首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16593 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-111171 | MEDIUM | 5.4 | 2026-10-15 | Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request for | ethereum web3.py | 受影响版本 ≤ 8.0.0，请升级到修复版本。 |
| CVE-2026-111163 | MEDIUM | 5.5 | 2026-10-15 | WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi | Mindwerks WildMIDI | 受影响版本 ≤ 0.5.0，请升级到修复版本。 |
| CVE-2026-111164 | MEDIUM | 5.5 | 2026-10-15 | UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amif | UADE | 受影响版本 ≤ 3.05，请升级到修复版本。 |
| CVE-2026-111165 | MEDIUM | 5.5 | 2026-10-15 | libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTr | sezero libmikmod | 受影响版本 ≤ 3.3.15，请升级到修复版本。 |
| CVE-2026-111166 | MEDIUM | 5.5 | 2026-10-15 | libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load( | sezero libmikmod | 受影响版本 ≤ 3.3.15，请升级到修复版本。 |
| CVE-2026-111167 | MEDIUM | 6.1 | 2026-10-15 | GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the A | GNU LibreDWG | 受影响版本 ≤ 0.14.8612，请升级到修复版本。 |
| CVE-2026-111168 | MEDIUM | 5.4 | 2026-10-15 | LibreDesk before 2.9.0-rc.8 contains a stored cross-site scripting vulnerability that allo | abhinavxd libredesk | 受影响版本 < 2.9.0-rc.8，请升级到修复版本。 |
| CVE-2026-111169 | LOW | 3.1 | 2026-10-15 | La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows aut | suitenumerique docs | 受影响版本 ≤ 6.0.0，请升级到修复版本。 |
| CVE-2026-111170 | MEDIUM | 6.5 | 2026-10-15 | kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in Matplot | kedro-org kedro-datasets | 受影响版本 ≤ 9.6.0，请升级到修复版本。 |
| CVE-2026-111156 | MEDIUM | 6.1 | 2026-10-15 | libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont | sezero libtimidity | 受影响版本 ≤ 0.2.8，请升级到修复版本。 |
| CVE-2026-111157 | MEDIUM | 6.1 | 2026-10-15 | SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block | SoX | 受影响版本 ≤ 14.4.2，请升级到修复版本。 |
| CVE-2026-111158 | MEDIUM | 5.5 | 2026-10-15 | EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_ | EarthScope libmseed | 受影响版本 ≤ 3.5.4，请升级到修复版本。 |
| CVE-2026-111159 | MEDIUM | 6.1 | 2026-10-15 | libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_ext | libyal libewf | 受影响版本 ≤ 20260924，请升级到修复版本。 |
| CVE-2026-111160 | HIGH | 7.5 | 2026-10-15 | LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthentica | ModelTC LightLLM | 受影响版本 ≤ 1.2.0，请升级到修复版本。 |
| CVE-2026-111161 | MEDIUM | 6.1 | 2026-10-15 | libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerab | Wohlstand libADLMIDI | 受影响版本 ≤ 1.6.2.1，请升级到修复版本。 |
| CVE-2026-111162 | MEDIUM | 6.1 | 2026-10-15 | WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser | Mindwerks WildMIDI | 受影响版本 ≤ 0.5.0，请升级到修复版本。 |
| CVE-2026-111148 | MEDIUM | 5.5 | 2026-10-15 | libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows at | libsidplayfp | 受影响版本 ≤ 3.1.1，请升级到修复版本。 |
| CVE-2026-111149 | MEDIUM | 6.1 | 2026-10-15 | FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability | danoli3 FreeImage, FreeImage | 受影响版本 ≤ 3.18.0，请升级到修复版本。 |
| CVE-2026-111150 | MEDIUM | 5.5 | 2026-10-15 | ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability | ValleyBell libvgm | 受影响版本 ≤ a6eed945ecf4e5a25cf82004779c6f7e4fd5c319，请升级到修复版本。 |
| CVE-2026-111151 | MEDIUM | 6.1 | 2026-10-15 | OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K clea | aous72 OpenJPH | 受影响版本 ≤ 0.32.0，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。