首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44199 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-86251 | MEDIUM | 5.9 | 2026-09-06 | h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utilit | h3js h3 | 受影响版本 < 1.15.9，请升级到修复版本。 |
| CVE-2026-86250 | HIGH | 7.5 | 2026-09-06 | h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlle | h3js h3 | 受影响版本 < 2.0.1-rc.18，请升级到修复版本。 |
| CVE-2026-86242 | HIGH | 8.1 | 2026-09-06 | Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP | maximhq Bifrost | 受影响版本 < 2.0.0，请升级到修复版本。 |
| CVE-2026-86212 | MEDIUM | 4.3 | 2026-09-06 | A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown | n/a Open5GS | |
| CVE-2026-86205 | MEDIUM | 5.4 | 2026-09-06 | h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack( | h3js h3 | 受影响版本 < 2.0.1-rc.18，请升级到修复版本。 |
| CVE-2022-51009 | HIGH | 7.5 | 2026-09-06 | PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comm | pmmp PocketMine-MP | 受影响版本 < 4.7.2，请升级到修复版本。 |
| CVE-2022-51008 | MEDIUM | 5.3 | 2026-09-06 | PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to | pmmp PocketMine-MP | 受影响版本 < 4.12.3，请升级到修复版本。 |
| CVE-2021-48007 | MEDIUM | 6.5 | 2026-09-06 | PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacke | pmmp PocketMine-MP | 受影响版本 < 3.18.1，请升级到修复版本。 |
| CVE-2021-48006 | LOW | 3.3 | 2026-09-06 | PocketMine-MP before 4.0.3 does not perform case-insensitive matching when removing operat | pmmp PocketMine-MP | 受影响版本 < 4.0.3，请升级到修复版本。 |
| CVE-2020-37277 | MEDIUM | 6.5 | 2026-09-06 | PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the Inve | pmmp PocketMine-MP | 受影响版本 < 3.15.4，请升级到修复版本。 |
| CVE-2026-86211 | HIGH | 7.3 | 2026-09-06 | A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an | rabindralamsal inventory-management-syst | |
| CVE-2026-86210 | HIGH | 7.3 | 2026-09-06 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling Sy | SourceCodester Class and Exam Timetablin | |
| CVE-2026-86209 | HIGH | 7.3 | 2026-09-06 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Af | SourceCodester Class and Exam Timetablin | |
| CVE-2026-86208 | HIGH | 7.3 | 2026-09-06 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1. | SourceCodester Class and Exam Timetablin | |
| CVE-2026-80439 | MEDIUM | 4.8 | 2026-09-06 | The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prev | Unknown Redirection for Contact Form 7 | 受影响版本 < 3.2.11，请升级到修复版本。 |
| CVE-2026-80437 | MEDIUM | 4.8 | 2026-09-06 | The Ninja Forms WordPress plugin from 3.14.10 before 3.15.2 does not prevent shortcodes in | Unknown Ninja Forms | 受影响版本 < 3.15.2，请升级到修复版本。 |
| CVE-2026-19862 | MEDIUM | 4.8 | 2026-09-06 | The JetFormBuilder WordPress plugin before 3.6.5.2 does not validate or strip line breaks | Unknown JetFormBuilder | 受影响版本 < 3.6.5.2，请升级到修复版本。 |
| CVE-2026-19859 | MEDIUM | 6.5 | 2026-09-06 | The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter b | Unknown JetFormBuilder | 受影响版本 < 3.6.5.2，请升级到修复版本。 |
| CVE-2026-86183 | MEDIUM | 5.3 | 2026-09-06 | A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affect | diem-project diem | |
| CVE-2026-86182 | MEDIUM | 4.3 | 2026-09-06 | A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function | diem-project diem |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。