最近六个月的全部 CVE，每天更新。
直接来自 National Vulnerability Database 的已公开漏洞，附带严重程度、CWE 类别和受影响产品。可搜索、可筛选，今天新增的也能马上看到。
- 过去 24 小时 362 条
- 过去 7 天 2,933 条
- 过去六个月 58,248 条
来源：NVD（National Vulnerability Database） · 更新于 2026年9月23日
显示 3 条中的 3 条
A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the function ParseMessage of the file main/mcp_server.cc of the component MCP Response Handler. This manipulation causes improper synchronization. Remote exploitation of
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to guard against memslot
Axios is a promise based HTTP client for the browser and Node.js. Starting in version 1.13.0 and prior to 1.13.2, Axios HTTP/2 session cleanup logic contains a state corruption bug that allows a malicious server to crash the client process through concurrent s