首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 17022 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-43851 | 待定 | 待定 | 2026-10-20 | A path traversal vulnerability could allow an authenticated attacker to read arbitrary fil | Advantech ADAM-3600 | 请参考厂商官方公告并升级修复。官方说明：https://www.advantech.com/en/security-ad |
| CVE-2026-43852 | 待定 | 待定 | 2026-10-20 | A vulnerability could allow an authenticated attacker to write files to arbitrary location | Advantech ADAM-3600 | 请参考厂商官方公告并升级修复。官方说明：https://www.advantech.com/en/security-ad |
| CVE-2026-43853 | 待定 | 待定 | 2026-10-20 | A vulnerability could allow an attacker to send a crafted message to trigger an assertion | Advantech ADAM-3600 | 请参考厂商官方公告并升级修复。官方说明：https://www.advantech.com/en/security-ad |
| CVE-2026-112239 | 待定 | 待定 | 2026-10-20 | The extension provides a backend endpoint that writes a submitted value into a submitted f | TYPO3 Extension "TYPO3 AI Integration Ex | 受影响版本 < 14.0.2，请升级到修复版本。 |
| CVE-2026-112240 | 待定 | 待定 | 2026-10-20 | The download link for files uploaded through a form relied on a token that could be predic | TYPO3 Extension "TYPO3 Fluid-Form by cod | 受影响版本 < 5.0.10，请升级到修复版本。 |
| CVE-2026-113378 | MEDIUM | 5.3 | 2026-10-20 | A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an un | mcollina mcp-ripgrep | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/sandh0t/45fdee24 |
| CVE-2026-113381 | HIGH | 7.3 | 2026-10-20 | A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is t | n/a Osclass | 请参考厂商官方公告并升级修复。官方说明：https://vuldb.com/cve/CVE-2026-113381 |
| CVE-2026-113442 | 待定 | 待定 | 2026-10-20 | Values entered by visitors were placed into the HTML summary email without being escaped. | TYPO3 Extension "TYPO3 Fluid-Form by cod | 受影响版本 < 5.0.10，请升级到修复版本。 |
| CVE-2026-113459 | 待定 | 待定 | 2026-10-20 | In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every | TYPO3 Extension "TYPO3 AI Integration Ex | 受影响版本 < 14.0.2，请升级到修复版本。 |
| CVE-2026-113468 | 待定 | 待定 | 2026-10-20 | The payment notification endpoint for PayPal accepts incoming data without verifying that | TYPO3 Extension "TYPO3 Shop by coding.ms | 受影响版本 < 4.9.4，请升级到修复版本。 |
| CVE-2026-43849 | 待定 | 待定 | 2026-10-20 | A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. | Advantech ADAM-3600 | 请参考厂商官方公告并升级修复。官方说明：https://www.advantech.com/en/security-ad |
| CVE-2026-43850 | 待定 | 待定 | 2026-10-20 | A command injection vulnerability could allow an authenticated attacker to achieve root-le | Advantech ADAM-3600 | 请参考厂商官方公告并升级修复。官方说明：https://www.advantech.com/en/security-ad |
| CVE-2026-112070 | 待定 | 待定 | 2026-10-20 | The AJAX routes of the extension do not check whether a backend user has access to the rel | TYPO3 Extension "Analytics" | 受影响版本 < 1.1.1，请升级到修复版本。 |
| CVE-2026-112071 | 待定 | 待定 | 2026-10-20 | The order cancellation function accepts an order identifier from the request and acts on t | TYPO3 Extension "TYPO3 Shop by coding.ms | 受影响版本 < 4.9.4，请升级到修复版本。 |
| CVE-2026-112237 | 待定 | 待定 | 2026-10-20 | The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor | TYPO3 Extension "Kitodo.Presentation" | 受影响版本 < 6.0.1，请升级到修复版本。 |
| CVE-2026-112238 | 待定 | 待定 | 2026-10-20 | The file search of the extension builds its database conditions by wrapping the search ter | TYPO3 Extension "File manager" | 受影响版本 < 3.1.3，请升级到修复版本。 |
| CVE-2026-112066 | 待定 | 待定 | 2026-10-20 | The JSON import of the cookie consent configuration did not respect the backend user's per | TYPO3 Extension "sgalinski Cookie Consen | 受影响版本 < 7.4.6，请升级到修复版本。 |
| CVE-2026-112067 | 待定 | 待定 | 2026-10-20 | The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCH | TYPO3 Extension "Accessible Form Captcha | 受影响版本 < 5.4.2，请升级到修复版本。 |
| CVE-2026-112068 | 待定 | 待定 | 2026-10-20 | The backend module does not check whether a backend user has access to the requested site. | TYPO3 Extension "Analytics" | 受影响版本 < 1.1.1，请升级到修复版本。 |
| CVE-2026-112069 | 待定 | 待定 | 2026-10-20 | The extension no longer applied its access protection to files in file storages that use a | TYPO3 Extension "FAL Protect" | 受影响版本 < 1.8.2，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。