VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-24215 Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation controlled_admin_access	访问控制错误	严重	9.8	8.7%	PoC	2021/04/12
CNVD-2021-26422RCE eYouMail - Remote Code Execution 亿邮-邮件服务	远程代码执行	严重	10.0	—	PoC	2021/04/10
CVE-2021-20021KEV SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation email_security	访问控制错误	严重	9.8	88.8%	PoC	2021/04/09
CVE-2021-28925RCE CVE-2021-28925	SQL注入	严重	9.8	4.8%	PoC	2021/04/08
CVE-2021-1473RCE CVE-2021-1473 CISCO-RV340 CISCO-RV345 CISCO-RV340W+2	远程代码执行	严重	5.3	64.4%	PoC	2021/04/08
CVE-2021-1472RCE Cisco Small Business RV Series - OS Command Injection rv340	远程代码执行	严重	9.8	72.0%	PoC	2021/04/08
CVE-2021-21425RCE CVE-2021-21425	身份验证绕过	严重	9.3	80.6%	PoC	2021/04/07
CVE-2021-30151 Sidekiq <=6.2.0 - Cross-Site Scripting sidekiq	跨站脚本攻击	中危	6.1	4.2%	PoC	2021/04/06
CVE-2021-24210 WordPress PhastPress <1.111 - Open Redirect phastpress	不安全的重定向	中危	6.1	3.1%	PoC	2021/04/06
CVE-2021-24176 WordPress JH 404 Logger <=1.1 - Cross-Site Scripting jh_404_logger	跨站脚本攻击	中危	5.4	2.0%	PoC	2021/04/06
CVE-2021-24169 WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting advanced_order_export	跨站脚本攻击	中危	6.1	10.3%	PoC	2021/04/06
CVE-2021-24165 WordPress Ninja Forms <3.4.34 - Open Redirect ninja_forms	不安全的重定向	中危	6.1	1.6%	PoC	2021/04/06
CVE-2021-24155RCE WordPress BackupGuard <1.6.0 - Authenticated Arbitrary File Upload backup_guard	远程代码执行	高危	7.2	84.1%	PoC	2021/04/06
CVE-2021-24150 WordPress Like Button Rating <2.6.32 - Server-Side Request Forgery likebtn-like-button	未授权访问	高危	7.5	4.3%	PoC	2021/04/06
CVE-2021-24212 WooCommerce Help Scout - Arbitrary File Upload woocommerce-help-scout	文件上传	严重	9.8	7.9%	PoC	2021/04/05
Mini Mouse 9.2.0 - Local File Inclusion minimouse	文件包含	高危	7.5	—	PoC	2021/04/05
CVE-2020-17453 WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting WSO2-Management-Console	跨站脚本攻击	中危	6.1	26.2%	PoC	2021/04/05
CNVD-2021-17369 Ruijie Smartweb Management System Password Information Disclosure SmartWeb	信息泄露	高危	8.3	—	PoC	2021/04/04
CVE-2021-3374 Rstudio Shiny Server <1.5.16 - Local File Inclusion shiny_server	文件包含	中危	5.3	14.4%	PoC	2021/04/03
CVE-2020-27600RCE CVE-2020-27600	远程代码执行	严重	9.8	13.9%	PoC	2021/04/02