组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 漏洞类型 | 风险等级 | CVSS | EPSS | PoC 状态 | 披露时间 | |
|---|---|---|---|---|---|---|---|
| CVE-2017-11811 | 缓冲区溢出 | 高危 | 7.5 | 65.5% | PoC | ||
| CVE-2017-11809 | 缓冲区溢出 | 高危 | 7.5 | 68.0% | PoC | ||
| CVE-2017-11802 | 缓冲区溢出 | 高危 | 7.5 | 69.2% | PoC | ||
| CVE-2017-11799 | 缓冲区溢出 | 高危 | 7.5 | 63.7% | PoC | ||
| CVE-2017-11774 | 缓冲区溢出 | 高危 | 7.8 | 59.6% | PoC | ||
| Dreambox WebControl 2.0.0 - Cross-Site Scripting | 跨站脚本攻击 | 中危 | 6.1 | 6.1% | PoC | ||
| CVE-2017-5791 | 身份验证绕过 | 严重 | 9.8 | 68.9% | PoC | ||
| CVE-2017-14980 | 缓冲区溢出 | 严重 | 9.8 | 22.3% | PoC | ||
| CVE-2015-2856 | 文件包含 | 高危 | 7.5 | 56.6% | PoC | ||
RCE IIS-PUT 任意文件上传 | 文件上传 | 严重 | — | — | PoC | ||
| CVE-2017-1000119 | 文件上传 | 高危 | 7.2 | 61.3% | PoC | ||
| CVE-2017-1000117 | 开放重定向 | 高危 | 8.8 | 77.8% | PoC | ||
| CVE-2017-1000112 | 远程代码执行 | 高危 | 7.0 | 20.8% | PoC | ||
| Apache Tomcat - Remote Code Execution | 远程代码执行 | 高危 | 8.1 | 100.0% | PoC | ||
| Jboss Application Server - Remote Code Execution | 远程代码执行 | 严重 | 9.8 | 90.7% | PoC | ||
| CVE-2017-14492 | 缓冲区溢出 | 严重 | 9.8 | 94.5% | PoC | ||
| CVE-2017-13704 | 不安全的输入验证 | 高危 | 7.5 | 65.4% | PoC | ||
| PhpColl 2.5.1 Arbitrary File Upload | 远程代码执行 | 高危 | 8.8 | 96.4% | PoC | ||
| Intelbras WRN 150 - Authentication Bypass | 身份验证绕过 | 严重 | 9.8 | 60.9% | PoC | ||
| CVE-2015-8249 | 文件上传 | 严重 | 9.8 | 73.6% | PoC |