首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 4975 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-95180 | MEDIUM | 5.5 | 2026-10-15 | An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to o | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/FFG0d/security-adviso |
| CVE-2026-9703 | HIGH | 7.1 | 2026-10-15 | Grafana's data source proxy did not apply role-based access control to write requests forw | Grafana Grafana Enterprise, Grafana Graf | 受影响版本 ≤ 13.0.3，请升级到修复版本。 |
| CVE-2026-100347 | MEDIUM | 5.3 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.V | getkin kin-openapi | 请参考厂商官方公告并升级修复。官方说明：https://github.com/getkin/kin-openapi/co |
| CVE-2026-100348 | MEDIUM | 5.3 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader | getkin kin-openapi | 请参考厂商官方公告并升级修复。官方说明：https://github.com/getkin/kin-openapi/co |
| CVE-2026-100349 | 待定 | 待定 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.146.0, openapi3filter.V | getkin kin-openapi | 请参考厂商官方公告并升级修复。官方说明：https://github.com/getkin/kin-openapi/co |
| CVE-2026-63130 | MEDIUM | 5.5 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 9.3.10, a | espocrm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/espocrm/espocrm/commi |
| CVE-2026-77460 | MEDIUM | 6.5 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a | espocrm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/espocrm/espocrm/commi |
| CVE-2026-79838 | HIGH | 7.3 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruptio | Hewlett Packard Enterprise HPE NonStop O | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-79839 | HIGH | 7.3 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, | Hewlett Packard Enterprise HPE NonStop O | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-79840 | HIGH | 7.3 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resul | Hewlett Packard Enterprise HPE NonStop X | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-79841 | MEDIUM | 5.8 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds m | Hewlett Packard Enterprise HPE NonStop R | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-79843 | MEDIUM | 6.5 | 2026-10-15 | A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain cond | Hewlett Packard Enterprise HPE NonStop S | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-95179 | HIGH | 7.5 | 2026-10-15 | An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to caus | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/FFG0d/security-adviso |
| CVE-2026-55154 | MEDIUM | 5.4 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, ap | espocrm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/espocrm/espocrm/commi |
| CVE-2026-55184 | LOW | 3.5 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a | espocrm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/espocrm/espocrm/commi |
| CVE-2026-59994 | MEDIUM | 4.3 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an | espocrm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/espocrm/espocrm/commi |
| CVE-2026-47168 | CRITICAL | 9.1 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an | espocrm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/espocrm/espocrm/commi |
| CVE-2026-53574 | HIGH | 7.6 | 2026-10-15 | EspoCRM is an open source customer relationship management application. From 8.1.0 until 9 | espocrm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/espocrm/espocrm/commi |
| CVE-2026-53575 | LOW | 2.7 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an | espocrm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/espocrm/espocrm/commi |
| CVE-2026-110746 | HIGH | 7.8 | 2026-10-15 | A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to | TotalSecurity TotalAV | 受影响版本 ≤ 7.1.17，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。