docker.io/certifytheweb/management-hub:7.2.0.0 linux/amd64

docker.io/certifytheweb/management-hub:7.2.0.0 - Trivy安全扫描结果 扫描时间: 2026-08-31 13:16
全部漏洞信息
低危漏洞:13 中危漏洞:26 高危漏洞:0 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-08-31 13:16

docker.io/certifytheweb/management-hub:7.2.0.0 (ubuntu 24.04) (ubuntu)
低危漏洞:13 中危漏洞:26 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
diffutils CVE-2026-53910 中危 1:3.10-1build1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
libattr1 CVE-2026-54371 中危 1:2.5.2-1build1.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 14:16 修改: 2026-08-27 13:18
libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libp11-kit0 CVE-2026-13757 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
libp11-kit0 CVE-2026-18938 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libssl3t64 CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
openssl CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:653155f196e23d6f94eba101de5d6f20898bcf564a6a261f1108e519c742efa0

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:653155f196e23d6f94eba101de5d6f20898bcf564a6a261f1108e519c742efa0

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
perl-base CVE-2025-15649 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base CVE-2026-12087 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base CVE-2026-13221 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-base CVE-2026-48959 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base CVE-2026-48962 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
perl-base CVE-2026-57432 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-base CVE-2026-57433 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-base CVE-2026-7017 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
perl-base CVE-2026-9538 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 17:16 修改: 2026-08-21 13:16
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 16:16 修改: 2026-08-21 13:16
util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libssl3t64 CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libgcrypt20 CVE-2024-2236 低危 1.10.3-2ubuntu0.1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libicu74 CVE-2025-5222 低危 74.2-1ubuntu3.1 icu: Stack buffer overflow in the SRBRoot::addTag function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222

镜像层: sha256:653155f196e23d6f94eba101de5d6f20898bcf564a6a261f1108e519c742efa0

发布日期: 2025-05-27 21:15 修改: 2026-08-26 07:16
libssl3t64 CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:653155f196e23d6f94eba101de5d6f20898bcf564a6a261f1108e519c742efa0

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:653155f196e23d6f94eba101de5d6f20898bcf564a6a261f1108e519c742efa0

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:653155f196e23d6f94eba101de5d6f20898bcf564a6a261f1108e519c742efa0

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
app/Certify.Server.Core.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
app/Certify.Server.HubService.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
usr/share/dotnet/shared/Microsoft.AspNetCore.App/10.0.11/Microsoft.AspNetCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
usr/share/dotnet/shared/Microsoft.NETCore.App/10.0.11/Microsoft.NETCore.App.deps.json (dotnet-core)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×