VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2017-18496 Htaccess by BestWebSoft < 1.7.6 - Cross-Site Scripting htaccess	跨站脚本攻击	中危	6.1	1.4%	PoC	2019/08/13
CVE-2017-18494 Custom Search by BestWebSoft < 1.36 - Cross-Site Scripting custom_search	跨站脚本攻击	中危	6.1	1.4%	PoC	2019/08/13
CVE-2017-18493 Custom Admin Page by BestWebSoft < 0.1.2 - Cross-Site Scripting custom_admin_page	跨站脚本攻击	中危	6.1	1.4%	PoC	2019/08/13
CVE-2017-18492 Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting contact_form_to_db	跨站脚本攻击	中危	6.1	1.5%	PoC	2019/08/13
CVE-2017-18491 Contact Form by BestWebSoft < 4.0.6 - Cross-Site Scripting contact_form	跨站脚本攻击	中危	6.1	1.5%	PoC	2019/08/13
CVE-2017-18490 Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting contact_form_multi	跨站脚本攻击	中危	6.1	1.5%	PoC	2019/08/13
CVE-2017-18487 AdPush < 1.44 - Cross-Site Scripting google_adsense	跨站脚本攻击	中危	6.1	1.5%	PoC	2019/08/13
CVE-2019-14950 WP Live Chat Support <= 8.0.27 — Stored Cross-Site Scripting wp-live-chat-support	跨站脚本攻击	中危	6.1	1.2%	PoC	2019/08/12
CVE-2019-13462 Lansweeper Unauthenticated SQL Injection lansweeper	SQL注入	严重	9.1	11.3%	PoC	2019/08/12
CVE-2017-18505 BestWebSoft's Twitter < 2.55 - Cross-Site Scripting twitter_button	跨站脚本攻击	中危	6.1	1.7%	PoC	2019/08/12
CVE-2017-18502 Subscriber by BestWebSoft < 1.3.5 - Cross-Site Scripting subscriber	跨站脚本攻击	中危	6.1	1.7%	PoC	2019/08/12
CVE-2017-18501 Social Login by BestWebSoft < 0.2 - Cross-Site Scripting social_login	跨站脚本攻击	中危	6.1	1.4%	PoC	2019/08/12
CVE-2017-18500 Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting social_buttons_pack	跨站脚本攻击	中危	6.1	1.4%	PoC	2019/08/12
CVE-2019-12255RCE CVE-2019-12255 sonicos	缓冲区溢出	严重	9.8	75.3%	PoC	2019/08/09
CVE-2019-14312 Aptana Jaxer 1.0.3.4547 - Local File inclusion jaxer	文件包含	中危	6.5	20.6%	PoC	2019/08/09
CVE-2019-11581KEV Atlassian Jira Server-Side Template Injection jira	远程代码执行	严重	9.8	84.6%	PoC	2019/08/09
CVE-2019-13101 D-Link DIR-600M - Authentication Bypass DIR-600m	身份验证绕过	严重	9.8	67.1%	PoC	2019/08/08
CVE-2019-14750 osTicket < 1.12.1 - Cross-Site Scripting osTicket	跨站脚本攻击	中危	6.1	10.9%	PoC	2019/08/07
CVE-2019-14696 Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting open-school	跨站脚本攻击	中危	6.1	15.7%	PoC	2019/08/06
CVE-2019-0193KEV Apache Solr DataImportHandler <8.2.0 - Remote Code Execution Solr	远程代码执行	高危	7.2	83.5%	PoC	2019/08/01