首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 15917 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-107701 | HIGH | 8.2 | 2026-10-08 | dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attacker | ntharim dot-access | 受影响版本 ≤ 1.0.0，请升级到修复版本。 |
| CVE-2026-107385 | HIGH | 7.4 | 2026-10-08 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB | mariadb-corporation mariadb-connector-no | 请参考厂商官方公告并升级修复。官方说明：https://github.com/mariadb-corporation/m |
| CVE-2026-107386 | 待定 | 待定 | 2026-10-08 | amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-107387 | MEDIUM | 6.2 | 2026-10-08 | music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the | Borewit music-metadata | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Borewit/music-metadat |
| CVE-2026-107382 | MEDIUM | 5.9 | 2026-10-08 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB | mariadb-corporation mariadb-connector-no | 请参考厂商官方公告并升级修复。官方说明：https://github.com/mariadb-corporation/m |
| CVE-2026-107383 | HIGH | 7.5 | 2026-10-08 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB | mariadb-corporation mariadb-connector-no | 请参考厂商官方公告并升级修复。官方说明：https://github.com/mariadb-corporation/m |
| CVE-2026-107384 | HIGH | 8.1 | 2026-10-08 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB | mariadb-corporation mariadb-connector-no | 请参考厂商官方公告并升级修复。官方说明：https://github.com/mariadb-corporation/m |
| CVE-2026-107322 | HIGH | 7.8 | 2026-10-08 | An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws p | aws databases-on-aws | 受影响版本 < 1.7.1，请升级到修复版本。 |
| CVE-2026-107324 | MEDIUM | 5.9 | 2026-10-08 | An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a run | MongoDB Go Driver | 受影响版本 < 2.9.0，请升级到修复版本。 |
| CVE-2026-107325 | MEDIUM | 5.9 | 2026-10-08 | Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bo | MongoDB Go Driver | 受影响版本 < 2.9.2，请升级到修复版本。 |
| CVE-2026-106437 | MEDIUM | 6.2 | 2026-10-08 | The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than t | MongoDB C Driver | 受影响版本 < 2.5.6，请升级到修复版本。 |
| CVE-2026-106438 | MEDIUM | 4 | 2026-10-08 | An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept c | MongoDB C Driver | 受影响版本 < 2.5.6，请升级到修复版本。 |
| CVE-2026-106430 | MEDIUM | 5.9 | 2026-10-08 | The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and co | MongoDB C++ Driver | 受影响版本 < 4.6.1，请升级到修复版本。 |
| CVE-2026-106431 | MEDIUM | 5.7 | 2026-10-08 | An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one | MongoDB C Driver | 受影响版本 < 2.5.6，请升级到修复版本。 |
| CVE-2026-106433 | HIGH | 8.8 | 2026-10-08 | Improper state management in MongoDB libmongocrypt can cause provider-specific data to be | MongoDB libmongocrypt | 受影响版本 < 1.20.5，请升级到修复版本。 |
| CVE-2026-106434 | MEDIUM | 4.3 | 2026-10-08 | The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encr | MongoDB libmongocrypt | 受影响版本 < 1.20.5，请升级到修复版本。 |
| CVE-2026-105452 | 待定 | 待定 | 2026-10-08 | Docker Sandboxes could forward a client-supplied credential alongside a credential injecte | Docker Docker Sandboxes | 受影响版本 < 0.43.0，请升级到修复版本。 |
| CVE-2026-105570 | 待定 | 待定 | 2026-10-08 | Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding wh | Docker Docker Sandboxes | 受影响版本 < 0.47.0，请升级到修复版本。 |
| CVE-2026-106428 | LOW | 3.7 | 2026-10-08 | An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can | MongoDB C Driver | 受影响版本 < 2.4.0，请升级到修复版本。 |
| CVE-2026-106429 | MEDIUM | 6.5 | 2026-10-08 | An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause | MongoDB libmongocrypt | 受影响版本 < 1.20.5，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。