VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-35211KEV SolarWinds Serv-U FTP - Remote Code Execution serv-u	远程代码执行	严重	9.0	91.2%	PoC	2021/07/14
CVE-2021-34523KEV CVE-2021-34523 Outlook	远程权限提升	严重	9.0	100.0%	PoC	2021/07/14
CVE-2021-33766KEV Microsoft Exchange - Authentication Bypass Microsoft Exchange Server	身份验证绕过	高危	7.3	98.2%	PoC	2021/07/14
CVE-2021-24442 Wordpress Polls Widget < 1.5.3 - SQL Injection polls-widget	SQL注入	严重	9.8	46.0%	PoC	2021/07/13
CVE-2021-34473KEVRCE Exchange Server - Remote Code Execution Microsoft Exchange Server	远程代码执行	严重	9.1	100.0%	PoC	2021/07/13
CVE-2021-24409 Prismatic < 2.8 - Cross-Site Scripting prismatic	跨站脚本攻击	中危	6.1	1.7%	PoC	2021/07/13
CVE-2020-26153 Event Espresso Core-Reg 4.10.7.p - Cross-Site Scripting event_espresso	跨站脚本攻击	中危	6.1	4.4%	PoC	2021/07/13
CVE-2021-35064 Kramer VIAware - Privilege Escalation and Remote Code Execution viaware	访问控制错误	严重	9.8	70.8%	PoC	2021/07/12
CVE-2021-33807 Cartadis Gespage 8.2.1 - Directory Traversal gespage	文件包含	高危	7.5	16.1%	PoC	2021/07/12
CNVD-2021-14536 Ruijie RG-UAC Unified Internet Behavior Management Audit System - Information Disclosure RG-UAC	信息泄露	高危	8.3	—	PoC	2021/07/12
CVE-2020-35987 Rukovoditel <= 2.7.2 - Cross-Site Scripting Rukovoditel	跨站脚本攻击	中危	5.4	1.1%	PoC	2021/07/10
CVE-2020-35986 Rukovoditel <= 2.7.2 - Cross Site Scripting Rukovoditel	跨站脚本攻击	中危	5.4	1.1%	PoC	2021/07/10
CVE-2020-35985 Rukovoditel <= 2.7.2 - Cross Site Scripting Rukovoditel	跨站脚本攻击	中危	5.4	1.1%	PoC	2021/07/10
CVE-2020-35984 Rukovoditel <= 2.7.2 - Cross Site Scripting Rukovoditel	跨站脚本攻击	中危	5.4	1.1%	PoC	2021/07/10
CVE-2021-30116KEV Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent vsa	信息泄露	严重	9.8	85.7%	PoC	2021/07/09
CVE-2021-30118RCE Kaseya VSA < 9.5.7 - Arbitrary File Upload to Remote Code Execution vsa	文件上传	严重	9.8	60.3%	PoC	2021/07/09
CVE-2021-22555KEVRCE CVE-2021-22555 linux_kernel	远程代码执行	高危	8.3	78.7%	PoC	2021/07/07
CVE-2021-34621 WordPress ProfilePress 3.0.0-3.1.3 - Admin User Creation Weakness profilepress	访问控制错误	严重	9.8	68.9%	PoC	2021/07/07
CVE-2021-33221 CommScope Ruckus IoT Controller - Information Disclosure ruckus_iot_controller	信息泄露	严重	9.8	56.1%	PoC	2021/07/07
CVE-2020-24148 Import XML & RSS Feeds WordPress Plugin <= 2.0.1 Server-Side Request Forgery import-xml-feed	服务端请求伪造	严重	9.1	14.7%	PoC	2021/07/07