VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
Open Akamai ARL - Cross-Site Scripting Akamai	跨站脚本攻击	高危	7.2	—	PoC	2021/08/11
CVE-2021-34640 WordPress Securimage-WP-Fixed <=3.5.4 - Cross-Site Scripting securimage-wp-fixed	跨站脚本攻击	中危	6.1	2.3%	PoC	2021/08/11
CVE-2021-24522 ProfilePress < 3.1.11 - Cross-Site Scripting profilepress	跨站脚本攻击	中危	6.1	1.6%	PoC	2021/08/09
CVE-2021-37573 Tiny Java Web Server - Cross-Site Scripting tiny_java_web_server	跨站脚本攻击	中危	6.1	3.4%	PoC	2021/08/09
CVE-2021-24499RCE WordPress Workreap - Remote Code Execution workreap	远程代码执行	严重	9.8	60.1%	PoC	2021/08/09
CVE-2021-24495 Wordpress Marmoset Viewer <1.9.3 - Cross-Site Scripting marmoset_viewer	跨站脚本攻击	中危	6.1	3.3%	PoC	2021/08/09
CVE-2021-20028KEV CVE-2021-20028	SQL注入	严重	9.8	30.1%	PoC	2021/08/04
RCE qdPM 9.2 - DB Credentials Exposure qdPM	信息泄露	高危	—	—	PoC	2021/08/04
CVE-2021-32804 CVE-2021-32804	文件包含	高危	8.2	15.1%	PoC	2021/08/03
CVE-2021-31630RCE CVE-2021-31630	远程代码执行	高危	8.8	27.1%	PoC	2021/08/03
CVE-2021-37833 Hotel Druid 3.0.2 - Cross-Site Scripting hoteldruid	跨站脚本攻击	中危	6.1	4.7%	PoC	2021/08/03
CVE-2021-35265 MaxSite CMS > V106 - Cross-Site Scripting MaxSite CMS	跨站脚本攻击	中危	6.1	3.4%	PoC	2021/08/03
CVE-2021-26085KEV Atlassian Confluence Server - Local File Inclusion Confluence	文件包含	中危	5.3	99.9%	PoC	2021/08/03
CVE-2021-37216 QSAN Storage Manager <3.3.3 - Cross-Site Scripting xn8024r_firmware	跨站脚本攻击	中危	6.1	3.2%	PoC	2021/08/02
CVE-2021-24498 WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting calendar_event_multi_view	跨站脚本攻击	中危	6.1	3.5%	PoC	2021/08/02
CVE-2021-24472 Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery qt-kentharadio	文件包含	严重	9.8	56.6%	PoC	2021/08/02
CVE-2021-20114 TCExam <= 14.8.1 - Sensitive Information Exposure TCExam	信息泄露	高危	7.5	6.0%	PoC	2021/07/30
Oracle Fatwire 6.3 - Path Traversal fatwire	路径穿越	高危	8.6	—	PoC	2021/07/29
CVE-2021-32789 WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection woocommerce_blocks	SQL注入	高危	7.5	17.2%	PoC	2021/07/26
CNVD-2021-43984RCE MPSec ISG1000 Security Gateway - Arbitrary File Download 迈普ISG1000安全网关	文件包含	高危	—	—	PoC	2021/07/24