首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16605 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-59347 | HIGH | 8.1 | 2026-10-07 | VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. | VMware VMware Workstation, VMware VMware | 受影响版本 ≤ 26H1，请升级到修复版本。 |
| CVE-2026-103323 | MEDIUM | 5.9 | 2026-10-07 | The Integration for Epos Now and WooCommerce WordPress plugin before 4.11.2 does not perfo | Unknown Integration for Epos Now and Woo | 受影响版本 < 4.11.2，请升级到修复版本。 |
| CVE-2026-103378 | MEDIUM | 6.5 | 2026-10-07 | The Geliver Akıllı Kargo Pazaryeri WordPress plugin before 3.1.1 does not prevent unauthen | Unknown Geliver Akıllı Kargo Pazaryeri | 受影响版本 < 3.1.1，请升级到修复版本。 |
| CVE-2026-103681 | MEDIUM | 4.3 | 2026-10-07 | The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check i | Unknown Frontend Dashboard | 受影响版本 < 3.0.0，请升级到修复版本。 |
| CVE-2026-104049 | MEDIUM | 4.3 | 2026-10-07 | The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object | Unknown Academy LMS | 受影响版本 < 4.0.0，请升级到修复版本。 |
| CVE-2026-104050 | MEDIUM | 4.3 | 2026-10-07 | The Academy LMS WordPress plugin before 4.0.0 does not verify that a quiz question belong | Unknown Academy LMS | 受影响版本 < 4.0.0，请升级到修复版本。 |
| CVE-2026-104651 | MEDIUM | 4.3 | 2026-10-07 | The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify autho | Unknown Yaad Sarig Payment Gateway For W | 受影响版本 < 2.2.13，请升级到修复版本。 |
| CVE-2026-104652 | MEDIUM | 6.8 | 2026-10-07 | The Envira Gallery WordPress plugin before 1.16.1 does not sanitise and escape a gallery | Unknown Envira Gallery | 受影响版本 < 1.16.1，请升级到修复版本。 |
| CVE-2026-103868 | MEDIUM | 6.5 | 2026-10-07 | A flaw was found in pulp-container when it authenticates to an upstream registry. Basic an | Red Hat Red Hat Ansible Automation Platf | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-103869 | MEDIUM | 6.5 | 2026-10-07 | A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access | Red Hat Red Hat Ansible Automation Platf | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-102173 | HIGH | 7.2 | 2026-10-07 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vu | themeum Kirki – Freeform Page Builder, W | 受影响版本 ≤ 6.3.1，请升级到修复版本。 |
| CVE-2026-106061 | MEDIUM | 5.5 | 2026-10-07 | A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnai | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-14911 | 待定 | 待定 | 2026-10-07 | Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in AS | ASUS Router | 请参考厂商官方公告并升级修复。官方说明：https://www.asus.com/security-advisory/ |
| CVE-2026-16516 | 待定 | 待定 | 2026-10-07 | wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob m | wolfSSL Inc. wolfSSH | 受影响版本 ≤ 1.5.0，请升级到修复版本。 |
| CVE-2026-81535 | 待定 | 待定 | 2026-10-07 | In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates | wolfSSL Inc. wolfSSH | 受影响版本 ≤ 1.5.0，请升级到修复版本。 |
| CVE-2026-83540 | 待定 | 待定 | 2026-10-07 | When password or public key authentication is used with the Windows port of wolfSSHd, the | wolfSSL wolfSSH | 受影响版本 ≤ 1.5.0，请升级到修复版本。 |
| CVE-2026-83742 | 待定 | 待定 | 2026-10-07 | Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 thr | wolfSSL Inc. wolfSSH | 受影响版本 ≤ 1.5.0，请升级到修复版本。 |
| CVE-2026-84897 | 待定 | 待定 | 2026-10-07 | src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman | wolfSSL Inc. wolfSSH | 受影响版本 ≤ 1.5.0，请升级到修复版本。 |
| CVE-2026-19572 | 待定 | 待定 | 2026-10-07 | A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerabili | Flexera FlexNet Publisher | 受影响版本 ≤ 11.19.11，请升级到修复版本。 |
| CVE-2026-97680 | HIGH | 8.3 | 2026-10-07 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtai | IBM Langflow OSS | 受影响版本 ≤ 1.12.2，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。