Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

state:in-the-wild — CVE vulnerabilities tagged 405

405 CVE security advisories tagged "state:in-the-wild" with AI Chinese analysis, CVSS, references and POCs.

The tag "state:in-the-wild" signifies that a disclosed vulnerability has been actively exploited by attackers in real-world environments, rather than remaining theoretical or limited to controlled laboratory testing. This classification is critical because it indicates an immediate and tangible threat to public infrastructure, demanding urgent mitigation strategies from administrators and developers. Typically, these vulnerabilities involve remote code execution, authentication bypasses, or critical logic flaws that allow adversaries to compromise systems without physical access. The presence of this tag implies that exploit code is likely circulating in the wild, increasing the risk of widespread data breaches, service disruptions, or lateral movement within networks. Consequently, organizations must prioritize patching these specific CVEs to prevent active intrusion, as the window between disclosure and exploitation has effectively closed, leaving systems exposed to sophisticated threat actors seeking immediate gain.

CVE IDTitleCVSSSeverityPublished
CVE-2010-0288 DokuWiki ACL管理插件管理员权限检查权限提升漏洞 — n/a 9.1 -2010-02-15
CVE-2010-0249 Microsoft Internet Explorer非法事件操作内存破坏漏洞 — n/a 8.1 -2010-01-15
CVE-2009-4324 Adobe Reader和Acrobat ZLib压缩流特制PDF文件释放后使用漏洞 — n/a 8.8 -2009-12-15
CVE-2009-3459 Adobe Reader和Acrobat堆缓冲区溢出漏洞 — n/a 7.8 -2009-10-13
CVE-2008-7168 UUSee网络电视2008 UUUpgrade ActiveX控件Update方式任意文件下载漏洞 — n/a 7.5 -2009-09-08
CVE-2009-3041 SPIP数据库备份请求绕过认证漏洞 — n/a 9.1 -2009-09-01
CVE-2009-2055 Cisco IOS XR软件BGP更新拒绝服务漏洞 — n/a 7.5 -2009-08-19
CVE-2009-1862 Adobe Flash Player 畸形SWF文件解析远程代码执行漏洞 — n/a 8.8 -2009-07-23
CVE-2009-1136 Microsoft Office Spreadsheet ActiveX控件内存破坏漏洞 — n/a 9.8 -2009-07-15
CVE-2008-0015 Microsoft DirectShow MPEG2TuneRequest 组件栈溢出漏洞 — n/a 8.8 -2009-07-07
CVE-2009-2265 FCKeditor 路径遍历漏洞 — n/a 8.8 -2009-07-05
CVE-2009-1391 Compress::Raw::Zlib Perl模块单字节溢出漏洞 — n/a 7.5 -2009-06-16
CVE-2009-1537 Microsoft DirectX QuickTime媒体文件解析代码执行漏洞 — n/a 7.8 -2009-05-29
CVE-2009-1807 Baofeng缓冲区错误漏洞 — n/a 9.8 -2009-05-28
CVE-2009-1800 中国游戏中心游戏大厅客户端远程栈溢出漏洞 — n/a 9.8 -2009-05-28
CVE-2009-1612 暴风影音ActiveX控件OnBeforeVideoDownload()函数栈溢出漏洞 — n/a 9.8 -2009-05-11
CVE-2009-1481 Pjhome PuterJam's Blog PJBlog3 'action.asp' SQL注入漏洞 — n/a 9.8 -2009-04-29
CVE-2009-1438 Konstanty_Bialkowski libmodplug 'src/load_med.cpp'整数溢出漏洞 — n/a 8.8 -2009-04-27
CVE-2009-1308 Mozilla Firefox 跨站脚本漏洞 — n/a 6.1 -2009-04-22
CVE-2009-0556 Microsoft PowerPoint畸形文件解析代码执行漏洞 — n/a 7.8 -2009-04-03
CVE-2009-1054 Ichitaro代码执行漏洞 — n/a 7.8 -2009-03-24
CVE-2009-0238 Microsoft Excel无效对象引用代码执行漏洞 — n/a 7.8 -2009-02-25
CVE-2009-0658 Adobe Reader和Acrobat 缓冲区错误漏洞 — n/a 7.8 -2009-02-20
CVE-2009-0259 OpenOffice Word处理器 远程拒绝服务漏洞 — n/a 8.4 -2009-01-22
CVE-2008-4844 Microsoft IE对象处理内存破坏漏洞 — n/a 8.8 -2008-12-11
CVE-2008-4841 Microsoft写字板文件转换器远程代码执行漏洞 — n/a 8.4 -2008-12-10
CVE-2008-5227 PHPCow 代码注入漏洞 — n/a 9.8 -2008-11-25
CVE-2008-4250 Windows Server服务 RPC请求缓冲区错误漏洞 — n/a 9.8 -2008-10-23
CVE-2008-3919 JustSystems Ichitaro JTD文件代码执行漏洞 — n/a 7.8 -2008-09-04
CVE-2008-3873 Adobe Flash Player System.setClipboard方式 跨站脚本攻击漏洞 — n/a 8.2 -2008-08-29

Vulnerabilities classified as state:in-the-wild represent 405 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.