VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-44790RCE CVE-2021-44790 Apache HTTP Server	远程代码执行	严重	9.8	96.8%	PoC	2021/12/20
CVE-2021-45105 CVE-2021-45105	不安全的输入验证	中危	5.9	100.0%	PoC	2021/12/18
CVE-2021-45092 Thinfinity Iframe Injection thinfinity_virtualui	Iframe注入	严重	9.8	40.6%	PoC	2021/12/16
CVE-2021-36888 WordPress Image Hover Ultimate - Unauthenticated Settings Update image-hover-effects-ultimate	未授权访问	严重	9.8	6.5%	PoC	2021/12/15
CVE-2021-27858 FatPipe WARP/IPVPN/MPVPN - Authorization Bypass warp_firmware	远程代码执行	中危	5.3	2.8%	PoC	2021/12/15
CVE-2021-27856 FatPipe WARP/IPVPN/MPVPN - Backdoor Account fatpipeinc	安全配置错误	严重	9.8	5.5%	PoC	2021/12/15
CVE-2021-43831RCE Gradio < 2.5.0 - Arbitrary File Read gradio	文件包含	高危	7.7	3.9%	PoC	2021/12/15
CVE-2021-45406 Apache Log4j2 - Remote Code Injection log4j	远程代码执行	严重	9.0	1.8%	PoC	2021/12/15
CVE-2017-5645RCE Apache Log4j Server - Deserialization Command Execution log4j	远程代码执行	严重	9.8	89.8%	PoC	2021/12/15
CVE-2021-45046KEV Apache Log4j2 - Remote Code Injection log4j	远程代码执行	严重	9.0	100.0%	PoC	2021/12/15
CVE-2021-45043 HD-Network Realtime Monitoring System 2.0 - Local File Inclusion hd-network_real-time_monitoring_system	文件包含	高危	7.5	33.1%	PoC	2021/12/15
CVE-2021-42063 SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting knowledge_warehouse	跨站脚本攻击	中危	6.1	23.4%	PoC	2021/12/15
CVE-2021-39312 WordPress True Ranker <2.2.4 - Local File Inclusion true_ranker	文件包含	高危	7.5	77.9%	PoC	2021/12/15
CVE-2021-36450 Verint Workforce Optimization 15.2.8.10048 - Cross-Site Scripting workforce_optimization	跨站脚本攻击	中危	6.1	64.3%	PoC	2021/12/15
CVE-2021-4073 RegistrationMagic <= 5.0.1.7 - Authentication Bypass registrationmagic	身份验证绕过	高危	8.1	6.8%	PoC	2021/12/14
CVE-2021-3831 Gnuboard 5 - Cross-Site Scripting Gnuboard	跨站脚本攻击	中危	6.1	1.8%	PoC	2021/12/14
CVE-2021-4104RCE CVE-2021-4104 Fedora Weblogic Server jboss_enterprise_application_platform+2	远程代码执行	高危	7.5	80.6%	PoC	2021/12/14
CVE-2021-44910 SpringBlade - Information Leakage springblade	信息泄露	高危	—	—	PoC	2021/12/13
CVE-2021-44848 Thinfinity VirtualUI User Enumeration thinfinity_virtualui	信息泄露	中危	5.3	23.0%	PoC	2021/12/13
CVE-2021-44152 Reprise License Manager 14.2 - Authentication Bypass reprise_license_manager	身份验证绕过	严重	9.8	58.6%	PoC	2021/12/13