组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| Jolokia 1.3.7 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 24.7% | PoC | ||
| CVE-2018-8065 | 不安全的输入验证 | 高危 | 7.5 | 75.9% | PoC | ||
| Tugboat Configuration File Exposure | 信息泄露 | 严重 | — | — | PoC | ||
| osTicket < 1.10.2 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 2.0% | PoC | ||
| osTicket < 1.10.2 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 2.4% | PoC | ||
| CVE-2018-7890 | 远程代码执行 | 严重 | 9.8 | 78.8% | PoC | ||
| D-Link - Unauthenticated Remote Code Execution | 远程代码执行 | 严重 | 9.8 | 96.7% | PoC | ||
| CVE-2018-7665 | 文件上传 | 严重 | 9.8 | 15.9% | PoC | ||
| CVE-2018-1000115 | 远程代码执行 | 高危 | 7.5 | 88.1% | PoC | ||
| CVE-2017-17428 | 文件读取 | 中危 | 5.9 | 14.6% | PoC | ||
| CouchCMS <= 2.0 - Path Disclosure | 路径穿越 | 中危 | 5.3 | 47.1% | PoC | ||
| YzmCMS v3.6 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 7.9% | PoC | ||
| CVE-2018-1058 | 不安全的输入验证 | 高危 | 8.8 | 13.1% | PoC | ||
| CVE-2018-7584 | 缓冲区溢出 | 严重 | 9.8 | 87.3% | PoC | ||
| CVE-2018-7573 | 缓冲区溢出 | 严重 | 9.8 | 69.2% | PoC | ||
| AxxonSoft Axxon Next - Local File Inclusion | 文件包含 | 高危 | 7.5 | 10.2% | PoC | ||
| uWSGI PHP Plugin Local File Inclusion | 文件包含 | 高危 | 7.5 | 69.4% | PoC | ||
| osTicket < 1.10.2 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 2.4% | PoC | ||
| Joomla! Component PrayerCenter 3.0.2 - SQL Injection | SQL注入 | 严重 | 9.8 | 57.8% | PoC | ||
| Seagate BlackArmor NAS - Command Injection | 远程代码执行 | 严重 | 9.8 | 51.0% | PoC |