RCE Zabbix - SAML SSO Authentication Bypass Zabbix	身份验证绕过	严重	9.8	95.7%	PoC	2022/01/14
CVE-2021-45422 Reprise License Manager 14.2 - Cross-Site Scripting reprise_license_manager	跨站脚本攻击	中危	6.1	3.2%	PoC	2022/01/14
CVE-2021-42551 NetBiblio WebOPAC - Cross-Site Scripting netbiblio	跨站脚本攻击	中危	6.1	2.7%	PoC	2022/01/14
CVE-2021-41192 Redash Setup Configuration - Default Secrets Disclosure redash	信息泄露	中危	6.5	8.1%	PoC	2022/01/13