一线运维实战手记 · 云计算 · 数据库 · 故障排查
首页 / 漏洞情报库

🛡️ 漏洞情报库(CVE 查询与修复方法)

每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息,含漏洞说明、受影响产品、修复方法(补丁/升级版本)。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。

共 46313 条漏洞
CVE等级CVSS发布时间说明受影响修复方法
CVE-2026-85738 MEDIUM 6.3 2026-09-24 TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/ liketrek TREK 请参考厂商官方公告并升级修复。官方说明:https://github.com/liketrek/TREK/commit/
CVE-2026-82371 待定 待定 2026-09-24 Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service lo Brocade SANnav 请参考厂商官方公告并升级修复。官方说明:https://support.broadcom.com/web/ecx/sup
CVE-2026-82157 HIGH 8.3 2026-09-24 Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Cer Dell ThinOS 10 受影响版本 < SecurityAddon_2605.10.2766_T10,请升级到修复版本。
CVE-2026-81473 HIGH 8.1 2026-09-24 Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authoriza Dell Rugged Control Center (RCC) 受影响版本 < 5.2.206,请升级到修复版本。
CVE-2026-81455 HIGH 8.6 2026-09-24 Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authen Dell ThinOS 10 受影响版本 < SecurityAddon_2605.10.2766_T10,请升级到修复版本。
CVE-2026-77321 MEDIUM 4.3 2026-09-24 TREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in serve mauriceboe TREK 请参考厂商官方公告并升级修复。官方说明:https://github.com/liketrek/TREK/commit/
CVE-2026-77320 MEDIUM 5.3 2026-09-24 TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/se mauriceboe TREK 请参考厂商官方公告并升级修复。官方说明:https://github.com/liketrek/TREK/commit/
CVE-2026-77294 HIGH 8.1 2026-09-24 TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user mauriceboe TREK 请参考厂商官方公告并升级修复。官方说明:https://github.com/liketrek/TREK/commit/
CVE-2026-77293 HIGH 7.1 2026-09-24 TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/coll mauriceboe TREK 请参考厂商官方公告并升级修复。官方说明:https://github.com/liketrek/TREK/commit/
CVE-2026-65827 MEDIUM 6.5 2026-09-24 Docmost is open-source collaborative wiki and documentation software. From 0.21.0 until 0. docmost 请参考厂商官方公告并升级修复。官方说明:https://github.com/docmost/docmost/commi
CVE-2026-62286 MEDIUM 4.3 2026-09-24 Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in in amir20 dozzle 请参考厂商官方公告并升级修复。官方说明:https://github.com/amir20/dozzle/commit/
CVE-2026-61825 HIGH 8.7 2026-09-24 code16 Sharp is a Laravel-based framework for building content-management and administrati code16 sharp 请参考厂商官方公告并升级修复。官方说明:https://github.com/code16/sharp/commit/e
CVE-2026-61823 HIGH 7.3 2026-09-24 code16 Sharp is a Laravel-based framework for building content-management and administrati code16 sharp 请参考厂商官方公告并升级修复。官方说明:https://github.com/code16/sharp/commit/e
CVE-2026-57440 HIGH 7.5 2026-09-24 The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev StarCitizenWiki mediawiki-extensions-Emb 请参考厂商官方公告并升级修复。官方说明:https://github.com/StarCitizenWiki/media
CVE-2026-56792 MEDIUM 4.4 2026-09-24 Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authoriza Dell Rugged Control Center (RCC) 受影响版本 < 5.2.206,请升级到修复版本。
CVE-2026-52853 MEDIUM 5.2 2026-09-24 Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an docmost 请参考厂商官方公告并升级修复。官方说明:https://github.com/docmost/docmost/commi
CVE-2026-52850 MEDIUM 4.3 2026-09-24 Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an docmost 请参考厂商官方公告并升级修复。官方说明:https://github.com/docmost/docmost/commi
CVE-2026-48073 MEDIUM 4.3 2026-09-24 Docmost is open-source collaborative wiki and documentation software. From 0.70.0 until 0. docmost 请参考厂商官方公告并升级修复。官方说明:https://github.com/docmost/docmost/commi
CVE-2026-48072 MEDIUM 5.3 2026-09-24 Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the docmost 请参考厂商官方公告并升级修复。官方说明:https://github.com/docmost/docmost/commi
CVE-2026-48070 HIGH 7.1 2026-09-24 Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, aut docmost 请参考厂商官方公告并升级修复。官方说明:https://github.com/docmost/docmost/commi
💡 说明:数据源为 NVD、CISA(在野利用)、微软等官方公开情报,每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入,描述以英文原版为准,可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索,具体请以厂商官方公告为准。