VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
Mongo Express - Unauthenticated Access mongo-express	未授权访问	高危	—	—	PoC	2020/01/06
CVE-2020-5192 Hospital Management System 4.0 - SQL Injection hospital_management_system	SQL注入	高危	8.8	23.5%	PoC	2020/01/06
CVE-2020-5191 PHPGurukul Hospital Management System - Cross-Site Scripting hospital_management_system	跨站脚本攻击	中危	6.1	6.2%	PoC	2020/01/06
CVE-2014-8516RCE CVE-2014-8516	文件上传	严重	9.8	81.7%	PoC	2020/01/03
TP-Link WDR740ND & WDR740N Backdoor RCE WDR740ND WDR740N	后门	严重	—	—	PoC	2020/01/01
IBM InfoPrint 4247-Z03 Impact Matrix Printer - Local File Inclusion infoprint	文件包含	高危	7.5	—	PoC	2020/01/01
CVE-2019-20176 Pure-FTPd < 1.0.50 - DoS via Resource Exhaustion pure-ftpd	远程代码执行	高危	7.5	4.4%	PoC	2019/12/31
CVE-2019-17621KEVRCE CVE-2019-17621	远程代码执行	严重	9.8	90.6%	PoC	2019/12/30
CVE-2019-20141 WordPress Laborator Neon Theme 2.0 - Cross-Site Scripting neon	跨站脚本攻击	中危	6.1	5.0%	PoC	2019/12/30
CVE-2019-20085KEV TVT NVMS 1000 - Local File Inclusion nvms-1000_firmware	文件包含	高危	7.5	96.1%	PoC	2019/12/30
CVE-2019-17558KEV Apache Solr <=8.3.1 - Remote Code Execution Solr	远程代码执行	高危	7.5	98.6%	PoC	2019/12/30
CVE-2013-4982 AVTECH DVR - Login Verification Code Bypass Avtech-视频监控	身份验证绕过	严重	9.8	13.1%	PoC	2019/12/27
Laravel Debug Info Leak framework	安全配置错误	中危	6.5	—	PoC	2019/12/27
CVE-2019-19781KEV Citrix ADC and Gateway - Directory Traversal Citrix-NetScaler Citrix-ADC	文件包含	严重	9.8	100.0%	PoC	2019/12/27
CVE-2014-4592 WP Planet <= 0.1 - Cross-Site Scripting wp-planet	跨站脚本攻击	中危	6.1	4.0%	PoC	2019/12/27
CVE-2014-4558 WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting swipehq-payment-gateway-woocommerce	跨站脚本攻击	中危	6.1	4.2%	PoC	2019/12/27
CVE-2014-4550 Shortcode Ninja <= 1.4 - Cross-Site Scripting ninja	跨站脚本攻击	中危	6.1	3.9%	PoC	2019/12/27
CVE-2014-4544 Podcast Channels < 0.28 - Cross-Site Scripting podcast_channels	跨站脚本攻击	中危	6.1	3.8%	PoC	2019/12/27
CVE-2014-4539 Movies <= 0.6 - Cross-Site Scripting movies	跨站脚本攻击	中危	6.1	4.0%	PoC	2019/12/27
CVE-2014-4536 Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting infusionsoft_gravity_forms	跨站脚本攻击	中危	6.1	3.9%	PoC	2019/12/27