VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2021-28918 Netmask NPM Package - Server-Side Request Forgery netmask	文件包含	严重	9.1	16.7%	PoC	2021/04/02
CVE-2021-26072 Atlassian Confluence < 5.8.6 - Server-Side Request Forgery Confluence	服务端请求伪造	中危	4.3	41.2%	PoC	2021/04/01
CVE-2021-28164 Eclipse Jetty - Information Disclosure Jetty	信息泄露	中危	5.3	82.4%	PoC	2021/04/01
CVE-2021-21975KEVRCE vRealize Operations Manager API - Server-Side Request Forgery cloud_foundation	服务端请求伪造	高危	7.5	78.0%	PoC	2021/04/01
CVE-2021-21983 CVE-2021-21983 cloud_foundation	文件上传	中危	6.5	68.8%	PoC	2021/03/31
CVE-2020-24550 EpiServer Find <13.2.7 - Open Redirect find	不安全的重定向	中危	6.1	4.7%	PoC	2021/03/31
CVE-2021-25161 Aruba Instant Access Point (IAP) - Cross-Site Scripting aruba_instant	跨站脚本攻击	中危	6.1	16.4%	PoC	2021/03/30
CVE-2021-26919RCE CVE-2021-26919 Druid	远程代码执行	高危	8.8	35.2%	PoC	2021/03/30
CVE-2021-28937 Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure wireless-n_wifi_repeater	信息泄露	高危	7.5	4.2%	PoC	2021/03/30
CVE-2020-24391RCE Mongo-Express - Remote Code Execution mongo-express	远程代码执行	严重	9.8	74.5%	PoC	2021/03/30
CVE-2021-21389 BuddyPress REST API <7.2.1 - Privilege Escalation/Remote Code Execution buddypress	远程代码执行	高危	8.8	13.5%	PoC	2021/03/27
CVE-2020-23517 Aryanic HighMail (High CMS) - Cross-Site Scripting high_cms	跨站脚本攻击	中危	6.1	7.1%	PoC	2021/03/26
CVE-2020-19625RCE Gridx 1.3 - Remote Code Execution gridx	远程代码执行	严重	9.8	13.1%	PoC	2021/03/26
CVE-2021-29156 LDAP Injection In OpenAM openam	LDAP注入	高危	7.5	76.8%	PoC	2021/03/25
CVE-2021-27320 Doctor Appointment System 1.0 - SQL Injection doctor_appointment_system	SQL注入	高危	7.5	9.3%	PoC	2021/03/25
CVE-2021-27319 Doctor Appointment System 1.0 - SQL Injection doctor_appointment_system	SQL注入	高危	7.5	7.8%	PoC	2021/03/25
CVE-2021-27316 Doctor Appointment System 1.0 - SQL Injection doctor_appointment_system	SQL注入	高危	7.5	7.8%	PoC	2021/03/25
CVE-2021-27315 Doctor Appointment System 1.0 - SQL Injection doctor_appointment_system	SQL注入	高危	7.5	7.8%	PoC	2021/03/25
CNVD-2021-15824 EmpireCMS DOM Cross Site-Scripting Empire-CMS	跨站脚本攻击	高危	7.2	—	PoC	2021/03/25
CVE-2021-22192RCE CVE-2021-22192 GitLab	远程代码执行	高危	9.9	13.1%	PoC	2021/03/24