首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45287 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-90578 | MEDIUM | 5.3 | 2026-09-13 | A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_li | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-90577 | MEDIUM | 5.3 | 2026-09-13 | A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-90576 | LOW | 3.3 | 2026-09-13 | A security vulnerability has been detected in GPAC up to f1219cde. Affected is the functio | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2025-70819 | MEDIUM | 6.3 | 2026-09-13 | Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container v | Zettlab D6 Ultra | 受影响版本 < 1.7.0，请升级到修复版本。 |
| CVE-2025-64059 | LOW | 1.8 | 2026-09-13 | Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the releva | getgrav Grav | 请参考厂商官方公告并升级修复。官方说明：https://drive.google.com/file/d/1gbzdiaZ |
| CVE-2025-45480 | LOW | 3 | 2026-09-13 | Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is mi | projectfloodlight Floodlight | 请参考厂商官方公告并升级修复。官方说明：https://github.com/floodlight/floodlight |
| CVE-2020-15875 | MEDIUM | 5 | 2026-09-13 | An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal priv | LibreNMS | 受影响版本 < 1.65.1，请升级到修复版本。 |
| CVE-2026-90575 | LOW | 3.7 | 2026-09-13 | A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unse | PHPGurukul Small CRM | 请参考厂商官方公告并升级修复。官方说明：https://github.com/JdExploit/small-crm-l |
| CVE-2026-90574 | MEDIUM | 6.3 | 2026-09-13 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This a | itsourcecode Sales and Inventory System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ltranquility/submit_r |
| CVE-2026-90573 | LOW | 3.3 | 2026-09-13 | A vulnerability was identified in GPAC up to f1219cde. The impacted element is the functio | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-90572 | MEDIUM | 4.7 | 2026-09-13 | A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is | davenardella snap7 | 请参考厂商官方公告并升级修复。官方说明：https://github.com/davenardella/snap7/ |
| CVE-2026-90571 | MEDIUM | 4.3 | 2026-09-13 | A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. | Exrick xmall | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Exrick/xmall/ |
| CVE-2026-90570 | LOW | 2.4 | 2026-09-13 | A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This | linlinjava litemall | 请参考厂商官方公告并升级修复。官方说明：https://gitee.com/linlinjava/litemall/ |
| CVE-2026-90569 | LOW | 2.4 | 2026-09-13 | A flaw has been found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0. This vulnerability a | linlinjava litemall | 请参考厂商官方公告并升级修复。官方说明：https://gitee.com/linlinjava/litemall/ |
| CVE-2026-90568 | LOW | 3.5 | 2026-09-13 | A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function | moxi624 Mogu Blog v2 | 请参考厂商官方公告并升级修复。官方说明：https://gitee.com/moxi159753/mogu_blog_v |
| CVE-2026-90567 | LOW | 3.5 | 2026-09-13 | A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected | quequnlong shiyi-blog | 请参考厂商官方公告并升级修复。官方说明：https://gitee.com/quequnlong/shiyi-blog/ |
| CVE-2026-90566 | HIGH | 7.3 | 2026-09-13 | A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01b | Rizwan17 inventory-management-system | 请参考厂商官方公告并升级修复。官方说明：http://github.com/Rizwan17/inventory-man |
| CVE-2026-90565 | MEDIUM | 5.3 | 2026-09-13 | A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a33 | Rizwan17 inventory-management-system | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Rizwan17/inventory-ma |
| CVE-2026-90564 | LOW | 3.5 | 2026-09-13 | A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the func | quequnlong shiyi-blog | 请参考厂商官方公告并升级修复。官方说明：https://gitee.com/quequnlong/shiyi-blog/ |
| CVE-2026-90563 | LOW | 3.5 | 2026-09-13 | A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the f | maliangnansheng bbs-springboot | 请参考厂商官方公告并升级修复。官方说明：https://github.com/maliangnansheng/bbs-s |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。