收录 389,616+ 条 CVE，聚合 NVD、MITRE、CNNVD、CISA KEV、EPSS 与公开 PoC，每日更新；支持中文关键词、厂商、产品、严重等级和 CWE 检索。
| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-110695 | turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow | turboderp | ExLlamaV2 | 中危 | 6.3 | 2026-10-14 21:15:10 | 深度分析 |
| CVE-2026-110694 | OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds | OAID | Tengine | 中危 | 6.3 | 2026-10-14 21:00:21 | 深度分析 |
| CVE-2026-110689 | OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism | OpenClaw | ClawScan | 中危 | 5.3 | 2026-10-14 20:45:21 | 深度分析 |
| CVE-2026-104109 | FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root | error311 | FileRise | 中危 | 6.8 | 2026-10-14 20:44:29 | 深度分析 |
| CVE-2026-104107 | FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs | error311 | FileRise | 中危 | 6.5 | 2026-10-14 20:42:09 | 深度分析 |
| CVE-2026-104110 | FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php | error311 | FileRise | 中危 | 5.3 | 2026-10-14 20:40:16 | 深度分析 |
| CVE-2026-104108 | FileRise OIDC login can bind an attacker identity to an existing local account | error311 | FileRise | 高危 | 8.1 | 2026-10-14 20:39:28 | 深度分析 |
| CVE-2026-103977 | FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts | error311 | FileRise | 高危 | 8.1 | 2026-10-14 20:38:39 | 深度分析 |
| CVE-2026-104105 | FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay) | error311 | FileRise | 中危 | 6.4 | 2026-10-14 20:37:45 | 深度分析 |
| CVE-2026-104106 | FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification | error311 | FileRise | 中危 | 6.5 | 2026-10-14 20:36:27 | 深度分析 |
| CVE-2026-103988 | FileRise renameFolder omits destination-parent authorization | error311 | FileRise | 中危 | 5.4 | 2026-10-14 20:35:47 | 深度分析 |
| CVE-2026-69193 | FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying | error311 | FileRise | 中危 | 6.5 | 2026-10-14 20:34:13 | 深度分析 |
| CVE-2026-69191 | FileRise: Login Method Restriction Bypass via Direct API Access | error311 | FileRise | 中危 | 5.4 | 2026-10-14 20:33:33 | 深度分析 |
| CVE-2026-77427 | FileRise: Insecure default cryptographic key fallback in manual installs | error311 | FileRise | 中危 | 5.9 | 2026-10-14 20:32:56 | 深度分析 |
| CVE-2026-69194 | FileRise: Unsanitized footerHtml in Public Site Config | error311 | FileRise | 中危 | 4.8 | 2026-10-14 20:32:01 | 深度分析 |
| CVE-2026-110679 | OpenSIPS rtpproxy rtpproxy_answer out-of-bounds | - | OpenSIPS | 高危 | 7.3 | 2026-10-14 20:30:21 | 深度分析 |
| CVE-2026-0311 | Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability | Palo Alto Networks | Checkov by Prisma Cloud | 低危 | 1.1 | 2026-10-14 20:29:19 | 深度分析 |
| CVE-2026-0312 | Checkov by Prisma Cloud: Path Traversal Vulnerabilities | Palo Alto Networks | Checkov by Prisma Cloud | 中危 | 4.3 | 2026-10-14 20:28:18 | 深度分析 |
| CVE-2026-0313 | Cortex XSOAR: OS Command Injection Vulnerability | Palo Alto Networks | Cortex XSOAR OS Query | 中危 | 6.1 | 2026-10-14 20:27:19 | 深度分析 |
| CVE-2026-64856 | FileRise: Missing Authentication Guard on File Snippet Preview Endpoint | error311 | FileRise | 低危 | 3.7 | 2026-10-14 20:25:38 | 深度分析 |
神龙漏洞库持续同步公开 CVE 数据，并关联 CVSS 严重度、CWE 弱点类型、EPSS 利用概率、CISA KEV 已在野利用目录、公开 PoC 与厂商安全公告。你可以通过 CVE 编号直达详情，也可以使用中文漏洞类型、厂商或产品名称检索。
页面会明确区分上游原始数据、AI 辅助翻译、AI 分析和公开利用证据，并展示数据更新时间。基础漏洞查询免费开放；如发现标题、受影响产品或修复信息有误，可通过详情页反馈协助修订。