CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
10,858条匹配记录
PoC绿色表示已收录,灰色表示暂无
漏洞与影响对象漏洞类型风险等级CVSSEPSSPoC 状态披露时间
Sendmail .forward File - Exposure
Sendmail
信息泄露低危——
PoC
2026/01/30
RCE
Laravel Terminal - Exposed
Laravel Terminal
远程代码执行高危——
PoC
2026/01/30
OpenLiteSpeed WebAdmin - Default Login
LiteSpeed-Web-Admin-Console
安全配置错误高危——
PoC
2026/01/30
JHipster Platform - Default Login
JHipster
安全配置错误高危——
PoC
2026/01/30
CVE-2020-9314
Oracle iPlanet Web Server 7.0.x - Image Injection
iPlanet-Web-Server
未分类中危—1.3%
PoC
2026/01/30
CVE-2020-16248
Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)
prometheusBlackbox Exporter
服务端请求伪造中危—2.7%
PoC
2026/01/30
CVE-2020-15081
PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory
PrestaShop
信息泄露低危—1.6%
PoC
2026/01/30
CVE-2020-9039
Couchbase Server - Broken Access Control
Couchbase
未授权访问严重—3.9%
PoC
2026/01/30
CVE-2024-56159
Astro - Information Disclosure
Astro
信息泄露中危—1.5%
PoC
2026/01/30
CVE-2024-6250
LOLLMS WebUI - Absolute Path Traversal
LOLLMS WebUI
路径穿越高危—1.9%
PoC
2026/01/30
CVE-2024-5333
WordPress Events Calendar 6.8.2.1 - Information Disclosure
the_events_calendar
信息泄露中危—1.1%
PoC
2026/01/30
CVE-2024-23055
Plone Docker - Host Header Injection
普朗
跨站脚本攻击中危—0.92%
PoC
2026/01/30
CVE-2024-29137
WordPress Tourfic Plugin <= 2.11.7 - Cross-Site Scripting
tourfic
跨站脚本攻击高危—0.62%
PoC
2026/01/30
CVE-2019-14206
Nevma Adaptive Images - Arbitrary File Deletion
adaptive_images
不正确的权限分配高危—4.7%
PoC
2026/01/30
CVE-2019-13608
Citrix StoreFront Server - XML External Entity
citrix_storefront
XML外部实体引用高危—30.0%
PoC
2026/01/30
CVE-2019-12935
Shopware < 5.5.8 - Cross-Site Scripting
Shopware
跨站脚本攻击高危—2.7%
PoC
2026/01/30
CVE-2025-52694
Advantech WISE-IoTSuite/SaaS - SQL Injection
advantech_WISE
SQL注入严重—40.4%
PoC
2026/01/30
CVE-2025-11580
PowerJob List - Authorization Bypass
powerjob
身份验证绕过中危—1.1%
PoC
2026/01/30
CVE-2025-3472
Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution
ocean_extra
未授权访问中危—2.0%
PoC
2026/01/30
CVE-2025-28242
DAEnetIP4 METO v1.25 - Session Hijacking
DAEnetIP4
身份验证绕过高危—1.8%
PoC
2026/01/30
← 上一页50 / 543下一页 →