一线运维实战手记 · 云计算 · 数据库 · 故障排查
首页 / 漏洞情报库

🛡️ 漏洞情报库(CVE 查询与修复方法)

每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息,含漏洞说明、受影响产品、修复方法(补丁/升级版本)。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。

共 45358 条漏洞
CVE等级CVSS发布时间说明受影响修复方法
CVE-2026-107355 待定 待定 2026-10-07 Rejected reason: ** This candidate has been removed by an organization.
CVE-2026-107354 待定 待定 2026-10-07 Rejected reason: ** This candidate has been removed by an organization.
CVE-2026-107353 MEDIUM 6.5 2026-10-07 traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and ljharb traverse 受影响版本 < 0.6.12,请升级到修复版本。
CVE-2026-107176 MEDIUM 6.8 2026-10-07 A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader Red Hat Red Hat OpenShift Container Plat 请参考厂商官方公告并升级修复。官方说明:https://access.redhat.com/security/cve/C
CVE-2026-107161 HIGH 7.5 2026-10-07 A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function Red Hat Red Hat Enterprise Linux 10, Red 请参考厂商官方公告并升级修复。官方说明:https://access.redhat.com/security/cve/C
CVE-2026-107313 MEDIUM 4.2 2026-10-07 pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous conte pgjdbc 受影响版本 < 42.7.6,请升级到修复版本。
CVE-2026-107225 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107224 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107223 待定 待定 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107222 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107221 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107220 MEDIUM 6.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107219 HIGH 7.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107218 MEDIUM 5.3 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-107217 HIGH 7.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
CVE-2026-106164 HIGH 7.3 2026-10-07 In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026 Progress Software Telerik Document Proce 受影响版本 < 2026.3.1006,请升级到修复版本。
CVE-2026-103371 HIGH 7.5 2026-10-07 Insertion of Sensitive Information into Log File in Apache Geode Web Management. This i Apache Software Foundation Apache Geode 受影响版本 < 2.0.3,请升级到修复版本。
CVE-2026-96335 HIGH 7.5 2026-10-07 Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly C WPMU DEV Forminator 受影响版本 ≤ 1.57.2,请升级到修复版本。
CVE-2026-56851 HIGH 7.5 2026-10-07 The Nickname profile can panic with an out-of-bounds slice error when transforming crafted golang.org/x/text golang.org/x/text/secu 受影响版本 < 0.41.0,请升级到修复版本。
CVE-2026-107216 HIGH 7.5 2026-10-07 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Fr qax-os excelize 请参考厂商官方公告并升级修复。官方说明:https://github.com/qax-os/excelize/commi
‹1732…7337347357367377382268…›共 2268 页
💡 说明:数据源为 NVD、CISA(在野利用)、微软等官方公开情报,每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入,描述以英文原版为准,可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索,具体请以厂商官方公告为准。