VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-24849 WCFM WooCommerce Multivendor Marketplace < 3.4.12 - SQL Injection wc-multivendor-marketplace	SQL注入	严重	9.8	8.5%	PoC	2021/12/21
CVE-2021-24956 Blog2Social < 6.8.7 - Cross-Site Scripting blog2social	跨站脚本攻击	中危	6.1	1.4%	PoC	2021/12/21
CVE-2021-24750 WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection wp_visitor_statistics	SQL注入	高危	8.8	38.3%	PoC	2021/12/21
CVE-2021-44790RCE CVE-2021-44790 Apache HTTP Server	远程代码执行	严重	9.8	96.8%	PoC	2021/12/20
CVE-2021-45105 CVE-2021-45105	不安全的输入验证	中危	5.9	100.0%	PoC	2021/12/18
CVE-2021-45092 Thinfinity Iframe Injection thinfinity_virtualui	Iframe注入	严重	9.8	40.6%	PoC	2021/12/16
CVE-2021-36888 WordPress Image Hover Ultimate - Unauthenticated Settings Update image-hover-effects-ultimate	未授权访问	严重	9.8	6.7%	PoC	2021/12/15
CVE-2021-27858 FatPipe WARP/IPVPN/MPVPN - Authorization Bypass warp_firmware	远程代码执行	中危	5.3	2.7%	PoC	2021/12/15
CVE-2021-27856 FatPipe WARP/IPVPN/MPVPN - Backdoor Account fatpipeinc	安全配置错误	严重	9.8	5.6%	PoC	2021/12/15
CVE-2021-43831RCE Gradio < 2.5.0 - Arbitrary File Read gradio	文件包含	高危	7.7	3.8%	PoC	2021/12/15
CVE-2021-45406 Apache Log4j2 - Remote Code Injection log4j	远程代码执行	严重	9.0	1.8%	PoC	2021/12/15
CVE-2017-5645RCE Apache Log4j Server - Deserialization Command Execution log4j	远程代码执行	严重	9.8	89.8%	PoC	2021/12/15
CVE-2021-45046 Apache Log4j2 - Remote Code Injection log4j	远程代码执行	严重	9.0	100.0%	PoC	2021/12/15
CVE-2021-45043 HD-Network Realtime Monitoring System 2.0 - Local File Inclusion hd-network_real-time_monitoring_system	文件包含	高危	7.5	33.1%	PoC	2021/12/15
CVE-2021-42063 SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting knowledge_warehouse	跨站脚本攻击	中危	6.1	22.2%	PoC	2021/12/15
CVE-2021-39312 WordPress True Ranker <2.2.4 - Local File Inclusion true_ranker	文件包含	高危	7.5	77.9%	PoC	2021/12/15
CVE-2021-36450 Verint Workforce Optimization 15.2.8.10048 - Cross-Site Scripting workforce_optimization	跨站脚本攻击	中危	6.1	64.3%	PoC	2021/12/15
CVE-2021-4073 RegistrationMagic <= 5.0.1.7 - Authentication Bypass registrationmagic	身份验证绕过	高危	8.1	7.0%	PoC	2021/12/14
CVE-2021-3831 Gnuboard 5 - Cross-Site Scripting Gnuboard	跨站脚本攻击	中危	6.1	1.8%	PoC	2021/12/14
CVE-2021-4104RCE CVE-2021-4104 Fedora Weblogic Server jboss_enterprise_application_platform+2	远程代码执行	高危	7.5	80.6%	PoC	2021/12/14