首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 4649 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-11319 | MEDIUM | 6.2 | 2026-10-19 | TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnera | TickTick Limited TickTick for Android | 请参考厂商官方公告并升级修复。官方说明：https://github.com/actuator/com.ticktick |
| CVE-2026-6930 | LOW | 3.7 | 2026-10-19 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that coul | IBM Concert | 受影响版本 ≤ 3.0.0，请升级到修复版本。 |
| CVE-2023-38375 | MEDIUM | 6.1 | 2026-10-19 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vuln | IBM Cloud Pak System | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2025-52290 | HIGH | 7.5 | 2026-10-19 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg ve | n/a | 请参考厂商官方公告并升级修复。官方说明：https://ffmpeg.org |
| CVE-2025-55654 | 待定 | 待定 | 2026-10-19 | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GP | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/commit/0ccd |
| CVE-2025-55667 | MEDIUM | 5.5 | 2026-10-19 | A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Bo | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/commit/e6d0 |
| CVE-2025-60480 | MEDIUM | 5.5 | 2026-10-19 | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/commit/e02d |
| CVE-2026-12727 | MEDIUM | 4.3 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause potential process instability due to | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-14511 | MEDIUM | 6.5 | 2026-10-19 | IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of serv | IBM MQ | 受影响版本 ≤ 9.4.5.1，请升级到修复版本。 |
| CVE-2026-15661 | MEDIUM | 5.3 | 2026-10-19 | IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log mes | IBM Concert | 受影响版本 ≤ 3.0.0，请升级到修复版本。 |
| CVE-2026-12148 | HIGH | 7.5 | 2026-10-19 | IBM MQ Operator could allow an authenticated attacker to cause a denial of service or pote | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-12155 | MEDIUM | 6.5 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending speci | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-12343 | MEDIUM | 6.5 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-12350 | MEDIUM | 6.5 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending a spe | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-12660 | LOW | 2.7 | 2026-10-19 | IBM MQ Web Console could allow an authenticated administrator to write files outside the i | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-12665 | HIGH | 8.1 | 2026-10-19 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overf | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-12669 | LOW | 3.1 | 2026-10-19 | IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when se | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-12670 | MEDIUM | 5.3 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service through a specia | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-112193 | LOW | 3.7 | 2026-10-19 | A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown func | Webkul Aureus ERP | 请参考厂商官方公告并升级修复。官方说明：https://github.com/KaranParelkar/Auresus |
| CVE-2026-112195 | MEDIUM | 4.7 | 2026-10-19 | A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unk | n/a FusionPBX | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jasonbernier/Dialplan |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。