VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-24278 WordPress Contact Form 7 <2.3.4 - Arbitrary Nonce Generation redirection_for_contact_form_7	访问控制错误	高危	7.5	7.4%	PoC	2021/05/14
CVE-2021-28799KEVRCE QNAP HBS 3 - Broken Access Control QNAP-NAS	未授权访问	严重	10.0	78.3%	PoC	2021/05/13
CVE-2021-30213 Knowage Suite 7.3 - Cross-Site Scripting knowage	跨站脚本攻击	中危	6.1	2.7%	PoC	2021/05/13
CVE-2020-36289 Jira Server and Data Center - Information Disclosure jira	信息泄露	中危	5.3	99.2%	PoC	2021/05/12
CVE-2021-31207KEVRCE CVE-2021-31207 Outlook	文件上传	中危	6.6	99.8%	PoC	2021/05/11
CVE-2021-31166KEVRCE CVE-2021-31166	使用后释放	严重	9.8	99.9%	PoC	2021/05/11
CVE-2021-31537 SIS Informatik REWE GO SP17 <7.7 - Cross-Site Scripting sis-rewe_go	跨站脚本攻击	中危	6.1	7.4%	PoC	2021/05/11
CVE-2021-31195 Microsoft Exchange Server - Cross-Site Scripting Microsoft Exchange Server	跨站脚本攻击	中危	6.5	73.7%	PoC	2021/05/11
PHP Timeclock <=1.04 - Cross-Site Scripting PHP Timeclock	跨站脚本攻击	高危	7.2	—	PoC	2021/05/10
CVE-2020-23575 Kyocera Printer d-COPIA253MF - Directory Traversal Kyocera-Printer	文件包含	高危	7.5	37.0%	PoC	2021/05/10
CVE-2021-31755KEVRCE Tenda Router AC11 - Remote Command Injection ac11_firmware	远程代码执行	严重	9.8	86.5%	PoC	2021/05/08
CVE-2021-29203RCE HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass edgeline_infrastructure_manager	身份验证绕过	严重	9.8	68.3%	PoC	2021/05/07
CVE-2021-28151RCE Hongdian H8922 3.0.5 - Remote Command Injection h8922	远程代码执行	高危	8.8	27.9%	PoC	2021/05/07
CVE-2021-28150 Hongdian H8922 3.0.5 - Information Disclosure h8922	信息泄露	中危	5.5	2.8%	PoC	2021/05/07
CVE-2021-28149 Hongdian H8922 3.0.5 Devices - Local File Inclusion h8922	文件包含	中危	6.5	15.9%	PoC	2021/05/07
CVE-2021-32030KEV ASUS GT-AC2900 - Authentication Bypass gt-ac2900_firmware	身份验证绕过	严重	9.8	99.4%	PoC	2021/05/06
CVE-2021-29490 Jellyfin 10.7.2 - Server Side Request Forgery Jellyfin	服务端请求伪造	中危	5.8	69.9%	PoC	2021/05/06
CVE-2021-24276 WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting contact_form	跨站脚本攻击	中危	6.1	16.0%	PoC	2021/05/06
CVE-2021-24275 Popup by Supsystic <1.10.5 - Cross-Site scripting popup	跨站脚本攻击	中危	6.1	18.2%	PoC	2021/05/06
CVE-2021-24274 WordPress Supsystic Ultimate Maps <1.2.5 - Cross-Site Scripting ultimate_maps	跨站脚本攻击	中危	6.1	17.6%	PoC	2021/05/06