VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-30632RCE CVE-2021-30632 Fedora	远程代码执行	高危	8.8	63.2%	PoC	2021/10/08
CVE-2021-42071 Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection dvr_vx16_firmware	远程代码执行	严重	9.8	69.9%	PoC	2021/10/08
CVE-2021-42013RCE Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution Apache HTTP Server	远程代码执行	严重	9.8	100.0%	PoC	2021/10/08
CNVD-2021-64035RCE Leadsec VPN - Arbitrary File Read Leadsec-SSL-VPN	文件包含	高危	—	—	PoC	2021/10/07
CVE-2021-40978 MKdocs 1.2.2 - Directory Traversal MkDocs	文件包含	高危	7.5	15.1%	PoC	2021/10/07
CVE-2021-39350 FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting fv_flowplayer_video_player	跨站脚本攻击	中危	6.1	2.2%	PoC	2021/10/07
CVE-2021-32172RCE Maian Cart <=3.8 - Remote Code Execution maian_cart	远程代码执行	严重	9.8	66.4%	PoC	2021/10/07
CVE-2021-41773 Apache 2.4.49 - Path Traversal and Remote Code Execution Apache HTTP Server	远程代码执行	高危	7.5	100.0%	PoC	2021/10/06
CVE-2021-39226 Grafana Snapshot - Authentication Bypass Grafana	身份验证绕过	高危	7.3	99.9%	PoC	2021/10/06
CVE-2021-39433 BIQS IT Biqs-drive v1.83 Local File Inclusion biqsdrive	文件包含	高危	7.5	8.7%	PoC	2021/10/05
CVE-2021-41878 i-Panel Administration System 2.0 - Cross-Site Scripting i-panel_administration_system	跨站脚本攻击	中危	6.1	9.9%	PoC	2021/10/04
CVE-2021-40323RCE Cobbler <3.3.0 - Remote Code Execution cobbler	远程代码执行	严重	9.8	86.8%	PoC	2021/10/04
CVE-2021-41467 JustWriting - Cross-Site Scripting justwriting	跨站脚本攻击	中危	6.1	3.6%	PoC	2021/10/02
CVE-2021-40973 Spotweb <= 1.5.1 - Cross Site Scripting spotweb	跨站脚本攻击	中危	6.1	2.3%	PoC	2021/10/02
CVE-2021-40972 Spotweb <= 1.5.1 - Cross Site Scripting spotweb	跨站脚本攻击	中危	6.1	2.3%	PoC	2021/10/02
CVE-2021-40971 Spotweb <= 1.5.1 - Cross Site Scripting spotweb	跨站脚本攻击	中危	6.1	2.2%	PoC	2021/10/02
CVE-2021-40970 Spotweb <= 1.5.1 - Cross Site Scripting spotweb	跨站脚本攻击	中危	6.1	2.2%	PoC	2021/10/02
CVE-2021-40969 Spotweb <= 1.5.1 - Cross Site Scripting (Reflected) spotweb	跨站脚本攻击	中危	6.1	2.2%	PoC	2021/10/02
CVE-2021-40968 Spotweb <= 1.5.1 - Cross Site Scripting spotweb	跨站脚本攻击	中危	6.1	2.2%	PoC	2021/10/02
CVE-2021-41649 PuneethReddyHC Online Shopping System homeaction.php SQL Injection online-shopping-system-advanced	SQL注入	严重	9.8	51.8%	PoC	2021/10/01