组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| CVE-2017-17090 | 不安全的输入验证 | 高危 | 7.5 | 82.2% | PoC | ||
| CVE-2017-13872 | 身份验证绕过 | 高危 | 8.1 | 36.8% | PoC | ||
| WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 3.4% | PoC | ||
| FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 5.4 | 3.7% | PoC | ||
| WordPress Emag Marketplace Connector 1.0 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 5.1% | PoC | ||
| CVE-2017-16944 | 远程代码执行 | 高危 | 7.5 | 63.4% | PoC | ||
| CVE-2017-16943 | 使用后释放 | 严重 | 9.8 | 47.1% | PoC | ||
| Laravel <5.5.21 - Information Disclosure | 信息泄露 | 高危 | 7.5 | 86.9% | PoC | ||
| Nextjs <2.4.1 - Local File Inclusion | 文件包含 | 高危 | 7.5 | 14.1% | PoC | ||
| WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion | 文件包含 | 高危 | 7.5 | 59.1% | PoC | ||
| Phoenix Framework - Open Redirect | 不安全的重定向 | 中危 | 6.1 | 2.4% | PoC | ||
| CVE-2017-11882 | 缓冲区溢出 | 高危 | 7.8 | 99.9% | PoC | ||
| CVE-2017-11873 | 缓冲区溢出 | 高危 | 7.5 | 69.8% | PoC | ||
| CVE-2017-11870 | 缓冲区溢出 | 高危 | 7.5 | 59.6% | PoC | ||
| CVE-2017-11861 | 缓冲区溢出 | 高危 | 7.5 | 64.2% | PoC | ||
| CVE-2017-11841 | 缓冲区溢出 | 高危 | 7.5 | 59.6% | PoC | ||
| CVE-2017-11840 | 缓冲区溢出 | 高危 | 7.5 | 59.6% | PoC | ||
| CVE-2017-11839 | 缓冲区溢出 | 高危 | 7.5 | 62.4% | PoC | ||
| CVE-2017-12636 | 远程代码执行 | 高危 | 7.2 | 90.6% | PoC | ||
| Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation | 远程权限提升 | 严重 | 9.8 | 99.8% | PoC |