CloudMap
漏洞情报库
漏洞库
厂商
产品
风险排行
开发者中心
开始检索
↗
VULNERABILITY INTELLIGENCE
漏洞情报库
组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
验证信息保护
仅展示 PoC 是否收录
不公开内容、路径和下载地址
⌕
/
搜索漏洞
10,858
条匹配记录
PoC
绿色表示已收录,灰色表示暂无
漏洞与影响对象
漏洞类型
风险等级
CVSS
EPSS
PoC 状态
披露时间
CVE-2025-34032
Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting
Moodle
跨站脚本攻击
中危
5.1
0.78%
PoC
2025/06/24
CVE-2025-34031
Moodle Jmol Filter 6.1 - Local File Inclusion
Moodle
信息泄露
高危
8.7
3.1%
PoC
2025/06/24
CVE-2025-6403
Code-Projects School Fees Payment System 1.0 - SQL Injection
school_fees_payment_system
SQL注入
中危
6.9
2.0%
PoC
2025/06/21
CVE-2025-52488
DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure
DotNetNuke
信息泄露
高危
8.6
35.8%
PoC
2025/06/21
CVE-2025-6216
Allegra - Authentication Bypass via Predictable Password Reset Token
allegra
身份验证绕过
严重
9.8
47.8%
PoC
2025/06/21
CVE-2025-25037
Aquatronica Controller System <= 5.1.6 - Information Disclosure
aquatronica-controller
信息泄露
严重
9.3
1.6%
PoC
2025/06/20
CVE-2025-34023
Karel IP Phone IP1211 Web Management Panel - Local File Inclusion
karel_ip_phone
文件包含
高危
8.5
1.6%
PoC
2025/06/20
CVE-2025-25034
RCE
SugarCRM - Unauthenticated Remote Code Execution via PHP Object Injection
SugarCRM
未授权访问
严重
9.3
5.0%
PoC
2025/06/20
CVE-2025-49132
RCE
Pterodactyl Panel - Remote Code Execution
panel
远程代码执行
严重
10.0
54.5%
PoC
2025/06/20
CVE-2025-3515
Contact Form 7 Drag and Drop Multiple File Upload - Arbitrary File Upload
drag-and-drop-multiple-file-upload-contact-form-7
文件上传
严重
9.8
5.8%
PoC
2025/06/17
CVE-2025-34509
Sitecore Experience Manager (XM) and Experience Platform (XP) - Hardcoded Credentials
SiteCore
访问控制错误
高危
7.5
55.9%
PoC
2025/06/17
CVE-2025-5777
RCE
Citrix NetScaler Memory Disclosure - CitrixBleed 2
netscaler_gateway
缓冲区溢出
严重
9.3
100.0%
PoC
2025/06/17
CVE-2025-45985
RCE
Blink Router - Command Injection
B-Link-Router
远程代码执行
严重
9.8
6.9%
PoC
2025/06/13
CVE-2025-5301
ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting
onlyoffice
跨站脚本攻击
中危
6.1
62.4%
PoC
2025/06/12
CVE-2025-27505
GeoServer - Missing Authorization on REST API Index
GeoServer
远程代码执行
中危
5.3
1.2%
PoC
2025/06/10
CVE-2025-30220
GeoServer WFS - XXE Processing Vulnerability
GeoServer
XML外部实体引用
严重
9.9
42.3%
PoC
2025/06/10
CVE-2025-41646
RevPi Webstatus <= v2.4.5 - Authentication Bypass
revpi_status
身份验证绕过
严重
9.8
51.3%
PoC
2025/06/06
CVE-2025-5701
HyperComments <= 1.2.2 - Arbitrary Options Update
hypercomments
远程代码执行
严重
9.8
2.1%
PoC
2025/06/05
CVE-2025-5569
IdeaCMS <= 1.7 - SQL Injection
IdeaCMS
命令注入
中危
5.3
1.5%
PoC
2025/06/04
CVE-2025-45854
JEHC-BPM - Remote Code Execute
jehc-bpm
文件上传
严重
9.8
3.2%
PoC
2025/06/03
← 上一页
97 / 543
下一页 →