VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-44228 Elasticsearch 5 - Remote Code Execution (Apache Log4j) ElasticSearch	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-44228 Citrix XenApp - Remote Code Execution (Apache Log4j) XenApp	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-44228RCE Apache Code42 - Remote Code Execution (Apache Log4j) code42	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-44228RCE Cisco WebEx - Remote Code Execution (Apache Log4j) CISCO-WebEx	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-44228RCE Cisco CloudCenter Suite (Log4j) - Remote Code Execution cisco_cloudcenter_suite	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-44228RCE Cisco BroadWorks - Remote Code Execution (Apache Log4j) broadworks	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-44228RCE JamF Pro - Remote Code Execution (Apache Log4j) Jamf Pro	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-44228RCE Apache Solr 7+ - Remote Code Execution (Apache Log4j) Solr	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-44228RCE Apache OFBiz - JNDI Remote Code Execution (Apache Log4j) OFBiz	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-44228KEV Apache Log4j2 Remote Code Injection log4j	远程代码执行	严重	10.0	100.0%	PoC	2021/12/10
CVE-2021-20137 Gryphon Tower - Cross-Site Scripting gryphon_tower	跨站脚本攻击	中危	6.1	2.3%	PoC	2021/12/10
CVE-2021-44529KEV Ivanti EPM Cloud Services Appliance Code Injection ivanti_endpoint_manager	命令注入	严重	9.8	99.1%	PoC	2021/12/09
CVE-2021-43810 Admidio - Cross-Site Scripting admidio	跨站脚本攻击	中危	6.1	5.1%	PoC	2021/12/08
CVE-2021-43798KEV Grafana v8.x - Arbitrary File Read Grafana	文件包含	高危	7.5	88.5%	PoC	2021/12/08
CVE-2021-42567 Apereo CAS Cross-Site Scripting central_authentication_service	跨站脚本攻击	中危	6.1	8.2%	PoC	2021/12/08
CVE-2021-40859 Auerswald COMpact 5500R 7.8A and 8.0B Devices Backdoor compact_5500r_firmware	未授权访问	严重	9.8	72.0%	PoC	2021/12/08
CVE-2021-20038KEVRCE SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution sma_200_firmware	远程代码执行	严重	9.8	99.9%	PoC	2021/12/08
CVE-2021-44260 WAVLINK AC1200 - Information Disclosure wl-wn531g3_firmware	信息泄露	高危	7.5	6.4%	PoC	2021/12/07
CVE-2021-24943 Registrations for the Events Calendar < 2.7.6 - SQL Injection registrations_for_the_events_calendar	SQL注入	严重	9.8	7.3%	PoC	2021/12/07
CVE-2021-24931 WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection secure_copy_content_protection_and_content_locking	SQL注入	严重	9.8	78.8%	PoC	2021/12/07