VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2022-23808 phpMyAdmin < 5.1.2 - Cross-Site Scripting phpMyAdmin	跨站脚本攻击	中危	6.1	7.9%	PoC	2022/01/22
CVE-2022-22733 Apache ShardingSphere ElasticJob-UI privilege escalation shardingsphere_elasticjob-ui	信息泄露	中危	6.5	37.6%	PoC	2022/01/20
CVE-2022-0281 Microweber Information Disclosure 米可微伯	信息泄露	高危	7.5	10.5%	PoC	2022/01/20
CVE-2021-26247 Cacti - Cross-Site Scripting Cacti	跨站脚本攻击	中危	6.1	7.1%	PoC	2022/01/20
CVE-2021-46005 Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting car_rental_management_system	跨站脚本攻击	中危	5.4	2.9%	PoC	2022/01/19
OpenBMCS 2.4 - Server-Side Request Forgery / Remote File Inclusion openbmcs	服务端请求伪造	中危	6.8	—	PoC	2022/01/18
OpenBMCS 2.4 - Information Disclosure openbmcs	信息泄露	高危	7.5	—	PoC	2022/01/18
CVE-2022-0250 Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting redirection_for_contact_form_7	跨站脚本攻击	中危	6.1	1.6%	PoC	2022/01/17
CVE-2021-25067 Landing Page Builder < 1.4.9.6 - Cross-Site Scripting landing_page	跨站脚本攻击	中危	5.4	1.1%	PoC	2022/01/17
CVE-2021-25065 Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting smash_balloon_social_post_feed	跨站脚本攻击	中危	5.4	1.0%	PoC	2022/01/17
CVE-2021-24838 WordPress AnyComment <0.3.5 - Open Redirect anycomment	不安全的重定向	中危	6.1	2.2%	PoC	2022/01/17
CVE-2022-23178 Crestron Device - Credentials Disclosure hd-md4x2-4k-e_firmware	信息泄露	严重	9.8	75.2%	PoC	2022/01/15
CVE-2022-23134KEV Zabbix Setup Configuration Authentication Bypass Zabbix	身份验证绕过	中危	5.3	95.3%	PoC	2022/01/14
CVE-2022-23131KEVRCE Zabbix - SAML SSO Authentication Bypass Zabbix	身份验证绕过	严重	9.8	95.7%	PoC	2022/01/14
CVE-2021-45422 Reprise License Manager 14.2 - Cross-Site Scripting reprise_license_manager	跨站脚本攻击	中危	6.1	3.2%	PoC	2022/01/14
CVE-2021-42551 NetBiblio WebOPAC - Cross-Site Scripting netbiblio	跨站脚本攻击	中危	6.1	2.7%	PoC	2022/01/14
CVE-2021-41192 Redash Setup Configuration - Default Secrets Disclosure redash	信息泄露	中危	6.5	8.1%	PoC	2022/01/13
CVE-2021-28377 Joomla! ChronoForums 2.0.11 - Local File Inclusion chronoforums	文件包含	中危	5.3	8.4%	PoC	2022/01/13
CVE-2022-0087 Keystone 6 Login Page - Open Redirect and Cross-Site Scripting KeystoneJS	跨站脚本攻击	中危	6.1	2.6%	PoC	2022/01/12
CVE-2022-21907RCE CVE-2022-21907 Windows Server	远程代码执行	严重	9.8	92.8%	PoC	2022/01/11