docker.io/apache/seata-server:2.7.0 linux/amd64

docker.io/apache/seata-server:2.7.0 - Trivy安全扫描结果 扫描时间: 2026-06-30 15:55
全部漏洞信息
低危漏洞:110 中危漏洞:225 高危漏洞:56 严重漏洞:3

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-06-30 15:55

docker.io/apache/seata-server:2.7.0 (ubuntu 24.04) (ubuntu)
低危漏洞:101 中危漏洞:165 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gpgv CVE-2025-68973 高危 2.4.4-2ubuntu17 2.4.4-2ubuntu17.4 GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59

libssl3t64 CVE-2026-45447 高危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52

openssl CVE-2026-45447 高危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52

curl CVE-2026-1965 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.8 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

curl CVE-2026-3783 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.8 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

curl CVE-2026-5545 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

curl CVE-2026-6253 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-6429 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-7168 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01

curl CVE-2026-8927 中危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

dpkg CVE-2026-2219 中危 1.22.6ubuntu6.1 1.22.6ubuntu6.6 It was discovered that dpkg-deb (a component of dpkg, the Debian packa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2219

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-03-07 09:16 修改: 2026-06-17 10:30

bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.1 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

gpgv CVE-2025-30258 中危 2.4.4-2ubuntu17 2.4.4-2ubuntu17.2 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.1 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

libc-bin CVE-2025-0395 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.4 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26

libc-bin CVE-2025-15281 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.7 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

libc-bin CVE-2025-5702 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.5 glibc: Vector register overwrite bug in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48

libc-bin CVE-2025-8058 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.6 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06

libc-bin CVE-2026-0861 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.7 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11

libc-bin CVE-2026-0915 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.7 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

libc-bin CVE-2026-4046 中危 2.39-0ubuntu8.3 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55

libc-bin CVE-2026-4437 中危 2.39-0ubuntu8.3 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56

libc-bin CVE-2026-4438 中危 2.39-0ubuntu8.3 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56

libc-bin CVE-2026-5435 中危 2.39-0ubuntu8.3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59

libc-bin CVE-2026-6238 中危 2.39-0ubuntu8.3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17

libc6 CVE-2025-0395 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.4 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26

libc6 CVE-2025-15281 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.7 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

libc6 CVE-2025-5702 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.5 glibc: Vector register overwrite bug in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48

libc6 CVE-2025-8058 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.6 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06

libc6 CVE-2026-0861 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.7 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11

libc6 CVE-2026-0915 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.7 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

libc6 CVE-2026-4046 中危 2.39-0ubuntu8.3 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55

libc6 CVE-2026-4437 中危 2.39-0ubuntu8.3 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56

libc6 CVE-2026-4438 中危 2.39-0ubuntu8.3 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56

libc6 CVE-2026-5435 中危 2.39-0ubuntu8.3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59

libc6 CVE-2026-6238 中危 2.39-0ubuntu8.3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17

libcap2 CVE-2025-1390 中危 1:2.66-5ubuntu2 1:2.66-5ubuntu2.2 libcap: pam_cap: Fix potential configuration parsing error

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1390

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-02-18 03:15 修改: 2026-06-17 08:39

libcap2 CVE-2026-4878 中危 1:2.66-5ubuntu2 1:2.66-5ubuntu2.4 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-09 16:16 修改: 2026-06-27 08:16

libcurl4t64 CVE-2025-14017 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35

libcurl4t64 CVE-2026-11856 中危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4t64 CVE-2026-1965 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.8 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

libcurl4t64 CVE-2026-3783 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.8 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

libcurl4t64 CVE-2026-5545 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

libcurl4t64 CVE-2026-6253 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl4t64 CVE-2026-6429 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl4t64 CVE-2026-7168 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01

libcurl4t64 CVE-2026-8927 中危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libexpat1 CVE-2024-50602 中危 2.6.1-2ubuntu0.1 2.6.1-2ubuntu0.2 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-10-27 05:15 修改: 2026-06-17 08:04

libexpat1 CVE-2024-8176 中危 2.6.1-2ubuntu0.1 2.6.1-2ubuntu0.3 libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8176

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-03-14 09:15 修改: 2026-06-25 04:17

libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.1 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

libexpat1 CVE-2026-24515 中危 2.6.1-2ubuntu0.1 2.6.1-2ubuntu0.4 libexpat: libexpat null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23

libexpat1 CVE-2026-25210 中危 2.6.1-2ubuntu0.1 2.6.1-2ubuntu0.4 libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24

libfreetype6 CVE-2026-23865 中危 2.13.2+dfsg-1build3 2.13.2+dfsg-1ubuntu0.1 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

libgcrypt20 CVE-2026-41989 中危 1.10.3-2build1 1.10.3-2ubuntu0.1 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-23 05:16 修改: 2026-06-17 10:47

libgnutls30t64 CVE-2024-12243 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.3 gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12243

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-02-10 16:15 修改: 2026-06-17 06:59

libgnutls30t64 CVE-2025-14831 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.5 gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-02-09 15:16 修改: 2026-06-25 04:17

libgnutls30t64 CVE-2025-32988 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.4 gnutls: Vulnerability in GnuTLS otherName SAN export

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32988

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-07-10 08:15 修改: 2026-06-25 05:16

libgnutls30t64 CVE-2025-32989 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.4 gnutls: Vulnerability in GnuTLS SCT extension parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32989

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-07-10 08:15 修改: 2026-06-25 05:16

libgnutls30t64 CVE-2025-32990 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.4 gnutls: Vulnerability in GnuTLS certtool template parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32990

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-07-10 10:15 修改: 2026-06-25 05:16

libgnutls30t64 CVE-2025-6395 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.4 gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6395

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-07-10 16:15 修改: 2026-06-25 05:16

libgnutls30t64 CVE-2026-33845 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-30 18:16 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-33846 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-04 10:15 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-3832 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-30 18:16 修改: 2026-06-24 17:16

libgnutls30t64 CVE-2026-3833 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-30 18:16 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-42009 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-18 13:16 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-42010 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-07 12:16 修改: 2026-06-26 11:16

libgnutls30t64 CVE-2026-42011 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-07 15:16 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-42012 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-26 22:16 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-42013 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-26 22:16 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-42014 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-16 02:16 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-42015 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-26 22:16 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-5260 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-26 22:16 修改: 2026-06-26 08:16

libgnutls30t64 CVE-2026-5419 中危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-01 21:16 修改: 2026-06-26 08:16

libgssapi-krb5-2 CVE-2024-26462 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libgssapi-krb5-2 CVE-2024-3596 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.3 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44

libgssapi-krb5-2 CVE-2025-24528 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59

libgssapi-krb5-2 CVE-2025-3576 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.6 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-04-15 06:15 修改: 2026-06-25 05:16

libk5crypto3 CVE-2024-26462 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libk5crypto3 CVE-2024-3596 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.3 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44

libk5crypto3 CVE-2025-24528 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59

libk5crypto3 CVE-2025-3576 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.6 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-04-15 06:15 修改: 2026-06-25 05:16

libkrb5-3 CVE-2024-26462 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5-3 CVE-2024-3596 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.3 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44

libkrb5-3 CVE-2025-24528 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59

libkrb5-3 CVE-2025-3576 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.6 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-04-15 06:15 修改: 2026-06-25 05:16

libkrb5support0 CVE-2024-26462 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5support0 CVE-2024-3596 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.3 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44

libkrb5support0 CVE-2025-24528 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59

libkrb5support0 CVE-2025-3576 中危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.6 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-04-15 06:15 修改: 2026-06-25 05:16

liblzma5 CVE-2025-31115 中危 5.6.1+really5.4.5-1build0.1 5.6.1+really5.4.5-1ubuntu0.2 xz: XZ has a heap-use-after-free bug in threaded .xz decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31115

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-04-03 17:15 修改: 2026-06-17 09:09

libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.1 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

libnghttp2-14 CVE-2026-27135 中危 1.59.0-1ubuntu0.1 1.59.0-1ubuntu0.3 nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-18 18:16 修改: 2026-06-17 10:26

libpam-modules CVE-2024-10963 中危 1.5.3-5ubuntu5.1 1.5.3-5ubuntu5.5 pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2024-11-07 16:15 修改: 2026-06-17 06:56

libpam-modules CVE-2025-6020 中危 1.5.3-5ubuntu5.1 1.5.3-5ubuntu5.4 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-06-17 13:15 修改: 2026-06-25 03:16

libpam-modules-bin CVE-2024-10963 中危 1.5.3-5ubuntu5.1 1.5.3-5ubuntu5.5 pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2024-11-07 16:15 修改: 2026-06-17 06:56

libpam-modules-bin CVE-2025-6020 中危 1.5.3-5ubuntu5.1 1.5.3-5ubuntu5.4 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-06-17 13:15 修改: 2026-06-25 03:16

libpam-runtime CVE-2024-10963 中危 1.5.3-5ubuntu5.1 1.5.3-5ubuntu5.5 pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2024-11-07 16:15 修改: 2026-06-17 06:56

libpam-runtime CVE-2025-6020 中危 1.5.3-5ubuntu5.1 1.5.3-5ubuntu5.4 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-06-17 13:15 修改: 2026-06-25 03:16

libpam0g CVE-2024-10963 中危 1.5.3-5ubuntu5.1 1.5.3-5ubuntu5.5 pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2024-11-07 16:15 修改: 2026-06-17 06:56

libpam0g CVE-2025-6020 中危 1.5.3-5ubuntu5.1 1.5.3-5ubuntu5.4 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-06-17 13:15 修改: 2026-06-25 03:16

libpng16-16t64 CVE-2025-28162 中危 1.6.43-5build1 1.6.43-5ubuntu0.4 libpng: libpng: Denial of Service via buffer overflow in pngimage utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28162

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04

libpng16-16t64 CVE-2025-28164 中危 1.6.43-5build1 1.6.43-5ubuntu0.4 libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04

libpng16-16t64 CVE-2025-64505 中危 1.6.43-5build1 1.6.43-5ubuntu0.1 libpng: LIBPNG heap buffer overflow via malformed palette index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

libpng16-16t64 CVE-2025-64506 中危 1.6.43-5build1 1.6.43-5ubuntu0.1 libpng: LIBPNG heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

libpng16-16t64 CVE-2025-64720 中危 1.6.43-5build1 1.6.43-5ubuntu0.1 libpng: LIBPNG buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

libpng16-16t64 CVE-2025-65018 中危 1.6.43-5build1 1.6.43-5ubuntu0.1 libpng: LIBPNG heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

libpng16-16t64 CVE-2025-66293 中危 1.6.43-5build1 1.6.43-5ubuntu0.3 libpng: LIBPNG out-of-bounds read in png_image_read_composite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56

libpng16-16t64 CVE-2026-22695 中危 1.6.43-5build1 1.6.43-5ubuntu0.3 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

libpng16-16t64 CVE-2026-22801 中危 1.6.43-5build1 1.6.43-5ubuntu0.3 libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

libpng16-16t64 CVE-2026-25646 中危 1.6.43-5build1 1.6.43-5ubuntu0.5 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-02-10 18:16 修改: 2026-06-17 10:25

libpng16-16t64 CVE-2026-33416 中危 1.6.43-5build1 1.6.43-5ubuntu0.6 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

libpng16-16t64 CVE-2026-33636 中危 1.6.43-5build1 1.6.43-5ubuntu0.6 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

libpng16-16t64 CVE-2026-34757 中危 1.6.43-5build1 1.6.43-5ubuntu0.6 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39

libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.1 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

libssh-4 CVE-2025-4877 中危 0.10.6-2build2 0.10.6-2ubuntu0.1 libssh: Write beyond bounds in binary to base64 conversion functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4877

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-08-20 13:15 修改: 2026-06-25 05:16

libssh-4 CVE-2025-4878 中危 0.10.6-2build2 0.10.6-2ubuntu0.1 libssh: Use of uninitialized variable in privatekey_from_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4878

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-07-22 15:15 修改: 2026-06-25 08:16

libssh-4 CVE-2025-5318 中危 0.10.6-2build2 0.10.6-2ubuntu0.1 libssh: out-of-bounds read in sftp_handle()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5318

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-06-24 14:15 修改: 2026-06-25 05:16

libssh-4 CVE-2025-5351 中危 0.10.6-2build2 0.10.6-2ubuntu0.1 libssh: Double Free Vulnerability in libssh Key Export Functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5351

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-07-04 09:15 修改: 2026-06-25 05:16

libssh-4 CVE-2025-5372 中危 0.10.6-2build2 0.10.6-2ubuntu0.1 libssh: Incorrect Return Code Handling in ssh_kdf() in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5372

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-07-04 06:15 修改: 2026-06-17 09:47

libssh-4 CVE-2025-5987 中危 0.10.6-2build2 0.10.6-2ubuntu0.1 libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5987

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-07-07 15:15 修改: 2026-06-25 05:16

libssh-4 CVE-2026-0964 中危 0.10.6-2build2 0.10.6-2ubuntu0.3 libssh: Improper sanitation of paths received from SCP servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0964

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11

libssh-4 CVE-2026-0967 中危 0.10.6-2build2 0.10.6-2ubuntu0.3 libssh: libssh: Denial of Service via inefficient regular expression processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0967

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11

libssh-4 CVE-2026-0968 中危 0.10.6-2build2 0.10.6-2ubuntu0.3 libssh: libssh: Denial of Service due to malformed SFTP message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0968

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11

libssh-4 CVE-2026-3731 中危 0.10.6-2build2 0.10.6-2ubuntu0.4 libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3731

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-08 11:15 修改: 2026-06-17 10:44

curl CVE-2025-14017 中危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35

libssl3t64 CVE-2025-15467 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

libssl3t64 CVE-2025-9230 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.6 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-09-30 14:15 修改: 2026-06-17 10:08

libssl3t64 CVE-2026-31790 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34

libssl3t64 CVE-2026-34182 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38

libssl3t64 CVE-2026-45445 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52

libsystemd0 CVE-2025-4598 中危 255.4-1ubuntu8.4 255.4-1ubuntu8.8 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-05-30 14:15 修改: 2026-06-25 05:16

libsystemd0 CVE-2026-29111 中危 255.4-1ubuntu8.4 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libsystemd0 CVE-2026-40225 中危 255.4-1ubuntu8.4 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libsystemd0 CVE-2026-40226 中危 255.4-1ubuntu8.4 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libtasn1-6 CVE-2024-12133 中危 4.19.0-3build1 4.19.0-3ubuntu0.24.04.1 libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-02-10 16:15 修改: 2026-06-26 14:16

libtasn1-6 CVE-2025-13151 中危 4.19.0-3build1 4.19.0-3ubuntu0.24.04.2 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33

libudev1 CVE-2025-4598 中危 255.4-1ubuntu8.4 255.4-1ubuntu8.8 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-05-30 14:15 修改: 2026-06-25 05:16

libudev1 CVE-2026-29111 中危 255.4-1ubuntu8.4 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libudev1 CVE-2026-40225 中危 255.4-1ubuntu8.4 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libudev1 CVE-2026-40226 中危 255.4-1ubuntu8.4 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.1 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

locales CVE-2025-0395 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.4 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26

locales CVE-2025-15281 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.7 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

locales CVE-2025-5702 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.5 glibc: Vector register overwrite bug in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48

locales CVE-2025-8058 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.6 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06

locales CVE-2026-0861 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.7 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11

locales CVE-2026-0915 中危 2.39-0ubuntu8.3 2.39-0ubuntu8.7 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

locales CVE-2026-4046 中危 2.39-0ubuntu8.3 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55

locales CVE-2026-4437 中危 2.39-0ubuntu8.3 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56

locales CVE-2026-4438 中危 2.39-0ubuntu8.3 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56

locales CVE-2026-5435 中危 2.39-0ubuntu8.3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59

locales CVE-2026-6238 中危 2.39-0ubuntu8.3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17

mount CVE-2026-27456 中危 2.39.3-9ubuntu6.1 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

curl CVE-2026-11856 中危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

openssl CVE-2025-15467 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

openssl CVE-2025-9230 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.6 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-09-30 14:15 修改: 2026-06-17 10:08

openssl CVE-2026-31790 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34

openssl CVE-2026-34182 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38

openssl CVE-2026-45445 中危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52

perl-base CVE-2024-56406 中危 5.38.2-3.2build2 5.38.2-3.2ubuntu0.1 perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56406

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-04-13 14:15 修改: 2026-06-17 08:12

perl-base CVE-2025-40909 中危 5.38.2-3.2build2 5.38.2-3.2ubuntu0.2 perl: Perl threads have a working directory race condition where file operations may target unintended paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-05-30 13:15 修改: 2026-06-17 09:22

perl-base CVE-2026-42496 中危 5.38.2-3.2build2 5.38.2-3.2ubuntu0.3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-26 02:16 修改: 2026-06-17 10:47

perl-base CVE-2026-8376 中危 5.38.2-3.2build2 5.38.2-3.2ubuntu0.3 Perl versions through 5.43.10 have a heap buffer overflow when compili ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-05-26 00:16 修改: 2026-06-17 11:03

sed CVE-2026-5958 中危 4.9-2build1 4.9-2ubuntu0.24.04.1 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59

tar CVE-2025-45582 中危 1.35+dfsg-3build1 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25

tar CVE-2026-5704 中危 1.35+dfsg-3build1 1.35+dfsg-3ubuntu0.1 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59

util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.1 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

wget CVE-2021-31879 中危 1.21.4-1ubuntu4.1 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52

libgssapi-krb5-2 CVE-2024-26458 低危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libgssapi-krb5-2 CVE-2024-26461 低危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libcurl4t64 CVE-2026-3784 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.8 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

libcurl4t64 CVE-2026-4873 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57

libcurl4t64 CVE-2026-5773 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

libcurl4t64 CVE-2026-6276 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libssh-4 CVE-2025-8114 低危 0.10.6-2build2 0.10.6-2ubuntu0.2 libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8114

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-07-24 15:15 修改: 2026-06-25 05:16

libssh-4 CVE-2025-8277 低危 0.10.6-2build2 0.10.6-2ubuntu0.3 libssh: Memory Exhaustion via Repeated Key Exchange in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8277

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-09-09 12:15 修改: 2026-06-25 08:16

libssh-4 CVE-2026-0965 低危 0.10.6-2build2 0.10.6-2ubuntu0.3 libssh: libssh: Denial of Service via improper configuration file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0965

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11

libssh-4 CVE-2026-0966 低危 0.10.6-2build2 0.10.6-2ubuntu0.3 libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0966

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11

libk5crypto3 CVE-2024-26458 低危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libk5crypto3 CVE-2024-26461 低危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libcurl4t64 CVE-2026-8286 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4t64 CVE-2026-8458 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4t64 CVE-2026-8924 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4t64 CVE-2026-8932 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libssl3t64 CVE-2024-13176 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.5 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01

libssl3t64 CVE-2024-9143 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.5 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24

libssl3t64 CVE-2025-68160 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

libssl3t64 CVE-2025-69418 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69419 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69420 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69421 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2026-22795 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl3t64 CVE-2026-22796 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl3t64 CVE-2026-28387 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

libssl3t64 CVE-2026-28388 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

libssl3t64 CVE-2026-28389 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

libssl3t64 CVE-2026-28390 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

libssl3t64 CVE-2026-31789 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34

libssl3t64 CVE-2026-34180 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38

libssl3t64 CVE-2026-42766 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

libssl3t64 CVE-2026-42767 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

libssl3t64 CVE-2026-42770 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

libssl3t64 CVE-2026-45446 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52

libssl3t64 CVE-2026-7383 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02

libssl3t64 CVE-2026-9076 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04

libkrb5-3 CVE-2024-26458 低危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5-3 CVE-2024-26461 低危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libcurl4t64 CVE-2026-9547 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-8932 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.4 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

curl CVE-2026-9547 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2024-11053 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.6 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56

libkrb5support0 CVE-2024-26458 低危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5support0 CVE-2024-26461 低危 1.20.1-6ubuntu2.1 1.20.1-6ubuntu2.5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

dpkg CVE-2025-6297 低危 1.22.6ubuntu6.1 1.22.6ubuntu6.5 It was discovered that dpkg-deb does not properly sanitize directory p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6297

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2025-07-01 17:15 修改: 2026-06-17 10:01

liblzma5 CVE-2026-34743 低危 5.6.1+really5.4.5-1build0.1 5.6.1+really5.4.5-1ubuntu0.3 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-02 19:21 修改: 2026-06-17 10:39

libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.4 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

curl CVE-2024-9681 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.5 curl: HSTS subdomain overwrites parent cache entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-11-06 08:15 修改: 2026-06-17 08:25

curl CVE-2025-0167 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.8 When asked to use a `.netrc` file for credentials **and** to follow HT ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0167

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:25

curl CVE-2025-10148 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: predictable WebSocket mask

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10148

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-09-12 06:15 修改: 2026-06-17 08:27

libgcrypt20 CVE-2024-2236 低危 1.10.3-2build1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24

curl CVE-2025-14524 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36

curl CVE-2025-14819 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: libcurl: Improper certificate validation due to cached TLS settings reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36

curl CVE-2025-15079 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

curl CVE-2025-15224 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

curl CVE-2026-10536 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-12064 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-3784 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.8 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

curl CVE-2026-4873 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57

login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

curl CVE-2026-5773 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

curl CVE-2026-6276 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.9 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-8286 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-8458 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-8924 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4t64 CVE-2024-11053 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.6 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56

libcurl4t64 CVE-2024-9681 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.5 curl: HSTS subdomain overwrites parent cache entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-11-06 08:15 修改: 2026-06-17 08:25

openssl CVE-2024-13176 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.5 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01

openssl CVE-2024-9143 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.5 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24

openssl CVE-2025-68160 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

openssl CVE-2025-69418 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69419 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69420 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69421 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2026-22795 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl CVE-2026-22796 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl CVE-2026-28387 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl CVE-2026-28388 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl CVE-2026-28389 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl CVE-2026-28390 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl CVE-2026-31789 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.9 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34

openssl CVE-2026-34180 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38

openssl CVE-2026-42766 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl CVE-2026-42767 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl CVE-2026-42770 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl CVE-2026-45446 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52

openssl CVE-2026-7383 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02

openssl CVE-2026-9076 低危 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.11 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04

passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libcurl4t64 CVE-2025-0167 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.8 When asked to use a `.netrc` file for credentials **and** to follow HT ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0167

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:25

libcurl4t64 CVE-2025-10148 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: predictable WebSocket mask

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10148

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2025-09-12 06:15 修改: 2026-06-17 08:27

libcurl4t64 CVE-2025-14524 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36

libcurl4t64 CVE-2025-14819 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: libcurl: Improper certificate validation due to cached TLS settings reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36

libgnutls30t64 CVE-2025-9820 低危 3.8.3-1.1ubuntu3.2 3.8.3-1.1ubuntu3.5 gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9820

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-01-26 20:16 修改: 2026-06-25 08:16

libcurl4t64 CVE-2025-15079 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

libcurl4t64 CVE-2025-15224 低危 8.5.0-2ubuntu10.4 8.5.0-2ubuntu10.7 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

libcurl4t64 CVE-2026-10536 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4t64 CVE-2026-12064 低危 8.5.0-2ubuntu10.4

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:44530e87b7ac683969bb72a849c1c37257b50899dee5bc9af8425bbb680c0619

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:a46a5fb872b554648d9d0262f302b2c1ded46eeb1ef4dc727ecc5274605937af

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

Java (jar)
低危漏洞:9 中危漏洞:60 高危漏洞:53 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-codec-http CVE-2019-20444 严重 4.1.38.Final 4.1.44 netty: HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30

org.postgresql:postgresql CVE-2024-1597 严重 42.3.8 42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2 pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1597

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-02-19 13:15 修改: 2026-06-17 07:04

org.springframework:spring-web CVE-2016-1000027 严重 5.3.39 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.13.5 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.13.5 2.18.8, 3.1.4, 2.21.4 jackson-databind contains the general-purpose data-binding functionali ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.13.5 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:00

com.google.code.gson:gson CVE-2022-25647 高危 2.8.6 2.8.9 com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33

com.google.protobuf:protobuf-java CVE-2022-3509 高危 3.16.1 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Textformat parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

com.google.protobuf:protobuf-java CVE-2022-3510 高危 3.16.1 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Message-Type Extensions parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

com.google.protobuf:protobuf-java CVE-2024-7254 高危 3.16.1 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19

io.netty:netty-codec CVE-2026-42583 高危 4.1.101.Final 4.1.133.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec CVE-2021-37136 高危 4.1.38.Final 4.1.68.Final netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00

io.netty:netty-codec CVE-2021-37137 高危 4.1.38.Final 4.1.68.Final netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00

io.netty:netty-codec CVE-2026-42583 高危 4.1.38.Final 4.1.133.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-dns CVE-2026-42579 高危 4.1.101.Final 4.2.13.Final, 4.1.133.Final netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-haproxy CVE-2026-44893 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44893

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:51

io.netty:netty-codec-haproxy CVE-2026-48059 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48059

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:54

io.netty:netty-codec-http CVE-2026-33870 高危 4.1.101.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-03-27 20:16 修改: 2026-06-17 10:38

io.netty:netty-codec-http CVE-2026-42584 高危 4.1.101.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42587 高危 4.1.101.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.12 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

io.netty:netty-codec-http CVE-2026-33870 高危 4.1.38.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-03-27 20:16 修改: 2026-06-17 10:38

io.netty:netty-codec-http CVE-2026-42584 高危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42587 高危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.101.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41

io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.101.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-03-27 20:16 修改: 2026-06-17 10:38

io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.101.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.38.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41

io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.38.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-03-27 20:16 修改: 2026-06-17 10:38

io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http2 GHSA-xpw8-rcwv-8f8p 高危 4.1.38.Final 4.1.100.Final io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08

io.netty:netty-codec-redis CVE-2026-44250 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44250

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-11 22:16 修改: 2026-06-17 10:50

io.netty:netty-codec-redis CVE-2026-44890 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44890

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-11 22:16 修改: 2026-06-17 10:51

io.netty:netty-codec-redis CVE-2026-48006 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48006

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:54

io.netty:netty-codec-redis CVE-2026-50011 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-codec-redis: Netty: Denial of Service via malicious Redis array header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50011

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-codec-smtp CVE-2025-59419 高危 4.1.101.Final 4.2.7.Final, 4.1.128.Final io.netty/netty-codec-smtp: Netty netty-codec-smtp SMTP Command Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59419

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-10-15 16:15 修改: 2026-06-17 09:46

io.netty:netty-handler CVE-2025-24970 高危 4.1.101.Final 4.1.118.Final io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24970

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-02-10 22:15 修改: 2026-06-17 08:59

io.netty:netty-handler CVE-2026-44249 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-11 22:16 修改: 2026-06-17 10:50

io.netty:netty-handler CVE-2026-45416 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-handler CVE-2026-50010 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-handler CVE-2020-11612 高危 4.1.38.Final 4.1.46 netty: compression/decompression codecs don't enforce limits on buffer allocation sizes

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11612

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2020-04-07 18:15 修改: 2026-06-17 02:50

io.netty:netty-handler CVE-2026-44249 高危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-11 22:16 修改: 2026-06-17 10:50

io.netty:netty-handler CVE-2026-45416 高危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-handler CVE-2026-50010 高危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:54

io.netty:netty-transport-sctp CVE-2026-46340 高危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46340

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:53

mysql:mysql-connector-java CVE-2018-3258 高危 5.1.42 8.0.13 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3258

镜像层: sha256:0f60983965db683c076bb32279102f9cbf1f0ec065333c62f9e86cf31c058128

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

mysql:mysql-connector-java CVE-2023-22102 高危 5.1.42 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102

镜像层: sha256:0f60983965db683c076bb32279102f9cbf1f0ec065333c62f9e86cf31c058128

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

mysql:mysql-connector-java CVE-2023-22102 高危 8.0.27 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102

镜像层: sha256:0f60983965db683c076bb32279102f9cbf1f0ec065333c62f9e86cf31c058128

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.12 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

org.postgresql:postgresql CVE-2026-42198 高危 42.3.8 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-04-29 16:16 修改: 2026-06-17 10:47

org.springframework.boot:spring-boot CVE-2025-22235 高危 2.7.18 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45

org.springframework.boot:spring-boot CVE-2026-40973 高危 2.7.18 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-04-28 00:16 修改: 2026-06-17 10:45

org.springframework:spring-core CVE-2025-41249 高危 5.3.39 6.2.11 org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22

ch.qos.logback:logback-core CVE-2023-6481 高危 1.2.12 1.4.14, 1.3.14, 1.2.13 logback: A serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6481

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2023-12-04 09:15 修改: 2026-06-17 06:50

io.netty:netty-codec CVE-2025-58057 中危 4.1.38.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43

io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54

io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.101.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:54

io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

com.google.guava:guava CVE-2023-2976 中危 30.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53

com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.13.5 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30

ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.12 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

com.alibaba.nacos:nacos-common CVE-2021-44667 中危 2.0.4 2.1.0-BETA, 1.4.5 Cross-site Scripting in Nacos

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44667

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2022-03-11 19:15 修改: 2026-06-17 04:12

io.netty:netty-codec-http2 CVE-2021-21295 中危 4.1.38.Final 4.1.60.Final netty: possible request smuggling in HTTP/2 due missing validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35

io.netty:netty-codec-http2 CVE-2021-21409 中危 4.1.38.Final 4.1.61.Final netty: Request smuggling via content-length header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35

io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54

io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.38.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:54

io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-codec-mqtt CVE-2026-44248 中危 4.1.101.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44248

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:50

com.google.protobuf:protobuf-java CVE-2022-3171 中危 3.16.1 3.21.7, 3.20.3, 3.19.6, 3.16.3 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58

com.squareup.okio:okio CVE-2023-3635 中危 2.8.0 3.4.0, 1.17.6 okio: GzipSource class improper exception handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14

io.netty:netty-codec-http CVE-2024-29025 中危 4.1.101.Final 4.1.108.Final netty-codec-http: Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22

io.netty:netty-codec-http CVE-2025-67735 中危 4.1.101.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58

io.netty:netty-codec-redis CVE-2026-42586 中危 4.1.101.Final 4.2.13.Final, 4.1.133.Final netty-codec-redis: Netty: Command injection via CRLF characters in Redis codec encoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42586

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-41417 中危 4.1.101.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46

io.netty:netty-common CVE-2024-47535 中危 4.1.101.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57

io.netty:netty-common CVE-2025-25193 中危 4.1.101.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00

io.netty:netty-common CVE-2024-47535 中危 4.1.38.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57

io.netty:netty-common CVE-2025-25193 中危 4.1.38.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00

io.netty:netty-codec-http CVE-2026-42580 中危 4.1.101.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42581 中危 4.1.101.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42585 中危 4.1.101.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-50020 中危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.13.5 2.14.0 jackson-databind contains the general-purpose data-binding functionali ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05

io.netty:netty-codec CVE-2025-58057 中危 4.1.101.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.13.5 2.18.8, 2.21.4, 3.1.4 jackson-databind contains the general-purpose data-binding functionali ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

io.netty:netty-handler CVE-2019-20445 中危 4.1.38.Final 4.1.45 netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30

io.netty:netty-handler CVE-2023-34462 中危 4.1.38.Final 4.1.94.Final netty: SniHandler 16MB allocation leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03

io.netty:netty-codec-http CVE-2021-21290 中危 4.1.38.Final 4.1.59.Final netty: Information disclosure via the local system temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35

io.netty:netty-codec-http CVE-2021-43797 中危 4.1.38.Final 4.1.71.Final netty: control chars in header names may lead to HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11

io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-transport-native-kqueue CVE-2026-45536 中危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-transport-native-kqueue CVE-2026-45536 中危 4.1.101.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-codec-http CVE-2022-24823 中危 4.1.38.Final 4.1.77.Final netty: world readable temporary file containing sensitive data

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32

io.netty:netty-codec-http CVE-2024-29025 中危 4.1.38.Final 4.1.108.Final netty-codec-http: Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22

io.netty:netty-codec-http CVE-2025-67735 中危 4.1.38.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58

mysql:mysql-connector-java CVE-2019-2692 中危 5.1.42 8.0.16 mysql-connector-java: privilege escalation in MySQL connector

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2692

镜像层: sha256:0f60983965db683c076bb32279102f9cbf1f0ec065333c62f9e86cf31c058128

发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34

mysql:mysql-connector-java CVE-2022-21363 中危 5.1.42 8.0.28 mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363

镜像层: sha256:0f60983965db683c076bb32279102f9cbf1f0ec065333c62f9e86cf31c058128

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

io.netty:netty-codec-http CVE-2026-41417 中危 4.1.38.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46

mysql:mysql-connector-java CVE-2022-21363 中危 8.0.27 8.0.28 mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363

镜像层: sha256:0f60983965db683c076bb32279102f9cbf1f0ec065333c62f9e86cf31c058128

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.11 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.12.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

org.apache.zookeeper:zookeeper CVE-2024-23944 中危 3.7.2 3.8.4, 3.9.2 Apache-ZooKeeper: Apache ZooKeeper: Information disclosure in persistent watcher handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23944

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-03-15 11:15 修改: 2026-06-17 07:13

io.netty:netty-codec-http CVE-2026-42580 中危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42581 中危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42585 中危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-50020 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

org.springframework:spring-context CVE-2024-38820 中危 5.3.39 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.13.5 3.1.4, 2.18.9, 2.21.5 jackson-databind contains the general-purpose data-binding functionali ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-06-23 21:17 修改: 2026-06-25 16:14

ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.12 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00

org.springframework:spring-web CVE-2024-38820 中危 5.3.39 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.12 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00

ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.12 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

commons-configuration:commons-configuration CVE-2025-46392 低危 1.10 apache-commons-configuration: Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46392

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-05-09 10:15 修改: 2026-06-17 09:26

io.netty:netty-codec-http CVE-2025-58056 低危 4.1.38.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43

io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.101.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

org.springframework:spring-context CVE-2025-22233 低危 5.3.39 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45

io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.38.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2025-58056 低危 4.1.101.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43

com.google.guava:guava CVE-2020-8908 低危 30.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:48faa49fc06414fe38be9bbe83e7a52b81b1cab76fc8543b7e08619707d62a57

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×