一线运维实战手记 · 云计算 · 数据库 · 故障排查
首页 / 漏洞情报库

🛡️ 漏洞情报库(CVE 查询与修复方法)

每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息,含漏洞说明、受影响产品、修复方法(补丁/升级版本)。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。

共 15900 条漏洞
CVE等级CVSS发布时间说明受影响修复方法
CVE-2026-107355 待定 待定 2026-10-07 Rejected reason: ** This candidate has been removed by an organization.
CVE-2026-34499 待定 待定 2026-10-07 Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Se Johnson Controls ADVMS 受影响版本 < 3.10,请升级到修复版本。
CVE-2026-97714 待定 待定 2026-10-07 CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access s Absolute Security Secure Access 受影响版本 < 14.60,请升级到修复版本。
CVE-2026-97715 待定 待定 2026-10-07 CVE-2026-97715 is a vulnerability in the client registration process of Secure Access serv Absolute Security Secure Access 受影响版本 < 14.60,请升级到修复版本。
CVE-2026-97716 待定 待定 2026-10-07 CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access ser Absolute Security Secure Access 受影响版本 < 14.60,请升级到修复版本。
CVE-2026-97717 待定 待定 2026-10-07 CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior t Absolute Security Secure Access 受影响版本 < 14.60,请升级到修复版本。
CVE-2026-107224 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107225 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107313 MEDIUM 4.2 2026-10-07 pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous conte pgjdbc 受影响版本 < 42.7.6,请升级到修复版本。
CVE-2026-107161 HIGH 7.5 2026-10-07 A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function Red Hat Red Hat Enterprise Linux 10, Red 请参考厂商官方公告并升级修复。官方说明:https://access.redhat.com/security/cve/C
CVE-2026-107176 MEDIUM 6.8 2026-10-07 A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader Red Hat Red Hat OpenShift Container Plat 请参考厂商官方公告并升级修复。官方说明:https://access.redhat.com/security/cve/C
CVE-2026-107353 MEDIUM 6.5 2026-10-07 traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and ljharb traverse 受影响版本 < 0.6.12,请升级到修复版本。
CVE-2026-107218 MEDIUM 5.3 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107219 HIGH 7.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107220 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107221 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107222 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107223 待定 待定 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107212 HIGH 7.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107213 待定 待定 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
‹1560…561562563564565566795…›共 795 页
💡 说明:数据源为 NVD、CISA(在野利用)、微软等官方公开情报,每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入,描述以英文原版为准,可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索,具体请以厂商官方公告为准。