首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45444 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-91087 | HIGH | 7.3 | 2026-09-15 | A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gf_m | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-91086 | MEDIUM | 6.3 | 2026-09-15 | A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-91005 | MEDIUM | 6.3 | 2026-09-15 | A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affe | SourceCodester Online Faculty Clearance | 请参考厂商官方公告并升级修复。官方说明：https://github.com/zzjzzzj389/cve/issues |
| CVE-2026-90711 | CRITICAL | 9.1 | 2026-09-15 | proxy-addr is a Node.js module that determines a request's client address behind trusted r | proxy-addr | 受影响版本 < 2.0.8，请升级到修复版本。 |
| CVE-2026-89141 | MEDIUM | 6.5 | 2026-09-15 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vuln | tigroumeow AI Engine – The Chatbot, AI F | 受影响版本 ≤ 3.7.7，请升级到修复版本。 |
| CVE-2026-75983 | HIGH | 7.5 | 2026-09-15 | The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for Word | arraytics Eventin – Event Calendar, Tick | 受影响版本 ≤ 4.1.23，请升级到修复版本。 |
| CVE-2026-18063 | MEDIUM | 6.4 | 2026-09-15 | The Job Postings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the | blueglassch Job Postings | 受影响版本 ≤ 2.8.1，请升级到修复版本。 |
| CVE-2026-15402 | MEDIUM | 6.4 | 2026-09-15 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin fo | arraytics Eventin – Event Calendar, Tick | 受影响版本 ≤ 4.1.23，请升级到修复版本。 |
| CVE-2026-91004 | HIGH | 7.3 | 2026-09-15 | A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The | SourceCodester Online Faculty Clearance | 请参考厂商官方公告并升级修复。官方说明：https://github.com/zzjzzzj389/cve/issues |
| CVE-2026-91003 | CRITICAL | 9.1 | 2026-09-15 | A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_a | D-Link DI-8300 | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Vivi-Xray/Xray-s-cve- |
| CVE-2026-91002 | MEDIUM | 5.3 | 2026-09-15 | A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affect | stamparm maltrail | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/simyat/fd48e9c25 |
| CVE-2026-91001 | CRITICAL | 9.9 | 2026-09-15 | A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddn | D-Link DI-8400 | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Vivi-Xray/Xray-s-cve- |
| CVE-2026-86701 | LOW | 2.5 | 2026-09-15 | Android application "ManabiPocket for Parents" contains an improper access control vulnera | NTT DOCOMO BUSINESS, Inc. ManabiPocket f | 受影响版本 ≤ 1.2.3，请升级到修复版本。 |
| CVE-2026-81320 | MEDIUM | 5.5 | 2026-09-15 | A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the | Red Hat Red Hat build of Apache Camel - | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-81303 | MEDIUM | 6.3 | 2026-09-15 | A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permissi | Red Hat Red Hat build of Apache Camel - | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-18232 | MEDIUM | 5.3 | 2026-09-15 | The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership | Unknown WP Directory Kit | 受影响版本 ≤ 1.5.7，请升级到修复版本。 |
| CVE-2026-17495 | MEDIUM | 5.9 | 2026-09-15 | moment is a JavaScript date library for parsing, validating, manipulating, and formatting | moment | 受影响版本 < 2.31.0，请升级到修复版本。 |
| CVE-2026-16593 | MEDIUM | 6.8 | 2026-09-15 | The WP Directory Kit WordPress plugin through 1.5.7 does not sanitize and escape some widg | Unknown WP Directory Kit | 受影响版本 ≤ 1.5.7，请升级到修复版本。 |
| CVE-2026-16592 | LOW | 2.7 | 2026-09-15 | The WP Directory Kit WordPress plugin through 1.5.7 does not check authorization or listin | Unknown WP Directory Kit | 受影响版本 ≤ 1.5.7，请升级到修复版本。 |
| CVE-2026-15758 | MEDIUM | 5.3 | 2026-09-15 | The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for Wor | iberezansky 3D FlipBook – PDF Embedder, | 受影响版本 ≤ 1.16.20，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。