云贵安服 | 漏洞情报播报
| 360 网络安全响应中心 [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| ae7c59c867fc0e5ab0dc983ab83cee1b | CVE-2022-41678 | 2023-12-01 09:30:27 | CVE-2022-41678：Apache ActiveMQ Jolokia 远程代码执行漏洞通告 | 详情 |
| a060c3adcbdca0e417cf29f253ca4dc1 | CVE-2023-6345 | 2023-11-29 08:48:43 | CVE-2023-6345：Google Chrome skia整数溢出漏洞通告 | 详情 |
| 31921e8c8c9a26dac03600a684a9184b | 2023-11-27 07:37:27 | 安全事件周报 2023-11-20 第47周 | 详情 | |
| c91600e01f1187f5553b8dca3089981d | CVE-2023-4357 | 2023-11-20 09:30:56 | CVE-2023-4357：Google Chrome 信息泄露漏洞通告 | 详情 |
| dcf75cd8fcc36a3f828105e165c8e9af | 2023-11-20 07:20:33 | 安全事件周报 2023-11-13 第46周 | 详情 | |
| 1538fa4bfe292099cf32080fadf75dbf | 2023-11-15 08:53:51 | 2023-11 补丁日: 微软多个漏洞安全更新通告 | 详情 | |
| e0eeac094199a36e77b80367b0494ff0 | 2023-11-13 09:06:47 | 安全事件周报 2023-11-06 第45周 | 详情 | |
| 3096bc681d3e0c67eded8028e892f0d5 | 2023-11-06 08:12:02 | 安全事件周报 2023-10-30 第44周 | 详情 | |
| 7e45372e32f455cf4cd7312705c29c89 | CVE-2023-22518 | 2023-11-01 10:32:11 | CVE-2023-22518：Atlassian Confluence身份认证绕过漏洞通告 | 详情 |
| 6cd63c10cef8a5ece122fe2abe6617a3 | 2023-10-30 07:11:16 | 安全事件周报 2023-10-23 第43周 | 详情 | |
| 4d4d26864832b4006010a17f8b7fdc1e | CVE-2023-46747 | 2023-10-27 08:01:58 | CVE-2023-46747：F5 BIG-IP 远程代码执行漏洞通告 | 详情 |
| f88263d5c0f631fc975fc8307de44277 | CVE-2023-34051 | 2023-10-25 09:06:59 | CVE-2023-34051：VMware Aria Operations for Logs身份验证绕过漏洞通告 | 详情 |
| 93491c9b291bd231c00dce2e6b091ce5 | 2023-10-25 08:36:45 | Apache ActiveMQ远程代码执行漏洞通告 | 详情 | |
| 947b75b656162330cd5ee5f8fdc7fd55 | 2023-10-23 07:15:02 | 安全事件周报 2023-10-16 第42周 | 详情 | |
| efc4ae30a7585e59f452af74e8669a81 | 2023-10-19 09:34:10 | 2023-10 补丁日: Oracle多个产品漏洞安全风险通告 | 详情 | |
| 14251dd76b8bd9ad5e5a4ac486637ee8 | CVE-2023-4966 | 2023-10-19 07:57:29 | CVE-2023-4966：Citrix NetScaler信息泄露漏洞通告 | 详情 |
| adac1daf92ae9567a5e0c667d43f6be3 | CVE-2023-20198 | 2023-10-17 08:22:34 | CVE-2023-20198：Cisco IOS XE Web UI 权限提升漏洞通告 | 详情 |
| 0bccf457cbe52fedf5a73f71f1c91795 | 2023-10-16 06:53:07 | 安全事件周报 2023-10-09 第41周 | 详情 | |
| ea9d2ae53e9fc58c0c692f26990c824a | 2023-10-13 08:39:35 | 新一波“银狐”木马攻势来袭，功能更新目标不变 | 详情 | |
| ede8eb860eccc95f0ac4b911a57717de | CVE-2023-36802 | 2023-10-13 08:37:05 | CVE-2023-36802：Microsoft 流式处理代理权限提升漏洞通告 | 详情 |
| 0b228bf7c0d43556a6261b9eab1ffa46 | 2023-10-11 09:09:02 | 2023-10 补丁日: 微软多个漏洞安全更新通告 | 详情 | |
| eda03759afadd28c4c20c32a96a80e34 | CVE-2023-42824 | 2023-10-08 08:38:21 | CVE-2023-42824：Apple iOS/iPadOS 本地权限提升漏洞通告 | 详情 |
| 8ea293b8aa141400cf62a6e7f7c46390 | 2023-10-08 06:08:55 | 安全事件周报 2023-09-25 第39周 | 详情 | |
| b41f08633537b935b5f96086398e24ba | CVE-2023-5217 | 2023-09-28 07:29:29 | CVE-2023-5217：Google Chrome libvpx堆缓冲区溢出漏洞通告 | 详情 |
| c17b5efb9dae532717913a9f7d1e6319 | CVE-2023-42820 | 2023-09-27 08:43:36 | CVE-2023-42820：JumpServer密码重置漏洞 | 详情 |
| 2302ee59f937af9868dfe9834254938f | 2023-09-25 06:56:48 | 安全事件周报 2023-09-18 第38周 | 详情 | |
| 5a149ee10234d0cdccf1c657f297c33a | CVE-2023-35359 | 2023-09-22 08:31:45 | CVE-2023-35359：Windows 内核权限提升漏洞通告 | 详情 |
| 4b596b38c01ea6fe728ce27a508a44ab | CVE-2023-4998 | 2023-09-21 08:28:11 | CVE-2023-4998：GitLab 身份认证绕过漏洞通告 | 详情 |
| 74b7513b6c9a0ddf5a31c07e61de3b57 | CVE-2023-42442 | 2023-09-19 09:17:03 | CVE-2023-42442：JumpServer未授权访问漏洞通告 | 详情 |
| 90c81d0ff5a3e9ce595ebd560dc5d25e | 2023-09-18 07:04:38 | 安全事件周报 2023-09-11 第37周 | 详情 |
| Tenable (Nessus) [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| f15102d1644c5f40a1b7862a317cac9a | CVE-2023-39257 | 2023-12-02 05:15:00 | Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder when product installation repair is performed, leading to privilege escalation on the system. | 详情 |
| 2816d3993c5555b1c3ab713f9ac16976 | CVE-2023-39256 | 2023-12-02 05:15:00 | Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability to modify the content in an unsecured folder during product installation and upgrade, leading to privilege escalation on the system. | 详情 |
| 837a1b5c3f896abae24df9694f368052 | CVE-2023-49914 | 2023-12-02 01:15:00 | InteraXon Muse 2 devices allow remote attackers to cause a denial of service (incorrect Muse App report of an outstanding, calm meditation state) via a 480 MHz RF carrier that is modulated by a "false" brain wave, aka a Brain-Hack attack. For example, the Muse App does not display the reception of a strong RF carrier, and alert the user that a report may be misleading if this carrier has been modulated by a low-frequency signal. | 详情 |
| c3a9bdb61391a47e52851bbd6ca98657 | CVE-2023-6463 | 2023-12-01 23:15:00 | A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument first_name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-246613 was assigned to this vulnerability. | 详情 |
| 9b5d97d8eebc1dff35d65c0e4e3b2128 | CVE-2023-48887 | 2023-12-01 23:15:00 | A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request. | 详情 |
| 14daa5f4aa334d4bf50a4dafb3b1564e | CVE-2023-48886 | 2023-12-01 23:15:00 | A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request. | 详情 |
| 8296ec272d22ba994c1eabc708f65b88 | CVE-2023-48801 | 2023-12-01 23:15:00 | In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability. | 详情 |
| c7645da8393a5cf6909f6a78dfe0f929 | CVE-2023-6462 | 2023-12-01 22:15:00 | A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-246612. | 详情 |
| 46b2b5ed62ce38d4e0e1c4e1a46b4478 | CVE-2023-49281 | 2023-12-01 22:15:00 | Calendarinho is an open source calendaring application to manage large teams of consultants. An Open Redirect issue occurs when a web application redirects users to external URLs without proper validation. This can lead to phishing attacks, where users are tricked into visiting malicious sites, potentially leading to information theft and reputational damage to the website used for redirection. The problem is has been patched in commit `15b2393`. Users are advised to update to a commit after `15b2393`. There are no known workarounds for this vulnerability. | 详情 |
| a6b16a61e323034d5e91c5c9b52b3a44 | CVE-2023-49276 | 2023-12-01 22:15:00 | Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element in vulnerable to Attribute Injection leading to Cross-Site-Scripting (XSS). Since the custom status interface can set an independent Google Analytics ID and the template has not been sanitized, there is an attribute injection vulnerability here, which can lead to XSS attacks. This vulnerability has been addressed in commit `f28dccf4e` which is included in release version 1.23.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. | 详情 |
| ac8ae6558c2725a1494f0826a408366e | CVE-2023-42006 | 2023-12-01 17:15:00 | IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information caused by improper authority checks. IBM X-Force ID: 265266. | 详情 |
| a052161fd74e703a2efdbd44e4497729 | CVE-2023-48893 | 2023-12-01 16:15:00 | Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/staff_act.php. | 详情 |
| 6639d870a2eeb36326d37cc40b874b52 | CVE-2023-48842 | 2023-12-01 16:15:00 | D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi. | 详情 |
| e8ce223acbe6b3001fc148ef8f58a6bf | CVE-2023-48813 | 2023-12-01 16:15:00 | Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/fines_report.php. | 详情 |
| 8b778e41bfd4c56fae3c8924328edee7 | CVE-2023-49371 | 2023-12-01 15:15:00 | RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit. | 详情 |
| d752967ce0bdbec5fa270bece68b6e0b | CVE-2023-4518 | 2023-12-01 15:15:00 | A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured. | 详情 |
| 220b0f6de3c9e191c790b3e0e876ec25 | CVE-2023-45168 | 2023-12-01 15:15:00 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 267966. | 详情 |
| 9ed9a91cdd52c814ff918cb599889cc9 | CVE-2023-6461 | 2023-12-01 14:15:00 | Cross-site Scripting (XSS) - Reflected in GitHub repository viliusle/minipaint prior to 4.14.0. | 详情 |
| 36165e97dd278972ed2f962672908a45 | CVE-2023-5637 | 2023-12-01 14:15:00 | Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Read Sensitive Strings Within an Executable.This issue affects Education Portal: before v1.1. | 详情 |
| 0b9ec91245d2e2b5a40c6444b4e3a02f | CVE-2023-5636 | 2023-12-01 14:15:00 | Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Command Injection.This issue affects Education Portal: before v1.1. | 详情 |
| 4b9854f1c790c2b66f5235a4d61835a8 | CVE-2023-46944 | 2023-11-28 22:15:00 | An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes workspace trust component. | 详情 |
| 5f0c7a113e140f8aa6f17fb46737e7ea | CVE-2023-49092 | 2023-11-28 21:15:00 | RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is currently no fix available. As a workaround, avoid using the RSA crate in settings where attackers are able to observe timing information, e.g. local use on a non-compromised computer. | 详情 |
| 491025f8cbfa8fa551df504535fe668e | CVE-2023-48193 | 2023-11-28 21:15:00 | Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command filtering function. | 详情 |
| 9c29452b95021a547c4ef646e5b108b7 | CVE-2023-29066 | 2023-11-28 21:15:00 | The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify information stored in the local application data folders. | 详情 |
| e6a40e3a1a12a7d7bff24822d2ddbd1e | CVE-2023-29065 | 2023-11-28 21:15:00 | The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be used to alter or destroy data stored in the database. | 详情 |
| 45d7ab377285b8be8acd06ab88515836 | CVE-2023-29064 | 2023-11-28 21:15:00 | The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts. | 详情 |
| 8d3536792e877a157270ab396189121a | CVE-2023-29063 | 2023-11-28 21:15:00 | The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup. | 详情 |
| e79e81faf0899b8c0b09c79784873dd4 | CVE-2023-29062 | 2023-11-28 21:15:00 | The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use of LLMNR, MBT-NS, or MDNS and will result in NTLMv2 hashes being sent to a malicious entity position on the local network. These hashes can subsequently be attacked through brute force and cracked if a weak password is used. This attack would only apply to domain joined systems. | 详情 |
| 6e51d15e6f38ccb60735d42b415a4a98 | CVE-2023-29061 | 2023-11-28 21:15:00 | There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication. | 详情 |
| 26e2b0daa617f071c9156ac820906217 | CVE-2023-45539 | 2023-11-28 20:15:00 | HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server. | 详情 |
| 信息安全漏洞门户 [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| 70be8948738a6642db41fd71bada4d02 | CVE-2023-26093 | 2023-02-20 08:43:23 | Untitled vulnerability | 详情 |
| 3293fb0bc9a4d8889fb317bc9199d5d8 | CVE-2023-26092 | 2023-02-20 08:43:23 | Untitled vulnerability | 详情 |
| 3ce8785a4634ffe05a7a0bac642967e7 | CVE-2022-48329 | 2023-02-20 08:43:23 | Untitled vulnerability | 详情 |
| e41d7b9d3eb3a782fb5f51a72eb578bb | CVE-2022-48328 | 2023-02-20 08:43:23 | Untitled vulnerability | 详情 |
| 80d002440e6e0d65aecd2da69f96a0f3 | CVE-2023-26081 | 2023-02-20 08:43:23 | Untitled vulnerability | 详情 |
| d0759f57d728fa5633cc910d3fd4a05c | CVE-2016-15024 | 2023-02-19 21:38:00 | RESERVED CVE CANDIDATE NUMBER... | 详情 |
| 55de80cea46291a033955eaa68e55f31 | CVE-2014-125087 | 2023-02-19 21:38:00 | RESERVED CVE CANDIDATE NUMBER... | 详情 |
| 199655b622cddfb9d320524d51d05a4f | CVE-2012-10007 | 2023-02-19 21:38:00 | RESERVED CVE CANDIDATE NUMBER... | 详情 |
| 0e933f1d6cb1bb6f46066ec7e8d3d65e | CVE-2023-0919 | 2023-02-19 21:38:00 | RESERVED CVE CANDIDATE NUMBER... | 详情 |
| 83b0154e52b547b1f88b83d7f6abeada | CVE-2023-0918 | 2023-02-19 17:37:40 | A vulnerability has been found in codeprojects... | 详情 |
| cbd7e2e34dd53872680db01a1a94d3a2 | CVE-2023-0917 | 2023-02-19 17:37:40 | A vulnerability, which was classified as... | 详情 |
| 7b14c254357ed88e6d830b6bc5cc76c3 | CVE-2023-0916 | 2023-02-19 17:37:40 | A vulnerability classified as critical was... | 详情 |
| eb2286d86806477aa83d65d24e0af419 | CVE-2023-0915 | 2023-02-19 17:37:40 | A vulnerability classified as critical has... | 详情 |
| e9ee423e2fb925fe28e6ef82d217780c | CVE-2023-0914 | 2023-02-19 17:37:40 | Improper Authorization in GitHub repository... | 详情 |
| 424ee0655941080ead25cec88a47f063 | CVE-2023-0918 | 2023-02-19 12:56:57 | Untitled vulnerability | 详情 |
| 4c8e2bec4ee9cbcb2833a5e9e35a3f4f | CVE-2023-0917 | 2023-02-19 12:56:57 | Untitled vulnerability | 详情 |
| 72ecfb877830eb52e394fee68a788a67 | CVE-2023-0916 | 2023-02-19 12:56:57 | Untitled vulnerability | 详情 |
| 14cf29bb46538384a91b82250657a689 | CVE-2023-0915 | 2023-02-19 12:56:57 | Untitled vulnerability | 详情 |
| e1a2c1a4a32b94d423ab6e6f9c4bc4cc | CVE-2023-0914 | 2023-02-19 09:38:04 | Untitled vulnerability | 详情 |
| 28b97353f5120839fe9b5988f692b007 | CVE-2023-0913 | 2023-02-18 17:37:40 | A vulnerability classified as critical was... | 详情 |
| fe535d3c2eca2ea9a5348db4fd36d53a | CVE-2023-0912 | 2023-02-18 17:37:40 | A vulnerability classified as critical has... | 详情 |
| 75b1643f0f49340d824e0b3eb7624cda | CVE-2023-0910 | 2023-02-18 17:37:33 | A vulnerability has been found in... | 详情 |
| 99a33120ceb502f202f0e7256f94ab6c | CVE-2023-0909 | 2023-02-18 17:37:33 | A vulnerability, which was classified as... | 详情 |
| d2c41754fad0f623b04dd286bfa252f8 | CVE-2023-0908 | 2023-02-18 17:37:33 | A vulnerability, which was classified as... | 详情 |
| 8f4bb09dd5849025e645dc8299cecf64 | CVE-2023-0907 | 2023-02-18 17:37:33 | A vulnerability, which was classified as... | 详情 |
| bd73cde09423de4a35e167284c947351 | CVE-2023-0906 | 2023-02-18 17:37:33 | A vulnerability classified as critical was... | 详情 |
| a007d59466a41507e830783a17c9cf40 | CVE-2023-0905 | 2023-02-18 17:37:33 | A vulnerability classified as critical has... | 详情 |
| 97427653b6d4d69ae0e8f3b7eff21432 | CVE-2023-0904 | 2023-02-18 17:37:33 | A vulnerability was found in SourceCodester... | 详情 |
| 210626c9ccb76ee3412c9e97f5c817a5 | CVE-2023-0903 | 2023-02-18 17:37:33 | A vulnerability was found in SourceCodester... | 详情 |
| de5db54fd1092cec78e3e9ef75666656 | CVE-2023-0902 | 2023-02-18 17:37:33 | A vulnerability was found in SourceCodester... | 详情 |
| 国家信息安全漏洞共享平台（CNVD） [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| 6562ea01deefa216d71efe7692b4a634 | CNVD-2023-91638 | 2023-12-03 16:38:15  |
用友U8 Cloud存在命令执行漏洞 | 详情 |
| 8297ffc2cb187eba2feae4cbd507e5c2 | CNVD-2023-91706 | 2023-12-02 16:41:01 | 用友UAP系统存在信息泄露漏洞 | 详情 |
| 887c8c9776385314e100992ae5e002d2 | CNVD-2023-86622 | 2023-12-01 16:42:15 | 北京亿赛通科技发展有限责任公司电子文档安全管理系统存在信息泄露漏洞 | 详情 |
| 20d30b17d97fba9b45385c7b6efea5a4 | CNVD-2023-94489 (CVE-2023-44350) | 2023-12-01 07:37:24 | Adobe ColdFusion代码执行漏洞 | 详情 |
| 4eb6decca34bbb061d7248253a7cf902 | CNVD-2023-94483 (CVE-2023-40703) | 2023-12-01 06:39:34 | Mattermost拒绝服务漏洞 | 详情 |
| e55b5b4fb3d529e25e31c32f0de6e09b | CNVD-2023-94484 (CVE-2023-6202) | 2023-12-01 06:39:32 | Mattermost信息泄露漏洞 | 详情 |
| 50b4d53b5f88c6d80954e6b3d5c020e5 | CNVD-2023-94485 (CVE-2023-47168) | 2023-12-01 06:39:29 | Mattermost开放重定向漏洞 | 详情 |
| 5cd02e2d4eb9a23ac33c353dc0e5fd59 | CNVD-2023-94486 (CVE-2023-48268) | 2023-12-01 06:39:27 | Mattermost拒绝服务漏洞 | 详情 |
| 5bba99570946b4e9fe9f903b0e87cee2 | CNVD-2023-94487 (CVE-2023-48369) | 2023-12-01 06:39:25 | Mattermost拒绝服务漏洞 | 详情 |
| 1e6498952cdd6546cbf6a214994a13d7 | CNVD-2023-94488 (CVE-2023-43754) | 2023-12-01 06:39:22 | Mattermost安全绕过漏洞 | 详情 |
| bc18ad26dd7871abfbcafc19eb1389e8 | CNVD-2023-92200 (CVE-2023-36789) | 2023-11-29 16:41:59 | Microsoft Skype for Business远程代码执行漏洞 | 详情 |
| a3fa7b340414510dd656bcafd5505f73 | CNVD-2023-92201 (CVE-2023-41763) | 2023-11-29 16:41:56 | Microsoft Skype for Business权限提升漏洞 | 详情 |
| 43b84369860d469e5c9f712f5164b5cc | CNVD-2023-92203 (CVE-2023-36780) | 2023-11-29 16:41:54 | Microsoft Skype for Business远程代码执行漏洞 | 详情 |
| 34722f46ebfadf8bdc6b87eb86ec8ec2 | CNVD-2023-92204 (CVE-2023-36435) | 2023-11-29 16:41:52 | Microsoft QUIC拒绝服务漏洞 | 详情 |
| ae9361911a4065b3c4be729f38c8455c | CNVD-2023-92205 (CVE-2023-38171) | 2023-11-29 16:41:50 | Microsoft QUIC拒绝服务漏洞 | 详情 |
| 2c22af8be8206222c9c4617f315e0f1f | CNVD-2023-92206 (CVE-2023-36577) | 2023-11-29 16:41:47 | Microsoft WDAC OLE DB provider for SQL Server远程代码执行漏洞 | 详情 |
| 1e617181f1bd06eeacb55e8292d8388d | CNVD-2023-92198 (CVE-2023-36014) | 2023-11-29 16:41:45 | Microsoft Edge (Chromium-based)远程代码执行漏洞 | 详情 |
| 111904f7c0ba5f5f34593474cb32c807 | CNVD-2023-93339 (CVE-2023-20069) | 2023-11-28 16:42:19 | Cisco Prime Infrastructure跨站脚本漏洞 | 详情 |
| 364181514c0fe06f02dfabd8f0055efa | CNVD-2023-93338 (CVE-2023-20096) | 2023-11-28 16:42:17 | Cisco Unified Contact Center Express存在跨站脚本漏洞 | 详情 |
| 2fdfd82ae99ad61cde055b9faf566136 | CNVD-2023-93334 (CVE-2023-20232) | 2023-11-28 16:42:07 | Cisco Unified Contact Center Express输入验证错误漏洞 | 详情 |
| e001e056d061dd67fef3fd567628f28e | CNVD-2023-93333 (CVE-2023-20017) | 2023-11-28 11:37:33 | Cisco Intersight Private Virtual Appliance命令注入漏洞 | 详情 |
| c1036af4e1ea22dcd5152bd634c0d7b5 | CNVD-2023-93331 (CVE-2023-20253) | 2023-11-28 10:39:13 | Cisco SD-WAN vManage存在访问控制错误漏洞 | 详情 |
| 0d66c662b9b27cecb727c9e45a225067 | CNVD-2023-93323 (CVE-2023-46227) | 2023-11-28 10:39:11 | Apache InLong反序列化漏洞 | 详情 |
| bea0e9505cca5b693e7de968979f10de | CNVD-2023-93322 (CVE-2023-41752) | 2023-11-28 10:39:08 | Apache Traffic Server信息泄露漏洞 | 详情 |
| ffc62d9759b3a7f695321d14639b5948 | CNVD-2023-93321 (CVE-2023-39456) | 2023-11-28 10:39:03 | Apache Traffic Server输入验证错误漏洞 | 详情 |
| 4ee6710625df012fb98ddd5367c28246 | CNVD-2023-93320 (CVE-2023-31122) | 2023-11-28 10:39:01 | Apache HTTP Server缓冲区溢出漏洞 | 详情 |
| 369a4c0230389a8eaf31455dd26f7458 | CNVD-2023-93319 (CVE-2023-46819) | 2023-11-28 10:38:59 | Apache OFBiz访问控制错误漏洞 | 详情 |
| e6a63dfbb79e85947f835daece438ce7 | CNVD-2023-93318 (CVE-2023-47037) | 2023-11-28 10:38:56 | Apache Airflow授权问题漏洞 | 详情 |
| 930c64f9eed36a691b0aad04e7229b32 | CNVD-2023-91793 (CVE-2023-47066) | 2023-11-27 08:39:25 | Adobe After Effects越界读取漏洞 | 详情 |
| 6ba7627f5ffa4013ea80c5eac4310c22 | CNVD-2023-91792 (CVE-2023-47071) | 2023-11-27 08:39:23 | Adobe After Effects越界读取漏洞 | 详情 |
| 国家信息安全漏洞库（CNNVD） [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| b5815af17792cf5abac5732bae3094e9 | CNNVD-202308-131 (CVE-2023-20215) | 2023-08-03 12:55:04 | Cisco Secure Web Appliance 安全漏洞 | 详情 |
| 8d98bb094a70919c9e881cc7da5898d4 | CNNVD-202308-132 (CVE-2023-20204) | 2023-08-03 12:54:02 | Cisco BroadWorks CommPilot 安全漏洞 | 详情 |
| c65e18d821cb73d6036dc2df6a726951 | CNNVD-202308-123 (CVE-2023-29409) | 2023-08-02 12:58:19 | Google Golang 资源管理错误漏洞 | 详情 |
| 452c53b54ef3a658eaf6bd8e7d93fe05 | CNNVD-202308-124 (CVE-2023-4070) | 2023-08-02 12:58:17 | Google Chrome 安全漏洞 | 详情 |
| ac7b17414d163c2f26008516638e3a99 | CNNVD-202308-125 (CVE-2023-39113) | 2023-08-02 12:57:15 | ngiflib 安全漏洞 | 详情 |
| 224fd467b813dbee234efe1e61e2ec66 | CNNVD-202308-126 (CVE-2023-39114) | 2023-08-02 12:57:13 | ngiflib 安全漏洞 | 详情 |
| 72d862f454eb3d0e4dd221413d85f6b2 | CNNVD-202308-127 (CVE-2023-1437) | 2023-08-02 12:57:11 | Advantech WebAccess/SCADA 安全漏洞 | 详情 |
| a3b636c53a2116b7ab85ea0c29470e76 | CNNVD-202308-128 (CVE-2023-3329) | 2023-08-02 12:56:09 | SpiderControl SCADA Webserver 路径遍历漏洞 | 详情 |
| 0e8e3c3600e145e70920c2026bde8feb | CNNVD-202308-129 (CVE-2023-4069) | 2023-08-02 12:56:08 | Google Chrome 安全漏洞 | 详情 |
| 619ce483843859fb783525b2b8d00f59 | CNNVD-202308-130 (CVE-2023-4068) | 2023-08-02 12:55:06 | Google Chrome 安全漏洞 | 详情 |
| 6a73381eaa628503bd8c242cd313f005 | CNNVD-202308-057 (CVE-2023-36121) | 2023-08-01 12:56:47 | e107 跨站脚本漏洞 | 详情 |
| 086c171bc44677f87e0ad45c8ab5dab6 | CNNVD-202308-058 (CVE-2023-2164) | 2023-08-01 12:56:45 | GitLab 跨站脚本漏洞 | 详情 |
| bc6915cfb72ce7e27f2aa64ff3a35ee2 | CNNVD-202308-059 (CVE-2023-31432) | 2023-08-01 12:56:43 | Brocade Fabric OS 安全漏洞 | 详情 |
| 915090fa2939ee9d9978125be4eeff27 | CNNVD-202308-060 (CVE-2023-3739) | 2023-08-01 12:56:41 | Google Chrome 安全漏洞 | 详情 |
| b790441bc923d37c914ea50edcdfaa16 | CNNVD-202308-061 (CVE-2023-3385) | 2023-08-01 12:56:39 | GitLab 路径遍历漏洞 | 详情 |
| a6be4479387eddda68e1c7808965c1bc | CNNVD-202308-062 (CVE-2022-40609) | 2023-08-01 12:55:38 | IBM SDK, Java Technology Edition 安全漏洞 | 详情 |
| 55409ee74ffe87168f7d61814b568334 | CNNVD-202308-063 (CVE-2023-31431) | 2023-08-01 12:55:36 | Brocade Fabric OS 安全漏洞 | 详情 |
| a4340da9d26800c671fa800a080c3d01 | CNNVD-202308-064 (CVE-2023-36210) | 2023-08-01 12:55:34 | MotoCMS 安全漏洞 | 详情 |
| d70ae2187ae1aa50a2af6befce15bfbd | CNNVD-202308-065 (CVE-2023-31428) | 2023-08-01 12:54:32 | Brocade Fabric OS 代码问题漏洞 | 详情 |
| 8b0e98f117732e813318bdec77d0fb4b | CNNVD-202308-066 (CVE-2023-31928) | 2023-08-01 12:53:30 | Brocade Fabric OS 跨站脚本漏洞 | 详情 |
| 73ffd9540daad0a04d3d54041ba9df14 | CNNVD-202307-2321 (CVE-2023-37772) | 2023-07-31 12:59:24 | Online Shopping Portal 安全漏洞 | 详情 |
| 10f462bbd81ee431ab32c6a160fc068d | CNNVD-202307-2322 (CVE-2023-3983) | 2023-07-31 12:58:22 | Advantech iView 安全漏洞 | 详情 |
| 91dcd4420b85064dbae045bceabb71b9 | CNNVD-202307-2323 (CVE-2023-37496) | 2023-07-31 12:58:20 | HCL Technologies HCL Verse 安全漏洞 | 详情 |
| c81e50233ec479272b638b8dbddedeea | CNNVD-202307-2324 (CVE-2023-38989) | 2023-07-31 12:57:18 | jeesite 安全漏洞 | 详情 |
| 775849c6f8c5fe41588806137e12cfa8 | CNNVD-202307-2326 (CVE-2023-3462) | 2023-07-31 12:56:16 | HashiCorp Vault 安全漏洞 | 详情 |
| f995ebc4f6961ed50c6d18ec0f7efcf4 | CNNVD-202307-2327 (CVE-2022-42183) | 2023-07-31 12:55:14 | Precisely Spectrum Spatial Analyst 安全漏洞 | 详情 |
| 67539644d8b06577c03aeab1ac018450 | CNNVD-202307-2328 (CVE-2022-42182) | 2023-07-31 12:55:12 | Precisely Spectrum Spatial Analyst 安全漏洞 | 详情 |
| b61f0e730dfb90bb1c6f8f6e83508ae7 | CNNVD-202307-2329 (CVE-2023-39122) | 2023-07-31 12:55:10 | BMC Control-M 安全漏洞 | 详情 |
| a09d1da1d10d2b5f823d7b8b41490660 | CNNVD-202307-2330 (CVE-2023-3825) | 2023-07-31 12:55:08 | PTC Kepware KEPServerEX 资源管理错误漏洞 | 详情 |
| 05caf2e95b7a0f72e0c071c443e1d82b | CNNVD-202307-2331 (CVE-2023-4033) | 2023-07-31 12:55:06 | Mlflow 操作系统命令注入漏洞 | 详情 |
| 奇安信 [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| 45ab4afdafe578698bcfccccd65d833e | yt | QiAnXinTI-SV-2020-0009 Microsoft Windows Type 1字体处理远程代码执行漏洞（ADV200006）通告 | 详情 | |
| 74691465618764c64d52a2ff58013ac4 | yt | QiAnXinTI-SV-2019-0013 Firefox远程代码执行漏洞（CVE-2019-11707）预警通告 | 详情 | |
| 7010355bb6ffff38cb1a885acf784ca7 | ft | QiAnXinTI-SV-2020-0008 Microsoft Windows SMBv3.0服务远程代码执行漏洞（CVE-2020-0796）通告 | 详情 | |
| 5edb21a58a7e21692bd0ddd622d39279 | St | QiAnXinTI-SV-2020-0013 Microsoft DNS Server远程代码执行漏洞（CVE-2020-1350）通告 | 详情 | |
| 3e8973410ef7c04408d63fa10c230487 | St | QiAnXinTI-SV-2020-0002 Microsoft IE jscript远程命令执行0day漏洞（CVE-2020-0674）通告 | 详情 | |
| f749eac58b87d0954f0e4a84b5d67057 | CVE-2020-1350 | 2020-07-15 15:57:00 | QiAnXinTI-SV-2020-0013 Microsoft DNS Server远程代码执行漏洞（CVE-2020-1350）通告 | 详情 |
| 90b93cb7073fe73b17746ac166a09637 | CVE-2020-6819, CVE-2020-6820 | 2020-04-08 10:34:35 | QianxinTI-SV-2020-0012 Firefox在野远程代码执行漏洞（CVE-2020-6819、CVE-2020-6820）通告 | 详情 |
| e318a5efa4803b50cdef480b90b1784d | 2020-03-25 13:58:51 | QiAnXinTI-SV-2020-0009 Microsoft Windows Type 1字体处理远程代码执行漏洞（ADV200006）通告 | 详情 | |
| cffc3035f7899495cfeae521451f91b2 | CVE-2020-0796 | 2020-03-12 10:32:09 | QiAnXinTI-SV-2020-0008 Microsoft Windows SMBv3.0服务远程代码执行漏洞（CVE-2020-0796）通告 | 详情 |
| 3e6175d47d17c6f94bd9ba10d81c3717 | CVE-2020-0674 | 2020-03-02 14:52:46 | QiAnXinTI-SV-2020-0002 Microsoft IE jscript远程命令执行0day漏洞（CVE-2020-0674）通告 | 详情 |
| d99d073afb7d248a8a62fb068921997f | CVE-2020-0601 | 2020-01-15 14:11:41 | QianxinTI-SV-2020-0001 微软核心加密库漏洞（CVE-2020-0601）通告 | 详情 |
| b7b45b14a3af1225ef6eec72d74964df | CVE-2019-1367 | 2019-09-25 17:23:00 | QiAnXinTI-SV-2019-0022 微软IE浏览器JScript脚本引擎远程代码执行漏洞通告 | 详情 |
| 504fc79f0123db109a11b149c334b75c | CVE-2019-0708 | 2019-09-09 10:20:47 | QiAnXinTI-SV-2019-0006 微软远程桌面服务远程代码执行漏洞（CVE-2019-0708）预警通告 | 详情 |
| 5b727692d583d4a6e7cdb0f670eac12a | CVE-2019-1181, CVE-2019-1182, CVE-2019-1222, CVE-2019-1226 | 2019-08-14 11:09:05 | QianxinTI-SV-2019-0015 Microsoft Windows RDP远程桌面服务多个远程代码执行漏洞通告 | 详情 |
| 54b48d765fccbc8dcfa3de0920459f8d | CVE-2019-11707 | 2019-06-19 16:53:47 | QiAnXinTI-SV-2019-0013 Firefox远程代码执行漏洞（CVE-2019-11707）预警通告 | 详情 |
| 数字观星POC++ [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| 3bd8abad4c505db2d41fd0f182059541 | CVE-2022-41678 | 2023-12-01 00:22:05 | Apache ActiveMQ jolokia 远程代码执行漏洞 | 详情 |
| eac2aa50b6229008fbd0f36c3ac1b6dd | CVE-2023-48796 | 2023-11-28 00:01:43 | Apache DolphinScheduler 信息泄漏漏洞 | 详情 |
| 8e45e13a29f3820fcc2331b4556adfd2 | CVE-2023-46214 | 2023-11-23 00:01:39 | Splunk Enterprise 远程代码执行漏洞 | 详情 |
| 25d0b474fedc9f08d89a617191424f70 | 2023-11-23 00:01:38 | I Doc View 任意文件上传漏洞 | 详情 | |
| 7622cc3102d41d9463d3c56f8190c371 | CVE-2023-5540 | 2023-11-14 00:14:09 | Moodle 后台代码执行漏洞 | 详情 |
| 7f31bb2b8c3e19119fd08372923fe692 | CVE-2023-40054 | 2023-11-14 00:14:08 | SolarWinds Network Configuration Manager 远程代码执行漏洞 | 详情 |
| 5f955c1ddd8ae1b94053b9ac047b88e1 | 2023-11-10 00:11:23 | IP-guard WebServer 远程命令执行漏洞 | 详情 | |
| f9e6d9b0c123a459d1671a90f88ecb3d | CVE-2023-46819 | 2023-11-09 00:11:24 | Apache OFBiz Solr 未授权访问漏洞 | 详情 |
| b6de0c6aaa771fa180829e4c6eec6b7b | 2023-11-03 00:11:23 | XXL-JOB 默认 accessToken 身份认证绕过导致任意代码执行漏洞 | 详情 | |
| 1162021202409a144d482d526247c89b | 2023-11-03 00:11:23 | XXL-JOB accessToken 存在身份认证绕过漏洞 | 详情 | |
| 9294b4337dfe8b09affd29e633c7421d | CVE-2023-22518 | 2023-11-01 00:11:25 | Atlassian Confluence Data Center 与 Server 权限绕过漏洞 | 详情 |
| 7b2e925eef26ac549da03240215dab20 | CVE-2023-31122 | 2023-11-01 00:11:25 | Apache HTTP Server 越界读取漏洞 | 详情 |
| 2db2d86749d01ea319e8cd23f9d21f03 | CVE-2023-22518 | 2023-11-01 00:11:25 | Atlassian Confluence Data Center 与 Server 存在权限绕过漏洞 | 详情 |
| 22657414454b53bbce79fe0b4faec2ca | CVE-2023-34051 | 2023-10-28 00:11:25 | VMware Aria Operations for Logs身份验证绕过漏洞 | 详情 |
| fa8b89cfd437ab337ec5f7e790120e3f | CVE-2023-46747 | 2023-10-28 00:11:25 | F5 BIG-IP 远程代码执行漏洞 | 详情 |
| ddb6d17e57bc355e6c0c8d9bdfcf10ae | CVE-2023-46747 | 2023-10-28 00:11:25 | F5 BIG-IP 存在远程代码执行漏洞 | 详情 |
| 29c5f156457bb451ca569413d6c45dab | CVE-2023-42793 | 2023-10-24 00:11:25 | JetBrains TeamCity 远程命令执行漏洞 | 详情 |
| aa785681bb13fab588fefa74e40d82fd | CVE-2023-41266 | 2023-10-20 00:11:31 | Qlik Sense Enterprise 目录遍历漏洞 | 详情 |
| d7d677519116968fc6a5621ae8a53745 | CVE-2023-22072 | 2023-10-19 00:11:31 | Oracle WebLogic Server 远程代码执行漏洞 | 详情 |
| fbcb1bc9499d08181e3f5a24186b383d | CVE-2023-20198 | 2023-10-18 00:01:35 | Cisco IOS XE Web UI 权限提升漏洞 | 详情 |
| f7a32a47fc65893b6ce91d1d7aef3d72 | CVE-2023-20198 | 2023-10-18 00:01:35 | Cisco IOS XE Web UI 存在权限提升漏洞 | 详情 |
| f3b8428adba8e1126e6d31b815952338 | CVE-2023-32722 | 2023-10-17 00:01:35 | Zabbix zbxjson模块缓冲区溢出漏洞 | 详情 |
| 53b66c8a4ebc69fbe1e79b8c999c4e8b | CVE-2023-22515 | 2023-10-12 00:01:35 | Confluence Data Center & Server 访问控制缺陷漏洞 | 详情 |
| ef40f7661fa8c4a7a14828d00b837617 | CVE-2023-22515 | 2023-10-12 00:01:35 | Atlassian Confluence Data Center & Server 存在访问控制缺陷漏洞 | 详情 |
| fb78c0c803e1548722be556438d7e8aa | CVE-2023-42115 | 2023-10-10 00:01:34 | Exim 越界写入漏洞 | 详情 |
| bcb8228a2924d0dfb2bc5a522dbf28a4 | CVE-2023-5023 | 2023-10-08 00:01:36 | 通达OA delete.php SQL注入漏洞 | 详情 |
| 15a66910e87d337c2a1a0ee80035e0f9 | CVE-2023-5032 | 2023-10-08 00:01:36 | RapidCMS 需授权 SQL注入漏洞 | 详情 |
| a84cd3620cebad4e1a9cc1303d48c14d | CVE-2023-3025 | 2023-10-08 00:01:36 | WordPress Dropbox Folder Share SSRF漏洞 | 详情 |
| 45baa96144e80a11ec06ca0df52da4b0 | CVE-2023-5023 | 2023-10-08 00:01:36 | 通达OA general/hr/manage/staff_relatives/delete.php 存在SQL注入漏洞 | 详情 |
| a9aede6ee44a970077484d07a5744999 | CVE-2023-42819 | 2023-09-28 00:01:35 | Jumpserver 目录遍历漏洞 | 详情 |
| 斗象 [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| 096b6298d82574500dc1a14c9dba4065 | CVE-2022-22038, CVE-2022-22047, CVE-2022-30216, CVE-2022-22029 | 2022-07-15 00:38:28 | 微软2022年7月补丁日漏洞通告 | 详情 |
| 6018f718b2d751478bf1ce069ac65f0d | CVE-2022-2185 | 2022-07-01 09:02:05 | GitLab 远程代码执行漏洞(CVE-2022-2185) | 详情 |
| 844719cf0bb4843aff73d2f33cc6dd0b | CVE-2022-30190, CVE-2022-30136 | 2022-06-15 05:48:12 | 微软2022年6月补丁日漏洞通告 | 详情 |
| 8b47000e1abfbacdadb7df6f09152d89 | CVE-2022-26134 | 2022-06-03 05:48:38 | Atlassian Confluence 远程代码执行漏洞(CVE-2022-26134) | 详情 |
| eebe93468b36d2ca24cf4b82136a5635 | CVE-2022-30190 | 2022-05-31 13:57:17 | Microsoft Windows MSDT 远程代码执行漏洞(CVE-2022-30190) | 详情 |
| 95525e3f5907a776dc7cd4f87f2e2154 | 2022-05-23 07:11:04 | Fastjson 反序列化漏洞 | 详情 | |
| 945fd6e612634d9721f861833f1ecb75 | CVE-2022-26925, CVE-2022-26937, CVE-2022-22017, CVE-2022-26923 | 2022-05-11 03:45:48 | 微软2022年5月补丁日漏洞通告 | 详情 |
| e2938ff82d0cc152508e0240697def4c | CVE-2022-1388 | 2022-05-06 05:53:04 | F5 BIG-IP iControl REST 身份验证绕过漏洞(CVE-2022-1388) | 详情 |
| bcf7253d2ee580c618737de137d370c4 | CVE-2022-29464 | 2022-04-22 02:21:17 | WSO2 Carbon Server 远程代码执行漏洞(CVE-2022-29464) | 详情 |
| 07c09799b08afb04c63a9de750b70aca | CVE-2022-26809, CVE-2022-24491, CVE-2022-24497, CVE-2022-26815, CVE-2022-26904 | 2022-04-13 07:51:00 | 微软2022年4月补丁日漏洞通告 | 详情 |
| f5b543501ed5679d423411edac502e24 | CVE-2022-22954, CVE-2022-22955, CVE-2022-22956, CVE-2022-22957, CVE-2022-22958, CVE-2022-22959, CVE-2022-22960, CVE-2022-22961 | 2022-04-08 03:49:31 | VMware 产品多个高危漏洞通告 | 详情 |
| f421bcdb306e2bc1ffbf58fcb024a0dd | 2022-03-29 17:11:30 | Spring 框架远程代码执行漏洞 | 详情 | |
| 0473358d95e58c7c3f2e7db0109f56f4 | 2022-03-29 17:11:30 | Spring Framework 远程代码执行漏洞(CVE-2022-22965) | 详情 | |
| a888c948ca1172f8a06a3879479f1de4 | CVE-2022-22965 | 2022-03-29 17:11:30 | Spring Framework 远程代码执行漏洞(CVE-2022-22965) | 详情 |
| 71ed541bb737196268b75c7ba435e1a9 | 2022-03-28 04:57:30 | Spring Cloud Function SpEL表达式注入漏洞 | 详情 | |
| f7a5dcd376be777c6593a29b8ebd411a | CVE-2022-0778 | 2022-03-18 07:09:22 | OpenSSL拒绝服务漏洞(CVE-2022-0778) | 详情 |
| 6c4124fed44906a79843cd2dd383c695 | CVE-2022-0847 | 2022-03-15 03:32:03 | Linux Kernel本地提权漏洞（CVE-2022-0847） | 详情 |
| a2795e4829bff16f108cf191eba663c3 | CVE-2022-21990, CVE-2022-24508, CVE-2022-23277 | 2022-03-11 02:14:56 | 微软2022年3月补丁日漏洞通告 | 详情 |
| d09f0641bf65c64a16d802cd78e14097 | CVE-2022-0847 | 2022-03-08 08:23:08 | Linux 内核本地提权漏洞(CVE-2022-0847) | 详情 |
| 69052e2a8c09416f5df674f92cba25a6 | CVE-2022-22947 | 2022-03-02 11:42:55 | Spring Cloud Gateway 远程代码执行漏洞(CVE-2022-22947) | 详情 |
| 5f42b6f584a9ace426787dc8dfd6e6e5 | 2022-02-16 10:44:18 | 向日葵远程命令执行漏洞(CNVD-2022-10270) | 详情 | |
| 79556071f6236ab4674f75b3beee4d79 | CVE-2022-24112 | 2022-02-11 06:13:35 | Apache APISIX 远程代码执行漏洞 (CVE-2022-24112) | 详情 |
| 485f2c57713f4a39830e8c2d01e43cfe | CVE-2021-4034 | 2022-01-26 06:19:16 | Linux Polkit 权限提升漏洞(CVE-2021-4034) | 详情 |
| 0aa6eab412c0318b74c6a470ee774df1 | CVE-2022-21907, CVE-2022-21969, CVE-2022-21846, CVE-2022-21855, CVE-2022-21874, CVE-2022-21893, CVE-2022-21850, CVE-2022-21851, CVE-2022-21836, CVE-2022-21919 | 2022-01-12 03:44:50 | 微软2022年1月补丁日漏洞通告 | 详情 |
| 88a8c676b52a739c0335d7c21ca810a9 | 2022-01-06 08:19:17 | MeterSphere 远程代码执行漏洞 | 详情 | |
| 76cad61d2d5a8750a6a714ab2c6dbc97 | CVE-2021-45232 | 2021-12-28 10:31:16 | Apache APISIX Dashboard 接口未授权访问漏洞(CVE-2021-45232) | 详情 |
| af4f5f63390eb00de8705b5029d8c376 | CVE-2021-44228, CVE-2021-45046 | 2021-12-14 01:56:52 | Apache Log4j 远程代码执行漏洞 | 详情 |
| 红后 [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| 6fa0a347889bf0da0cae47ef068a6a99 | CVE-2023-32836 | 2023-11-16 21:05:37 | GOOGLE ANDROID Vulnerability | 详情 |
| 49751f9f84ed69956c96cc87959ec666 | CVE-2021-22499 | 2023-11-16 21:05:34 | Micro Focus Application Performance Management 跨站脚本漏洞 | 详情 |
| eaa040f80d817832a627456843d3e24c | CVE-2021-23883 | 2023-11-16 21:05:33 | 迈克菲 McAfee Endpoint Security 代码问题漏洞 | 详情 |
| d52ddce51389f668d6fad6e7044bd974 | CVE-2021-23878 | 2023-11-16 21:05:33 | 迈克菲 McAfee Endpoint Security 加密问题漏洞 | 详情 |
| b62432054e9970a34c4d9e4d9efd1075 | CVE-2023-32838 | 2023-11-16 21:05:33 | GOOGLE ANDROID Vulnerability | 详情 |
| 162855c32b8e1a1dafd6ef3e7a3b3da8 | CVE-2022-43554 | 2023-11-16 21:05:33 | IVANTI AVALANCHE Vulnerability | 详情 |
| dff8e982c8571446fc1d46fdb5263781 | CVE-2021-21019 | 2023-11-16 21:05:33 | Adobe Magento 注入漏洞 | 详情 |
| 5c28bf13629d4240819bb4f492d588a9 | CVE-2022-34396 | 2023-11-15 21:56:12 | DELL OPENMANAGE_SERVER_ADMINISTRATOR Vulnerability | 详情 |
| 8876fd1be50182e42f17aaf033bfaf25 | CVE-2022-45098 | 2023-11-15 21:56:10 | DELL EMC_POWERSCALE_ONEFS Vulnerability | 详情 |
| d8a4cb7ca4e0f29533302f9f97f22a55 | CVE-2022-45102 | 2023-11-15 21:55:56 | DELL Multiple product Vulnerability | 详情 |
| 72e081fb5149198ecc92f3f06383f0d5 | CVE-2023-0512 | 2023-11-15 21:55:53 | VIM VIM Vulnerability | 详情 |
| 741e4f08caf4baef7072136884f07ae6 | CVE-2023-24829 | 2023-11-15 21:55:48 | APACHE IOTDB Vulnerability | 详情 |
| 06eca26d44409544e5ec96702bf85ce0 | CVE-2023-23628 | 2023-11-15 21:54:44 | METABASE METABASE Vulnerability | 详情 |
| 830da4b9e4f027d37c9e39125a30cc18 | CVE-2022-3488 | 2023-11-15 21:54:27 | ISC BIND Vulnerability | 详情 |
| 93ceb6d645101eee2b05535717260299 | CVE-2022-45808 | 2023-11-15 21:54:21 | THIMPRESS LEARNPRESS Vulnerability | 详情 |
| d79756a4e0c6522a5ba958c82d0b4c88 | CVE-2023-22482 | 2023-11-15 21:54:17 | LINUXFOUNDATION ARGO-CD Vulnerability | 详情 |
| 1c317622086c85695ff9266e3c5cf66f | CVE-2022-4323 | 2023-11-15 21:54:16 | SUMO GOOGLE_ANALYTICATOR Vulnerability | 详情 |
| 6e8e12e7cd90fd6550e5cef8c12a4a50 | CVE-2023-24069 | 2023-11-15 21:54:13 | SIGNAL SIGNAL-DESKTOP Vulnerability | 详情 |
| de78bbaf8c5f6d744b657b8b7733d20e | CVE-2023-24044 | 2023-11-15 21:54:12 | PLESK OBSIDIAN Vulnerability | 详情 |
| 44e1e95916d186bbbc5cabca01532712 | CVE-2022-41733 | 2023-11-15 21:54:05 | IBM INFOSPHERE_INFORMATION_SERVER Vulnerability | 详情 |
| 136d79ca309f157fcf93764b6993609c | CVE-2022-20752 | 2023-11-15 20:59:35 | Cisco Unified Communications Manager 和 Cisco Unity Connection安全漏洞 | 详情 |
| cfa598cc25996bf7c25d8622f86868f3 | CVE-2022-32208 | 2023-11-15 20:59:35 | curl 缓冲区错误漏洞 | 详情 |
| 5dc2248c28a031fb6cb3e94f714da748 | CVE-2021-31677 | 2023-11-15 20:59:35 | PESCMS 跨站请求伪造漏洞 | 详情 |
| 2df25199d06527c66c1929ede927aa18 | CVE-2022-20800 | 2023-11-15 20:59:35 | Cisco Unified Communications Manager 跨站脚本漏洞 | 详情 |
| 537152d5106a70b12b4e0204db3ba5b3 | CVE-2022-2304 | 2023-11-15 20:59:34 | Vim 安全漏洞 | 详情 |
| dee30b1a759cdba8cda08222c3b6cf63 | CVE-2022-2309 | 2023-11-15 20:59:34 | lxml 和 libxml2 代码问题漏洞 | 详情 |
| edc189cc3f6caea2e67f158e0f93dd19 | CVE-2022-31116 | 2023-11-15 20:59:34 | UltraJSON 其他漏洞 | 详情 |
| 3e53baf169ff30745b9dfa6f9505233b | CVE-2022-20791 | 2023-11-15 20:59:26 | Cisco Unified Communications Manager 路径遍历漏洞 | 详情 |
| 6ae237378a32e08e6f0495fa3dbce32b | CVE-2022-20812 | 2023-11-15 20:59:26 | Cisco Expressway Series 和 Cisco TelePresence Video Communication Server 路径遍历漏洞 | 详情 |
| a2523ef82d3016d54faf64dd9af12f3f | CVE-2022-31129 | 2023-11-15 20:59:26 | Moment.js 资源管理错误漏洞 | 详情 |
| 绿盟 [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| 56869b5f0fd4dfed58e265fbfd9c3a16 | CVE-2023-46848 | 2023-12-04 03:39:50 |
Squid拒绝服务漏洞 | 详情 |
| 5607fd2b6baa87dc439d0f43a627f68d | CVE-2023-5824 | 2023-12-04 03:39:50 |
Squid拒绝服务漏洞 | 详情 |
| e8b71a5cae9d86158f83e8eeafd3a1d0 | CVE-2023-22079 | 2023-11-30 10:41:12 | Oracle MySQL Server拒绝服务漏洞 | 详情 |
| 843e4ce1a483de25b206e4916f00cbe2 | CVE-2023-22081 | 2023-11-30 10:41:12 | Oracle Java SE、GraalVM for JDK和GraalVM Enterprise Edition拒绝服务漏洞 | 详情 |
| 4ff6dd32489af0a77516c09ff544d607 | CVE-2023-22080 | 2023-11-30 10:41:12 | Oracle PeopleSoft Enterprise PeopleTools信息泄露漏洞 | 详情 |
| b9af4e010671f1c5360b3a13dbe93197 | CVE-2023-22078 | 2023-11-30 10:41:12 | Oracle MySQL Server拒绝服务漏洞 | 详情 |
| 783459523165113ceb56e6d5bb36843b | CVE-2023-22085 | 2023-11-30 10:41:12 | Oracle Hospitality Applications OPERA 5 Property Services信息泄露漏洞 | 详情 |
| 56b4b21dfe8a26aa2e53f93989f3ed09 | CVE-2023-22084 | 2023-11-30 10:41:12 | Oracle MySQL Server拒绝服务漏洞 | 详情 |
| 1320a70d5ed6888439acc45037cd6490 | CVE-2023-22083 | 2023-11-30 10:41:12 | Oracle Enterprise Session Border Controller信息泄露漏洞 | 详情 |
| e178454a3f90bb5861d9aef01432008f | CVE-2023-22082 | 2023-11-30 10:41:12 | Oracle Business Intelligence Enterprise Edition信息泄露漏洞 | 详情 |
| db86e8e499858781ccc67110535b02c7 | CVE-2023-22077 | 2023-11-30 10:41:12 | Oracle Database Server拒绝服务漏洞 | 详情 |
| 3c3506ab4bd0007fd165b2053d52b619 | CVE-2023-22071 | 2023-11-30 10:41:12 | Oracle Database Server拒绝服务漏洞 | 详情 |
| 2b32f9f2a0a239c12dd4b1e230c9f9e5 | CVE-2023-22076 | 2023-11-30 10:41:12 | Oracle E-Business Suite信息泄露漏洞 | 详情 |
| 6b3dd8a45b6299e0913814b2a0a1d49f | CVE-2023-41752 | 2023-11-30 10:41:12 | Apache Traffic Server信息泄露漏洞 | 详情 |
| a7d6b39314cf2190e5d705de12c189ff | CVE-2023-45357 | 2023-11-30 10:41:12 | Archer Platform信息泄露漏洞 | 详情 |
| 800270064092a6a84f6e4a1ba4d36796 | CVE-2023-45358 | 2023-11-30 10:41:12 | Archer Platform跨站脚本漏洞 | 详情 |
| ec527662e848a5df918fe160c97466d7 | CVE-2023-34209 | 2023-11-30 10:41:12 | EasyUse MailHunter Ultimate信息泄露漏洞 | 详情 |
| 7e10ec6c560aaf21bd8e65b80e47dde1 | CVE-2023-42750 | 2023-11-30 03:39:50 | Google Android越界写入漏洞 | 详情 |
| 61736c8f9d2eb36badc1d6a162c9805c | CVE-2023-46931 | 2023-11-30 03:39:50 | GPAC堆缓冲区溢出漏洞 | 详情 |
| fa73c56e9b2ad1680bc6ddd010ec43c0 | CVE-2023-46927 | 2023-11-30 03:39:50 | GPAC堆缓冲区溢出漏洞 | 详情 |
| 03935ef87ae0299e43006f1749765caa | CVE-2023-42653 | 2023-11-30 03:39:50 | Google Android越界写入漏洞 | 详情 |
| b8a580b96f77685fbda16ecc0772a98e | CVE-2023-42654 | 2023-11-30 03:39:50 | Google Android信息泄露漏洞 | 详情 |
| 76990348fa098bcc82c00b3eca8f2605 | CVE-2023-42633 | 2023-11-30 03:39:50 | Google Android信息泄露漏洞 | 详情 |
| 8fc4c80cdfd3b0edc1d286ecfd12798b | CVE-2023-42632 | 2023-11-30 03:39:50 | Google Android信息泄露漏洞 | 详情 |
| 154361285c606009edecf3be07384e48 | CVE-2023-1718 | 2023-11-30 03:39:50 | Bitrix24拒绝服务漏洞 | 详情 |
| b2752df7ea4a8133ed4ee2cfe7044826 | CVE-2023-1717 | 2023-11-30 03:39:50 | Bitrix24原型污染漏洞 | 详情 |
| 05caf3cbff58e5c57222da6085a49885 | CVE-2023-42647 | 2023-11-30 03:39:50 | Google Android信息泄露漏洞 | 详情 |
| 661c05763dfe327d0d948104a4064d3b | CVE-2022-48456 | 2023-11-30 03:39:50 | Google Android越界写入漏洞 | 详情 |
| 7802d482e952f5813920ec3ed6fbc81f | CVE-2022-48457 | 2023-11-30 03:39:50 | Google Android输入验证错误漏洞 | 详情 |
| 847cc026294a207f06cf6a8d8ddb3b84 | CVE-2022-48460 | 2023-11-30 03:39:50 | Google Android拒绝服务漏洞 | 详情 |
| 美国国家漏洞数据库（NVD） [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| 752c86d745d9d6748f49970fc6c72bf7 | CVE-2022-48189 | 2023-10-30 15:15:39 | An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code. | 详情 |
| 8e0bb5e55759a9b19da4ce8a5bf48799 | CVE-2022-4573 | 2023-10-30 15:15:39 | An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code. | 详情 |
| 9fee627171b8e0c7c2f065dae65c293c | CVE-2023-46468 | 2023-10-28 01:15:51 | An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function. | 详情 |
| 1f2c404d06acfac83f7761c8ab878dee | CVE-2023-43322 | 2023-10-28 01:15:51 | ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/. | 详情 |
| eea9f6fc871d45cb3672714124c1d416 | CVE-2023-46211 | 2023-10-27 21:15:09 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin <=Â 3.19.14 versions. | 详情 |
| 8496e7ff58df6fda25c681900fb6dfb8 | CVE-2023-46209 | 2023-10-27 21:15:09 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in G5Theme Grid Plus – Unlimited grid plugin <= 1.3.2 versions. | 详情 |
| 751468e26927001b02f1b97a3d980488 | CVE-2023-46208 | 2023-10-27 21:15:09 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin <= 1.4.6 versions. | 详情 |
| 26e1875553f4c463d954949d41128765 | CVE-2023-46200 | 2023-10-27 21:15:09 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephen Darlington, Wandle Software Limited Smart App Banner plugin <=Â 1.1.3 versions. | 详情 |
| a86c2cbf359259b1e38cd6e0c560a363 | CVE-2023-46509 | 2023-10-27 21:15:09 | An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component. | 详情 |
| c608240b549dc25f03e04b5397e48e1b | CVE-2023-46199 | 2023-10-27 08:15:31 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Triberr plugin <=Â 4.1.1 versions. | 详情 |
| c4bd3098463c3624a284c838fd6ecb48 | CVE-2023-46194 | 2023-10-27 08:15:31 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.5 versions. | 详情 |
| e79edbb292a519fa08055a884d86921e | CVE-2023-46192 | 2023-10-27 08:15:31 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Internet Marketing Ninjas Internal Link Building plugin <=Â 1.2.3 versions. | 详情 |
| 528422b82114eedfc8a332c895b5d475 | CVE-2023-46504 | 2023-10-27 04:15:10 | Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component. | 详情 |
| 4b4a8cd15c35de7b7cb3e0f5110f178b | CVE-2023-46503 | 2023-10-27 04:15:10 | Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules. | 详情 |
| 9637804577e375e89e0c34d1e9dc7daa | CVE-2023-46505 | 2023-10-27 01:15:32 | Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file. | 详情 |
| ccc0d1dc9e1e6371fc7ed4a7e6bc67c9 | CVE-2023-46491 | 2023-10-27 00:15:09 | ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library. | 详情 |
| 7d0ccfb0da7a7225f1fd25c20c95a57e | CVE-2023-46435 | 2023-10-26 18:15:08 | Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/view_service&id. | 详情 |
| 0ab665a469513a0f70af2e1f17519e41 | CVE-2023-5792 | 2023-10-26 17:15:10 | A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability affects unknown code of the file endpoint/delete-note.php. The manipulation of the argument note leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-243598 is the identifier assigned to this vulnerability. | 详情 |
| 692b9ba4d9cf7c90b6a3e5b8396a5302 | CVE-2023-5791 | 2023-10-26 17:15:10 | A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243597 was assigned to this vulnerability. | 详情 |
| 7e262fff58c0ebc8ddc6cdfb7535d7e2 | CVE-2023-5790 | 2023-10-26 17:15:10 | A vulnerability classified as critical was found in SourceCodester File Manager App 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-file.php. The manipulation of the argument uploadedFileName leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243595. | 详情 |
| c643f1003e7a0ee28d9e54cda26d6b85 | CVE-2023-43208 | 2023-10-26 17:15:09 | NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679. | 详情 |
| 3d3bc04cd7ec7fdf5aaaa0aa0a140b90 | CVE-2023-46450 | 2023-10-26 15:15:09 | Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier function. | 详情 |
| 844b1b549a5543c879cdc68d7237f444 | CVE-2023-46449 | 2023-10-26 15:15:09 | Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function. | 详情 |
| f494a8af43bc7ce0e5b6f1d2f18f3740 | CVE-2023-46081 | 2023-10-26 13:15:09 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <=Â 1.1.34 versions. | 详情 |
| 3a451401fdd162ad57ab72c2f5d7b984 | CVE-2023-46077 | 2023-10-26 13:15:09 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions. | 详情 |
| 428d0a0df20b616e36d68a5b76023a38 | CVE-2023-46076 | 2023-10-26 13:15:09 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <=Â 1.2.102 versions. | 详情 |
| 9b4f6b54e2e270339fce3235cbeeb9cb | CVE-2023-32116 | 2023-10-26 13:15:09 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in TotalPress.Org Custom post types, Custom Fields & more plugin <=Â 4.0.12 versions. | 详情 |
| 1895898abc5f86d08e3c1918682e2181 | CVE-2023-46088 | 2023-10-26 13:15:09 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <=Â 1.6.1 versions. | 详情 |
| adc6060b4e9a2ef97953b84c25e55a70 | CVE-2023-46075 | 2023-10-26 13:15:09 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Contact Form Builder, Contact Widget plugin <=Â 2.1.6 versions. | 详情 |
| d05d7443566745759285480e8ad87049 | CVE-2023-5802 | 2023-10-26 12:15:08 | Cross-Site Request Forgery (CSRF) vulnerability in Mihai Iova WordPress Knowledge base & Documentation Plugin – WP Knowledgebase plugin <= 1.3.4 versions. | 详情 |
| 阿里云 [TOP 30] | CVES | TIME | TITLE | URL |
|---|---|---|---|---|
| c3643d5393761f08a6e674e6ac6b9b65 | CVE-2022-41678 | 2023-11-29 08:38:30 | Apache ActiveMQ jolokia 代码执行漏洞（CVE-2022-41678） | 详情 |
| 2d0128043fcafe5a153881cdbcb2c4e0 | CVE-2022-41678 | 2023-11-29 02:41:26 | Apache ActiveMQ jolokia 反序列化漏洞（CVE-2022-41678） | 详情 |
| f0c6954e5ea94f76f26a15f64ae7cd8a | CVE-2023-49103 | 2023-11-22 08:37:58 | OwnCloud 敏感信息泄漏漏洞（CVE-2023-49103） | 详情 |
| f9771cf331d6a90d583c4040a7335677 | AVD-2023-1697088 | 2023-11-21 03:37:37 | I Doc View 任意文件上传漏洞 | 详情 |
| acc9ebcd3b738e2445e850f65a65df40 | CVE-2023-43177 | 2023-11-18 07:37:18 | CrushFTP 远程代码执行漏洞（CVE-2023-43177） | 详情 |
| 6f39ed944a9cb8b6640f1ab492792840 | CVE-2023-46214 | 2023-11-17 08:39:19 | Splunk Enterprise XML Parsing 远程代码执行漏洞（CVE-2023-46214） | 详情 |
| 556ff691c5b8681acc79976d5e58deba | AVD-2023-1696209 | 2023-11-14 09:37:38 | Kingdee K3ERP 文件上传漏洞 | 详情 |
| 7d736eb0dbc04105da51ab5d7b81dfef | AVD-2023-1695055 | 2023-11-08 02:38:32 | IP-guard WebServer 远程命令执行漏洞 | 详情 |
| deedc46a4b02608feefde2eaa2408e28 | CVE-2023-47248 | 2023-11-04 05:37:23 | Apache Arrow PyArrow 任意代码执行（CVE-2023-47248） | 详情 |
| e4511eb5e783c90100eafbe00dbf48d3 | AVD-2023-1689266 | 2023-11-03 03:37:09 | Thorn SFTP Gateway 远程代码执行漏洞 | 详情 |
| cd9e761e384089619e8d862c8cb52e0d | CVE-2023-22518 | 2023-10-31 09:37:20 | Atlassian Confluence 权限绕过致代码执行漏洞（CVE-2023-22518） | 详情 |
| 41956822ca0e46a706fa0cb88e7ccb8d | CVE-2023-22518 | 2023-10-31 06:38:08 | Atlassian Confluence Data Center & Server 权限绕过漏洞（CVE-2023-22518） | 详情 |
| eb9595392f1071dc5c28d1663659cdbd | CVE-2023-46747 | 2023-10-27 05:37:08 | F5 BIG-IP TMUI 远程代码执行漏洞（CVE-2023-46747） | 详情 |
| 408c85d5597c3ce296271e2b011e780d | CVE-2023-43208 | 2023-10-26 08:37:24 | NextGen Mirth Connect 远程代码执行漏洞（CVE-2023-43208） | 详情 |
| 3daf70f61d7e8c884c1127775ea0ac7d | CVE-2023-46604 | 2023-10-25 09:37:19 | Apache ActiveMQ远程代码执行漏洞（CVE-2023-46604） | 详情 |
| 9624eb59e7d18d28799dfb224f1a3d89 | AVD-2023-1687513 | 2023-10-25 05:37:16 | Apache ActiveMQ远程代码执行漏洞 | 详情 |
| c61fc14788886752bd5e0bba73b3eb0f | AVD-2023-1687472 | 2023-10-23 03:37:11 | Apache Solr 集群模式Schema Designer 代码执行漏洞 | 详情 |
| 00229ad394d0b2b68fb97a5e4b6bbb9f | CVE-2023-34050 | 2023-10-18 08:37:54 | Spring AMQP反序列化漏洞（CVE-2023-34050） | 详情 |
| 6f00bea5a99f959b36bf9d3f41bbc1c2 | AVD-2023-1686894 | 2023-10-18 06:38:31 | Yongyou U8cloud FileManageServlet 反序列化代码执行漏洞 | 详情 |
| fc5d13490dc459ce57a22228dd2b23db | AVD-2023-1686873 | 2023-10-18 06:38:31 | Yongyou U8cloud LoginVideoServlet 反序列化代码执行漏洞 | 详情 |
| 78a722c6bae0585b8899f069b4072df1 | AVD-2023-1686894 | 2023-10-18 06:38:17 | Yongyou FileManageServlet 反序列化代码执行漏洞 | 详情 |
| e4b28cdf0790eb333def134dca1ae7c3 | AVD-2023-1686873 | 2023-10-18 06:38:17 | Yongyou LoginVideoServlet 反序列化代码执行漏洞 | 详情 |
| 1d0c1f15dfa6c4a232d1d9bfdf9302a3 | CVE-2023-20198 | 2023-10-17 08:37:54 | Cisco IOS EX 未授权创建管理员漏洞（CVE-2023-20198） | 详情 |
| adce8a2b490b492c6896b33a61194d8d | AVD-2023-1686709 | 2023-10-17 08:37:54 | Seeyon OA getAjaxDataServlet XXE致远程代码执行漏洞 | 详情 |
| 895d598cd35c08b66c06a9c3df5d3b6e | AVD-2023-1686526 | 2023-10-17 03:37:12 | 金山终端安全系统V9.0 SQL注入漏洞 | 详情 |
| cd400a4b77bc90ba3c0de3a0d0bf22a8 | CVE-2023-20198 | 2023-10-17 03:37:11 | Cisco IOS XE 未授权创建管理员漏洞（CVE-2023-20198） | 详情 |
| 939f4707a62c1544a185f7c3d120602d | AVD-2023-1686323 | 2023-10-16 10:38:22 | Yongyou FileParserServlet 反序列化代码执行漏洞 | 详情 |
| 3357e2954bdc0791ce9ccdd4af960c47 | AVD-2023-1686323 | 2023-10-16 09:37:24 | Yongyou FileManageServlet 反序列化代码执行漏洞 | 详情 |
| d126bfedd6674d6a4751f2ca92f25503 | CVE-2023-44487 | 2023-10-13 10:37:40 | HTTP/2 Rapid Reset 拒绝服务漏洞 (CVE-2023-44487) | 详情 |
| f8b6804e02add6b75b368218aabe7457 | CVE-2023-4966 | 2023-10-10 02:37:10 | Citrix ADC/Gateway 敏感信息泄漏漏洞（CVE-2023-4966） | 详情 |