首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16478 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-103078 | MEDIUM | 4.3 | 2026-10-05 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-su | Ahmad JS Help Desk | 受影响版本 ≤ 4.0.0，请升级到修复版本。 |
| CVE-2026-103079 | MEDIUM | 5.4 | 2026-10-05 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-su | Ahmad JS Help Desk | 受影响版本 ≤ 4.0.0，请升级到修复版本。 |
| CVE-2026-103084 | MEDIUM | 6.5 | 2026-10-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | LeapWorx Premium Addons for Elementor | 受影响版本 ≤ 4.11.109，请升级到修复版本。 |
| CVE-2026-103335 | 待定 | 待定 | 2026-10-05 | Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Vide | Deepen Bajracharya Video Conferencing wi | 受影响版本 ≤ 4.6.10，请升级到修复版本。 |
| CVE-2026-100102 | 待定 | 待定 | 2026-10-05 | Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug | Perforce P4 (Helix Core) | 受影响版本 ≤ 2026.4.1，请升级到修复版本。 |
| CVE-2026-19954 | MEDIUM | 5.4 | 2026-10-05 | Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that quer | 受影响版本 < 2.99044，请升级到修复版本。 | |
| CVE-2026-105247 | HIGH | 7.3 | 2026-10-05 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. Th | SourceCodester Online Reviewer Managemen | 请参考厂商官方公告并升级修复。官方说明：https://github.com/memory0433/cve/issues |
| CVE-2026-105248 | MEDIUM | 6.3 | 2026-10-05 | A security flaw has been discovered in vgmstream up to r2117. This affects the function pa | n/a vgmstream | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vgmstream/vgmstream/ |
| CVE-2026-105249 | MEDIUM | 4.8 | 2026-10-05 | A weakness has been identified in vgmstream up to r2117. This impacts the function make_gr | n/a vgmstream | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vgmstream/vgmstream/ |
| CVE-2026-105250 | MEDIUM | 4.3 | 2026-10-05 | A security vulnerability has been detected in vgmstream up to r2117. Affected is the funct | n/a vgmstream | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vgmstream/vgmstream/ |
| CVE-2026-105314 | HIGH | 7.5 | 2026-10-05 | Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal i | Papermerge | 请参考厂商官方公告并升级修复。官方说明：https://github.com/kashishtopi/cve-pocs/ |
| CVE-2026-13607 | MEDIUM | 5.9 | 2026-10-05 | The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uplo | Unknown File Uploads Addon for WooCommer | 受影响版本 ≤ 1.7.6，请升级到修复版本。 |
| CVE-2026-78371 | MEDIUM | 5.9 | 2026-10-05 | The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that | Unknown File Uploads Addon for WooCommer | 受影响版本 < 1.7.6，请升级到修复版本。 |
| CVE-2026-84169 | MEDIUM | 5.3 | 2026-10-05 | The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a paym | Unknown UPI QR Code Payment Gateway | 受影响版本 ≤ 1.4.3，请升级到修复版本。 |
| CVE-2017-20285 | CRITICAL | 9.1 | 2026-10-05 | YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method o | 受影响版本 < 1.30，请升级到修复版本。 | |
| CVE-2019-25777 | HIGH | 7.3 | 2026-10-05 | YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any pa | 受影响版本 < 1.27_001，请升级到修复版本。 | |
| CVE-2026-100727 | MEDIUM | 5.3 | 2026-10-05 | An improper access control vulnerability exists in GROWI, which allow an unauthenticated a | GROWI, Inc. GROWI | 受影响版本 < v7.5.5，请升级到修复版本。 |
| CVE-2026-105238 | HIGH | 7.3 | 2026-10-05 | A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects | ChatGPTNextWeb NextChat | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ChatGPTNextWeb/NextCh |
| CVE-2026-105245 | LOW | 3.7 | 2026-10-05 | A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the | sgl-project sglang | 请参考厂商官方公告并升级修复。官方说明：https://github.com/sgl-project/sglang/ |
| CVE-2026-105246 | HIGH | 7.3 | 2026-10-05 | A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacte | SourceCodester Online Reviewer Managemen | 请参考厂商官方公告并升级修复。官方说明：https://github.com/memory0433/cve/issues |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。