首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44850 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-50165 | 待定 | 待定 | 2026-09-09 | alf.io is an open source ticket reservation system for conferences, trade shows, workshops | alfio-event alf.io | |
| CVE-2026-36433 | CRITICAL | 9.8 | 2026-09-09 | An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a phy | n/a | |
| CVE-2026-87911 | CRITICAL | 9.6 | 2026-09-09 | An OS command injection weakness in the read-only enforcement of the SQL validation compon | AWS AWS Labs postgres MCP Server | 受影响版本 < 1.1.7，请升级到修复版本。 |
| CVE-2026-79324 | HIGH | 7.5 | 2026-09-09 | Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (ma | n/a | |
| CVE-2026-73789 | MEDIUM | 5.3 | 2026-09-09 | A vulnerability in the web-based management interface of CPPM guest account management ser | Hewlett Packard Enterprise (HPE) ClearPa | 受影响版本 ≤ 6.11.14，请升级到修复版本。 |
| CVE-2026-73788 | MEDIUM | 6.5 | 2026-09-09 | A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacke | Hewlett Packard Enterprise (HPE) ClearPa | 受影响版本 ≤ 6.11.14，请升级到修复版本。 |
| CVE-2026-73787 | HIGH | 7.2 | 2026-09-09 | A vulnerability in the CPPM web interface could allow an authenticated remote attacker to | Hewlett Packard Enterprise (HPE) ClearPa | 受影响版本 ≤ 6.11.14，请升级到修复版本。 |
| CVE-2026-73786 | HIGH | 7.5 | 2026-09-09 | A vulnerability in the web-based management interface of CPPM could allow an unauthenticat | Hewlett Packard Enterprise (HPE) ClearPa | 受影响版本 ≤ 6.11.14，请升级到修复版本。 |
| CVE-2026-73769 | HIGH | 7.2 | 2026-09-09 | A vulnerability in the web-based management interface of vulnerable CPPM systems could all | Hewlett Packard Enterprise (HPE) ClearPa | 受影响版本 ≤ 6.11.14，请升级到修复版本。 |
| CVE-2026-71616 | 待定 | 待定 | 2026-09-09 | An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a de | n/a | |
| CVE-2026-71614 | 待定 | 待定 | 2026-09-09 | An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute ar | n/a | |
| CVE-2026-71613 | HIGH | 7.8 | 2026-09-09 | Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an a | n/a | |
| CVE-2026-71612 | 待定 | 待定 | 2026-09-09 | Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an a | n/a | |
| CVE-2026-61915 | MEDIUM | 4.2 | 2026-09-09 | An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free | cyrusimap Cyrus IMAP | 受影响版本 < 3.12.4，请升级到修复版本。 |
| CVE-2026-61911 | MEDIUM | 4.3 | 2026-09-09 | An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence or | cyrusimap Cyrus IMAP | 受影响版本 < 3.12.4，请升级到修复版本。 |
| CVE-2026-61910 | LOW | 3.5 | 2026-09-09 | An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a spe | cyrusimap Cyrus IMAP | 受影响版本 < 3.12.4，请升级到修复版本。 |
| CVE-2026-61909 | LOW | 3.5 | 2026-09-09 | An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a pe | cyrusimap Cyrus IMAP | 受影响版本 < 3.12.4，请升级到修复版本。 |
| CVE-2026-61908 | LOW | 3.1 | 2026-09-09 | An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can refer | cyrusimap Cyrus IMAP | 受影响版本 < 3.12.4，请升级到修复版本。 |
| CVE-2026-38998 | 待定 | 待定 | 2026-09-09 | A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface | n/a | |
| CVE-2026-79323 | HIGH | 7.5 | 2026-09-09 | Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magen | n/a |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。