VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-24300 WordPress WooCommerce <1.13.22 - Cross-Site Scripting WooCommerce	跨站脚本攻击	中危	6.1	10.6%	PoC	2021/05/24
CVE-2021-24298 WordPress Simple Giveaways <2.36.2 - Cross-Site Scripting simple_giveaways	跨站脚本攻击	中危	6.1	3.5%	PoC	2021/05/24
WordPress WP Statistics Plugin 13.0.7 - SQL Injection wp_statistics	SQL注入	高危	—	—	PoC	2021/05/21
CVE-2020-35580 SearchBlox <9.2.2 - Local File Inclusion searchblox	文件包含	高危	7.5	14.0%	PoC	2021/05/21
CVE-2021-29625 Adminer <=4.8.0 - Cross-Site Scripting adminer	跨站脚本攻击	中危	6.1	9.6%	PoC	2021/05/20
CVE-2021-29622 Prometheus - Open Redirect prometheus	不安全的重定向	中危	6.1	19.6%	PoC	2021/05/20
CVE-2020-36365 Smartstore <4.1.0 - Open Redirect smartstorenet	不安全的重定向	中危	6.1	3.0%	PoC	2021/05/20
CVE-2021-32305RCE Websvn <2.6.1 - Remote Code Execution WebSVN	远程代码执行	严重	9.8	87.3%	PoC	2021/05/19
CVE-2021-24288 WordPress AcyMailing <7.5.0 - Open Redirect acymailing	不安全的重定向	中危	6.1	1.9%	PoC	2021/05/18
CVE-2021-24295 Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection cleantalk-spam-protect	SQL注入	高危	7.5	4.7%	PoC	2021/05/17
AntSword Backdoor Detection	后门	严重	10.0	—	PoC	2021/05/17
CVE-2021-32819RCE Nodejs Squirrelly - Remote Code Execution squirrelly	远程代码执行	高危	8.8	58.3%	PoC	2021/05/17
CVE-2021-32618 Python Flask-Security - Open Redirect flask-security	不安全的重定向	中危	6.1	2.8%	PoC	2021/05/17
CVE-2021-29505RCE XStream <1.4.17 - Remote Code Execution xstream	远程代码执行	高危	8.8	77.2%	PoC	2021/05/16
CVE-2021-32820 Express-handlebars - Local File Inclusion express_handlebars	文件包含	高危	8.6	15.7%	PoC	2021/05/15
CVE-2021-24291 WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting photo_gallery	跨站脚本攻击	中危	6.1	14.5%	PoC	2021/05/14
CVE-2021-24287 WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting select-all-categories-and-taxonomies-change-checkbox-to-radio-buttons	跨站脚本攻击	中危	6.1	10.4%	PoC	2021/05/14
CVE-2021-24286 WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting redirect_404_to_parent	跨站脚本攻击	中危	6.1	12.7%	PoC	2021/05/14
CVE-2021-24285 WordPress Car Seller - Auto Classifieds Script - SQL Injection cars-seller-auto-classifieds-script	SQL注入	严重	9.8	14.7%	PoC	2021/05/14
CVE-2021-24284 WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File Upload kaswara	远程代码执行	严重	9.8	42.1%	PoC	2021/05/14