VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-39141 XStream 1.4.18 - Remote Code Execution xstream	远程代码执行	高危	8.5	16.1%	PoC	2021/08/24
CVE-2021-37538 PrestaShop SmartBlog <4.0.6 - SQL Injection smartblog	SQL注入	严重	9.8	74.5%	PoC	2021/08/24
CVE-2021-24554 WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection paytm-pay	SQL注入	高危	7.2	6.5%	PoC	2021/08/23
CVE-2021-36748 PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection PrestaShop	SQL注入	高危	7.5	15.4%	PoC	2021/08/21
Wix Takeover Detection Wix	未分类	高危	—	—	PoC	2021/08/20
CVE-2021-38702 Cyberoam NetGenie Cross-Site Scripting netgenie_c0101b1-20141120-ng11vo_firmware	跨站脚本攻击	中危	6.1	6.7%	PoC	2021/08/18
CVE-2021-20792 WordPress Quiz and Survey Master <7.1.14 - Cross-Site Scripting quiz_and_survey_master	跨站脚本攻击	中危	6.1	2.9%	PoC	2021/08/18
CVE-2021-38156 Nagios XI < 5.8.6 - Cross-Site Scripting Nagios-XI	跨站脚本攻击	中危	5.4	92.9%	PoC	2021/08/17
CVE-2021-34643 WordPress Skaut Bazar <1.3.3 - Cross-Site Scripting skaut-bazar	跨站脚本攻击	中危	6.1	2.4%	PoC	2021/08/17
CVE-2021-24488 WordPress Post Grid <2.1.8 - Cross-Site Scripting post_grid	跨站脚本攻击	中危	6.1	11.2%	PoC	2021/08/17
CVE-2021-35392 CVE-2021-35392 realtek_jungle_sdk	远程代码执行	高危	7.5	83.2%	PoC	2021/08/16
CVE-2021-35394KEVRCE RealTek AP Router SDK - Arbitrary Command Injection realtek_jungle_sdk	远程代码执行	严重	9.8	99.9%	PoC	2021/08/16
CVE-2021-35395KEVRCE RealTek Jungle SDK - Arbitrary Command Injection realtek_jungle_sdk	远程代码执行	严重	9.8	98.1%	PoC	2021/08/16
Woocommerce - PDF Invoice Exposure WooCommerce	信息泄露	中危	5.3	—	PoC	2021/08/16
COMMAX Biometric Access Control System 1.0.0 - Authentication Bypass	身份验证绕过	严重	—	—	PoC	2021/08/16
Announcekit Takeover Detection AnnounceKit	未分类	高危	—	—	PoC	2021/08/16
CVE-2021-38751 ExponentCMS <= 2.6 - Host Header Injection exponentcms	HTML注入	中危	4.3	2.5%	PoC	2021/08/16
CVE-2021-26086KEV Atlassian Jira Limited - Local File Inclusion jira	文件包含	中危	5.3	100.0%	PoC	2021/08/16
CVE-2021-36380KEVRCE Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection sureline	远程代码执行	严重	9.8	97.8%	PoC	2021/08/14
CVE-2021-37343 CVE-2021-37343 Nagios-XI	文件包含	高危	8.8	23.8%	PoC	2021/08/13