首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 46044 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-95926 | HIGH | 7.3 | 2026-09-23 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. Th | SourceCodester Online Reviewer Managemen | 请参考厂商官方公告并升级修复。官方说明：https://github.com/huliangjia/cve/issues |
| CVE-2026-96273 | MEDIUM | 5.5 | 2026-09-23 | Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOp | NationalSecurityAgency ghidra | 受影响版本 < 12.1.4，请升级到修复版本。 |
| CVE-2026-96272 | HIGH | 7.5 | 2026-09-23 | ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo | MacWarrior clipbucket-v5 | 受影响版本 < 5.5.3-#182，请升级到修复版本。 |
| CVE-2026-96271 | HIGH | 7.1 | 2026-09-23 | Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum G | photoview | 受影响版本 ≤ 2.4.0，请升级到修复版本。 |
| CVE-2026-95925 | HIGH | 7.3 | 2026-09-23 | A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The aff | SourceCodester Online Reviewer Managemen | 请参考厂商官方公告并升级修复。官方说明：https://github.com/huliangjia/cve/issues |
| CVE-2026-95924 | HIGH | 7.3 | 2026-09-23 | A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Im | SourceCodester Online Reviewer Managemen | 请参考厂商官方公告并升级修复。官方说明：https://github.com/huliangjia/cve/issues |
| CVE-2026-95897 | MEDIUM | 5.5 | 2026-09-23 | A security vulnerability has been detected in Dask up to 2026.8.0. This affects the functi | n/a Dask | 请参考厂商官方公告并升级修复。官方说明：https://github.com/dask/dask/ |
| CVE-2026-95868 | MEDIUM | 6.3 | 2026-09-23 | A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e | AdithyaYelloju Restaurant-Management-Sys | 请参考厂商官方公告并升级修复。官方说明：https://github.com/AdithyaYelloju/Restau |
| CVE-2026-95833 | MEDIUM | 6.3 | 2026-09-23 | A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an | itsourcecode Leave Management System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ltranquility/submit_r |
| CVE-2026-95830 | MEDIUM | 6.3 | 2026-09-23 | A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb | theRealSain Pixtream | 请参考厂商官方公告并升级修复。官方说明：https://github.com/yingxiujie/cve/issues |
| CVE-2026-95829 | MEDIUM | 6.3 | 2026-09-23 | A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability | TDuckCloud tduck-platform | 请参考厂商官方公告并升级修复。官方说明：https://github.com/TDuckCloud/tduck-surv |
| CVE-2026-94367 | HIGH | 7.2 | 2026-09-23 | OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command inject | OpenEye Apex Network Video Recorder (NVR | 请参考厂商官方公告并升级修复。官方说明：https://portal.openeye.net/updates/issue |
| CVE-2026-92930 | MEDIUM | 6.2 | 2026-09-23 | OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator passwor | OpenEye Apex Network Video Recorder (NVR | 请参考厂商官方公告并升级修复。官方说明：https://portal.openeye.net/updates/issue |
| CVE-2026-92929 | MEDIUM | 5.3 | 2026-09-23 | OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For hea | OpenEye Apex Network Video Recorder (NVR | 请参考厂商官方公告并升级修复。官方说明：https://portal.openeye.net/updates/issue |
| CVE-2026-92928 | MEDIUM | 6.5 | 2026-09-23 | OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocum | OpenEye Apex Network Video Recorder (NVR | 请参考厂商官方公告并升级修复。官方说明：https://portal.openeye.net/updates/issue |
| CVE-2026-95828 | MEDIUM | 4.3 | 2026-09-22 | A vulnerability was determined in Mstfakts College-Management-System. This affects the fun | Mstfakts College-Management-System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Mstfakts/College-Mana |
| CVE-2026-95820 | MEDIUM | 6.3 | 2026-09-22 | A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069 | anirbandutta9 College-Notes-Gallery | 请参考厂商官方公告并升级修复。官方说明：https://github.com/yingxiujie/cve/issues |
| CVE-2026-61685 | HIGH | 7.5 | 2026-09-22 | ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress | fecommunity reactpress | 请参考厂商官方公告并升级修复。官方说明：https://github.com/fecommunity/reactpres |
| CVE-2026-57576 | MEDIUM | 6.5 | 2026-09-22 | plone.app.dexterity is a content-type system for the Plone content management system, and | plone plone.app.dexterity, plone plone.a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/plone/plone.app.conte |
| CVE-2026-18176 | HIGH | 7.4 | 2026-09-22 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker | IBM Financial Transaction Manager (FTM) | 受影响版本 ≤ 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.08180 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。