Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

state:in-the-wild — CVE vulnerabilities tagged 412

412 CVE security advisories tagged "state:in-the-wild" with AI Chinese analysis, CVSS, references and POCs.

The tag "state:in-the-wild" signifies that a disclosed vulnerability has been actively exploited by attackers in real-world environments, rather than remaining theoretical or limited to controlled laboratory testing. This classification is critical because it indicates an immediate and tangible threat to public infrastructure, demanding urgent mitigation strategies from administrators and developers. Typically, these vulnerabilities involve remote code execution, authentication bypasses, or critical logic flaws that allow adversaries to compromise systems without physical access. The presence of this tag implies that exploit code is likely circulating in the wild, increasing the risk of widespread data breaches, service disruptions, or lateral movement within networks. Consequently, organizations must prioritize patching these specific CVEs to prevent active intrusion, as the window between disclosure and exploitation has effectively closed, leaving systems exposed to sophisticated threat actors seeking immediate gain.

CVE ID Title CVSS Severity Published
CVE-2009-0259 OpenOffice Word处理器 远程拒绝服务漏洞 — n/a 8.4 - 2009-01-22
CVE-2008-4844 Microsoft IE对象处理内存破坏漏洞 — n/a 8.8 - 2008-12-11
CVE-2008-4841 Microsoft写字板文件转换器远程代码执行漏洞 — n/a 8.4 - 2008-12-10
CVE-2008-5227 PHPCow 代码注入漏洞 — n/a 9.8 - 2008-11-25
CVE-2008-4250 Windows Server服务 RPC请求缓冲区错误漏洞 — n/a 9.8 - 2008-10-23
CVE-2008-3919 JustSystems Ichitaro JTD文件代码执行漏洞 — n/a 7.8 - 2008-09-04
CVE-2008-3873 Adobe Flash Player System.setClipboard方式 跨站脚本攻击漏洞 — n/a 8.2 - 2008-08-29
CVE-2008-3704 Microsoft 多个产品中 Msmask32.ocx 栈溢出漏洞 — n/a 9.8 - 2008-08-18
CVE-2008-3648 Microsoft Windows 远程代码执行漏洞 — n/a 8.8 - 2008-08-12
CVE-2008-2244 Microsoft Word智能标签无效长度处理内存破坏漏洞(MS08-042) — n/a 7.8 - 2008-07-09
CVE-2008-1841 Coppermine Photo Gallery bridge/coppermine.inc.php文件SQL注入漏洞 — n/a 8.1 - 2008-04-16
CVE-2008-1092 Microsoft Jet数据库引擎MDB文件解析远程栈溢出漏洞 — n/a 7.8 - 2008-03-25
CVE-2008-0647 Ourgame GLWorld 'HanGamePlugincn18.dll' ActiveX Control 多个缓冲区溢出漏洞 — n/a 8.8 - 2008-02-07
CVE-2007-6436 Justsystem Ichitaro JSGCI.DLL 缓冲区溢出漏洞 — n/a 7.8 - 2007-12-18
CVE-2007-5807 超星阅览器Pdg2 ActiveX控件栈溢出漏洞 — n/a 9.8 - 2007-11-05
CVE-2007-5722 联众ConnectAndEnterRoom ActiveX控件栈溢出漏洞 — n/a 9.8 - 2007-10-30
CVE-2007-5587 Macrovision SafeDisc SecDRV.SYS驱动本地权限提升漏洞(MS07-067) — n/a 8.4 - 2007-10-19
CVE-2007-4428 Lhaz压缩文档处理远程代码执行漏洞 — n/a 9.8 - 2007-08-20
CVE-2007-4429 Skype未明漏洞 — n/a 7.5 - 2007-08-20
CVE-2007-4246 JustSystem Ichitaro 未明代码执行漏洞 — n/a 7.8 - 2007-08-08
CVE-2006-4326 Justsystem Ichitaro 和Government Unicode堆栈缓冲区溢出漏洞 — n/a 7.8 - 2006-08-24
CVE-2005-4560 Microsoft Windows图形渲染引擎WMF格式代码执行漏洞 — n/a 7.8 - 2005-12-28

Vulnerabilities classified as state:in-the-wild represent 412 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.