VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2025-44148 MailEnable Mail Service < v10 - Cross-Site Scripting MailEnable	跨站脚本攻击	严重	9.8	54.7%	PoC	2025/06/03
CVE-2025-5086RCE Dassault Systèmes DELMIA Apriso (up to 2025) - Insecure Deserialization DELMIA-Apriso	远程代码执行	严重	9.0	96.9%	PoC	2025/06/02
CVE-2025-49113 Roundcube Webmail - Remote Code Execution webmail	远程代码执行	严重	9.9	98.9%	PoC	2025/06/02
CVE-2024-7097 WSO2 User Registration - Arbitrary Account Creation WSO2-Management-Console	访问控制错误	中危	4.3	0.66%	PoC	2025/05/30
CVE-2025-4009RCE Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection Evertz	远程代码执行	严重	9.3	71.4%	PoC	2025/05/28
CVE-2025-5287 Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection posts-like-dislike	SQL注入	高危	7.5	2.4%	PoC	2025/05/28
CVE-2025-48827 vBulletin 5.0.0-6.0.3 - Authentication Bypass VBulletin	身份验证绕过	严重	9.8	75.8%	PoC	2025/05/27
CVE-2025-48828RCE vBulletin replaceAdTemplate - Remote Code Execution VBulletin	远程代码执行	高危	8.1	57.6%	PoC	2025/05/27
CVE-2025-47539 Eventin <= 4.0.26 - Privilege Escalation eventin	不正确的权限分配	严重	9.8	27.9%	PoC	2025/05/23
CVE-2025-47646 PSW Front-end Login & Registration 1.13 - Weak Password Recovery psw-login-and-registration	弱口令	严重	9.8	24.9%	PoC	2025/05/23
CVE-2025-32813 Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request netmri	远程代码执行	高危	7.2	43.9%	PoC	2025/05/22
CVE-2025-32815 NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentials netmri	身份验证绕过	中危	6.5	39.7%	PoC	2025/05/22
CVE-2025-32814 NetMRI Unauthenticated SQL Injection via skipjackUsername netmri	SQL注入	严重	9.8	36.4%	PoC	2025/05/22
CVE-2025-4123 Grafana - XSS / Open Redirect / SSRF via Client Path Traversal Grafana	跨站脚本攻击	高危	7.6	97.0%	PoC	2025/05/22
CVE-2025-34026 Versa Concerto Actuator Endpoint - Authentication Bypass concerto	身份验证绕过	严重	9.2	81.9%	PoC	2025/05/21
CVE-2025-34027 Versa Concerto API Path Based - Authentication Bypass concerto	身份验证绕过	严重	10.0	45.2%	PoC	2025/05/21
CVE-2025-46822 Java-springboot-codebase 1.1 - Arbitrary File Read SpringBoot	路径穿越	高危	7.7	4.0%	PoC	2025/05/21
CVE-2025-4008RCE MeteoBridge <= 6.1 - Remote Code Execution MeteoBridge	远程代码执行	高危	8.7	93.7%	PoC	2025/05/21
CVE-2025-4322 Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover motors	未授权访问	严重	9.8	15.5%	PoC	2025/05/20
CVE-2024-33939 Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference masteriyo	未授权访问	中危	5.3	0.93%	PoC	2025/05/19