最近六个月的全部 CVE，每天更新。
直接来自 National Vulnerability Database 的已公开漏洞，附带严重程度、CWE 类别和受影响产品。可搜索、可筛选，今天新增的也能马上看到。
- 过去 24 小时 257 条
- 过去 7 天 2,764 条
- 过去六个月 58,275 条
来源：NVD（National Vulnerability Database） · 更新于 2026年9月23日
显示 5 条中的 5 条
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to In
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
CWE-261lenovo dock_managerCSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configu
Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded. This issue was fixed in version 9.5.