首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16478 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-105254 | MEDIUM | 6.3 | 2026-10-05 | A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an | itsourcecode Online Admission System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/RestXtra/Submit/issue |
| CVE-2026-105263 | MEDIUM | 4.7 | 2026-10-05 | A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the f | n/a Shaarli | 请参考厂商官方公告并升级修复。官方说明：https://github.com/shaarli/Shaarli/ |
| CVE-2026-105284 | CRITICAL | 10 | 2026-10-05 | A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted elem | Totolink A3002MU | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/H3rmesk1t/ac6e91 |
| CVE-2026-19184 | HIGH | 8.4 | 2026-10-05 | The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the caller-supplied sequ | zephyrproject zephyr | 受影响版本 < 4.5.0，请升级到修复版本。 |
| CVE-2026-105062 | MEDIUM | 4.3 | 2026-10-05 | Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Expl | Brandtoss WP Admin Audit | 受影响版本 ≤ 1.2.17，请升级到修复版本。 |
| CVE-2026-105064 | MEDIUM | 6.5 | 2026-10-05 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnera | Unlimited Elements Unlimited Elements Fo | 受影响版本 ≤ 2.0.22，请升级到修复版本。 |
| CVE-2026-105068 | MEDIUM | 5.3 | 2026-10-05 | Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager | Pixelite Events Manager | 受影响版本 ≤ 7.4.5，请升级到修复版本。 |
| CVE-2026-105069 | MEDIUM | 6.5 | 2026-10-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | Nikki Blight QR Redirector | 受影响版本 ≤ 2.0.5，请升级到修复版本。 |
| CVE-2026-104806 | 待定 | 待定 | 2026-10-05 | DigitalCanion has discovered a path traversal vulnerability that allows an attacker to acc | Mitel Mitel MiVoice Office 400 | 请参考厂商官方公告并升级修复。官方说明：https://digitalcanion.com/en/security-re |
| CVE-2026-104807 | 待定 | 待定 | 2026-10-05 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows | Mitel Mitel MiVoice Office 400 | 请参考厂商官方公告并升级修复。官方说明：https://digitalcanion.com/en/security-re |
| CVE-2026-104808 | 待定 | 待定 | 2026-10-05 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows | Mitel Mitel MiVoice Office 400 | 请参考厂商官方公告并升级修复。官方说明：https://digitalcanion.com/en/security-re |
| CVE-2026-104809 | 待定 | 待定 | 2026-10-05 | DigitalCanion has discovered a vulnerability that allows an attacker to cause the system t | Mitel Mitel MiVoice Office 400 | 请参考厂商官方公告并升级修复。官方说明：https://digitalcanion.com/en/security-re |
| CVE-2026-104810 | 待定 | 待定 | 2026-10-05 | This vulnerability allows remote attackers to delete sensitive files on vulnerable install | Mitel Mitel MiVoice Office 400 | 请参考厂商官方公告并升级修复。官方说明：https://digitalcanion.com/en/security-re |
| CVE-2026-104811 | 待定 | 待定 | 2026-10-05 | DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute ar | Mitel Mitel MiVoice Office 400 | 请参考厂商官方公告并升级修复。官方说明：https://digitalcanion.com/en/security-re |
| CVE-2026-105055 | MEDIUM | 5.3 | 2026-10-05 | Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiti | WP Mailster | 受影响版本 ≤ 1.9.0.0，请升级到修复版本。 |
| CVE-2026-105056 | MEDIUM | 6.5 | 2026-10-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | impleCode eCommerce Product Catalog | 受影响版本 ≤ 3.6.2，请升级到修复版本。 |
| CVE-2026-105060 | MEDIUM | 6.5 | 2026-10-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | Themepoints Logo Showcase | 受影响版本 ≤ 4.0.4，请升级到修复版本。 |
| CVE-2026-104675 | MEDIUM | 4.3 | 2026-10-05 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets | Liquid Web / StellarWP Event Tickets | 受影响版本 ≤ 5.30.0，请升级到修复版本。 |
| CVE-2026-104706 | 待定 | 待定 | 2026-10-05 | DigitalCanion has discovered a path traversal vulnerability that allows to view or downloa | Mitel Mitel MiVoice Office 400 | 请参考厂商官方公告并升级修复。官方说明：https://digitalcanion.com/en/security-re |
| CVE-2026-104805 | 待定 | 待定 | 2026-10-05 | DigitalCanion has discovered a vulnerability in the backup restoration functionality that | Mitel Mitel MiVoice Office 400 | 请参考厂商官方公告并升级修复。官方说明：https://digitalcanion.com/en/security-re |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。