首页 / 漏洞情报库
🛡️ 漏洞情报库(CVE 查询与修复方法)
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息,含漏洞说明、受影响产品、修复方法(补丁/升级版本)。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报(每周一篇)
共 44259 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-62653 | MEDIUM | 6.8 | 2026-09-08 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input rec | Siemens Reyrolle 7SR5 | 受影响版本 < V2.70,请升级到修复版本。 |
| CVE-2026-62652 | MEDIUM | 5.3 | 2026-09-08 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device fi | Siemens Reyrolle 7SR5 | 受影响版本 < V2.70,请升级到修复版本。 |
| CVE-2026-62650 | HIGH | 8.8 | 2026-09-08 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side a | Siemens Reyrolle 7SR5 | 受影响版本 < V2.70,请升级到修复版本。 |
| CVE-2026-62649 | HIGH | 7.5 | 2026-09-08 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web serve | Siemens Reyrolle 7SR5 | 受影响版本 < V2.70,请升级到修复版本。 |
| CVE-2026-62648 | HIGH | 7.5 | 2026-09-08 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of | Siemens Reyrolle 7SR5 | 受影响版本 < V2.70,请升级到修复版本。 |
| CVE-2026-62647 | HIGH | 7.4 | 2026-09-08 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random numb | Siemens Reyrolle 7SR5 | 受影响版本 < V2.70,请升级到修复版本。 |
| CVE-2026-62646 | HIGH | 7.4 | 2026-09-08 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session ide | Siemens Reyrolle 7SR5 | 受影响版本 < V2.70,请升级到修复版本。 |
| CVE-2026-62645 | CRITICAL | 9.8 | 2026-09-08 | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information i | Siemens Reyrolle 7SR5 | 受影响版本 < V2.70,请升级到修复版本。 |
| CVE-2026-58113 | MEDIUM | 6.1 | 2026-09-08 | A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamc | Siemens Teamcenter V2412, Siemens Teamce | 受影响版本 < V2606.2607,请升级到修复版本。 |
| CVE-2026-50093 | CRITICAL | 9 | 2026-09-08 | A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.1 | Siemens Siveillance Control Pro V3.0, Si | 受影响版本 < V4.0.11.2177,请升级到修复版本。 |
| CVE-2026-34223 | HIGH | 8.2 | 2026-09-08 | A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desig | Siemens Desigo CC ClickOnce Client V6, S | 受影响版本 < *,请升级到修复版本。 |
| CVE-2026-84820 | HIGH | 7.1 | 2026-09-08 | Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widge | Unlimited Elements Unlimited Elements Fo | 受影响版本 ≤ 2.0.17,请升级到修复版本。 |
| CVE-2026-84818 | HIGH | 7.1 | 2026-09-08 | Unauthenticated Cross Site Scripting (XSS) in Open User Map | 100plugins Open User Map | 受影响版本 ≤ 1.4.50,请升级到修复版本。 |
| CVE-2026-84817 | HIGH | 7.1 | 2026-09-08 | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder | Crocoblock JetFormBuilder | 受影响版本 ≤ 3.6.5.1,请升级到修复版本。 |
| CVE-2026-81806 | HIGH | 7.2 | 2026-09-08 | Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Se | John Darrel Hide My WP Ghost | 受影响版本 ≤ 7.0.09,请升级到修复版本。 |
| CVE-2026-81802 | MEDIUM | 6.5 | 2026-09-08 | Unauthenticated Insecure Direct Object References (IDOR) in WpEvently | Magepeople inc. WpEvently | 受影响版本 ≤ 5.6.0,请升级到修复版本。 |
| CVE-2026-81798 | HIGH | 7.1 | 2026-09-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | Easy Appointments | 受影响版本 ≤ 4.0.2.1,请升级到修复版本。 |
| CVE-2026-81792 | MEDIUM | 6.5 | 2026-09-08 | Unauthenticated Privilege Escalation in Product Catalog Enquiry for WooCommerce by MultiVe | MultiVendorX Product Catalog Enquiry for | 受影响版本 ≤ 6.1.4,请升级到修复版本。 |
| CVE-2026-81790 | HIGH | 7.5 | 2026-09-08 | Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCo | Viszt Péter Csomagpontok és szállítási c | 受影响版本 < 4.2.8,请升级到修复版本。 |
| CVE-2026-81781 | HIGH | 7.1 | 2026-09-08 | Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exp | Unbounce Unbounce Landing Pages | 受影响版本 ≤ 1.1.4,请升级到修复版本。 |
💡 说明:数据源为 NVD、CISA(在野利用)、微软等官方公开情报,每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入,描述以英文原版为准,可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索,具体请以厂商官方公告为准。