| c-ares |
CVE-2026-33630 |
高危 |
1.34.6-r0 |
1.34.8-r0 |
c-ares: c-ares: Use-after-free / double-free in query-completion handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libcurl |
CVE-2026-11352 |
高危 |
8.20.0-r1 |
8.21.0-r0 |
curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01
|
| libcurl |
CVE-2026-11586 |
高危 |
8.20.0-r1 |
8.21.0-r0 |
curl: curl: Denial of Service via WebSocket PING flood
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59
|
| libcurl |
CVE-2026-12064 |
高危 |
8.20.0-r1 |
8.21.0-r0 |
curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
|
| libcurl |
CVE-2026-8286 |
高危 |
8.20.0-r1 |
8.21.0-r0 |
curl: curl: Insecure connection establishment due to TLS configuration mismatch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
|
| libcurl |
CVE-2026-8925 |
高危 |
8.20.0-r1 |
8.21.0-r0 |
curl: curl: Double-free vulnerability in SASL authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
|
| libcurl |
CVE-2026-8927 |
高危 |
8.20.0-r1 |
8.21.0-r0 |
curl: Information disclosure due to uncleared proxy authentication state
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
|
| libcurl |
CVE-2026-9547 |
高危 |
8.20.0-r1 |
8.21.0-r0 |
curl: curl: Man-in-the-middle attack via SSH host key bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
|
| libexpat |
CVE-2026-56408 |
高危 |
2.8.1-r0 |
2.8.2-r0 |
libexpat before 2.8.2 has an integer overflow in copyString.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
|
| musl-utils |
CVE-2025-26519 |
高危 |
1.2.5-r3 |
1.2.5-r10 |
musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26519
镜像层: sha256:08bc4e534116aa76b16015484b82eac51f9a593416feae9296c8a2d4bb7aa4a2
发布日期: 2025-02-14 04:15 修改: 2026-06-17 09:01
|
| musl-utils |
CVE-2026-40200 |
高危 |
1.2.5-r3 |
1.2.6-r2 |
musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200
镜像层: sha256:08bc4e534116aa76b16015484b82eac51f9a593416feae9296c8a2d4bb7aa4a2
发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
|
| p11-kit |
CVE-2026-2100 |
高危 |
0.25.5-r2 |
0.26.2-r0 |
p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2100
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-03-26 21:17 修改: 2026-07-26 00:16
|
| p11-kit-dev |
CVE-2026-2100 |
高危 |
0.25.5-r2 |
0.26.2-r0 |
p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2100
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-03-26 21:17 修改: 2026-07-26 00:16
|
| libcurl |
CVE-2026-8924 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
curl: curl: Cookie injection via malicious HTTP server using super cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
|
| libcurl |
CVE-2026-8926 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
curl: curl: Information disclosure via incorrect .netrc password lookup
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
|
| libcurl |
CVE-2026-8932 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
|
| libcurl |
CVE-2026-9079 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
|
| libcurl |
CVE-2026-9080 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
|
| libcurl |
CVE-2026-9545 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
libcurl: libcurl: Information disclosure via cached SSL session and early data
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
|
| libcurl |
CVE-2026-9546 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
libcurl: libcurl: Information disclosure due to persistent Referer header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9546
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:53
|
| busybox |
CVE-2024-58251 |
中危 |
1.36.1-r31 |
1.37.0-r24 |
In netstat in BusyBox through 1.37.0, local users can launch of networ ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251
镜像层: sha256:08bc4e534116aa76b16015484b82eac51f9a593416feae9296c8a2d4bb7aa4a2
发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
|
| libexpat |
CVE-2026-50219 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
|
| libexpat |
CVE-2026-56131 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
|
| libexpat |
CVE-2026-56132 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
|
| libexpat |
CVE-2026-56403 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
|
| libexpat |
CVE-2026-56404 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
|
| libexpat |
CVE-2026-56405 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
|
| libexpat |
CVE-2026-56406 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
|
| libexpat |
CVE-2026-56407 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
libexpat: libexpat: Arbitrary code execution due to integer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
|
| libexpat |
CVE-2026-56409 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
|
| libexpat |
CVE-2026-56410 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
|
| libexpat |
CVE-2026-56411 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
|
| libexpat |
CVE-2026-56412 |
中危 |
2.8.1-r0 |
2.8.2-r0 |
libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412
镜像层: sha256:9b47dd27fb2a88152b9f6d45b2d9a7387bd9547a68e5fd9a8a2f2e05ab789e72
发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
|
| busybox-binsh |
CVE-2024-58251 |
中危 |
1.36.1-r31 |
1.37.0-r24 |
In netstat in BusyBox through 1.37.0, local users can launch of networ ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251
镜像层: sha256:08bc4e534116aa76b16015484b82eac51f9a593416feae9296c8a2d4bb7aa4a2
发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
|
| libcurl |
CVE-2026-10536 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
|
| musl-utils |
CVE-2026-6042 |
中危 |
1.2.5-r3 |
1.2.6-r1 |
musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042
镜像层: sha256:08bc4e534116aa76b16015484b82eac51f9a593416feae9296c8a2d4bb7aa4a2
发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
|
| nghttp2-libs |
CVE-2026-58055 |
中危 |
1.69.0-r0 |
1.70.0-r0 |
nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
|
| libcurl |
CVE-2026-11564 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11564
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:00
|
| libcurl |
CVE-2026-11856 |
中危 |
8.20.0-r1 |
8.21.0-r0 |
curl: curl: Information disclosure via incorrect Digest authentication header reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
|
| ssl_client |
CVE-2024-58251 |
中危 |
1.36.1-r31 |
1.37.0-r24 |
In netstat in BusyBox through 1.37.0, local users can launch of networ ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251
镜像层: sha256:08bc4e534116aa76b16015484b82eac51f9a593416feae9296c8a2d4bb7aa4a2
发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
|
| libcurl |
CVE-2026-8458 |
低危 |
8.20.0-r1 |
8.21.0-r0 |
libcurl might in some circumstances reuse the wrong connection when as ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458
镜像层: sha256:b7a705458448dd5f114b3c4fa13efcf0abc72a29acfdb24fdc162ae079cad734
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
|
| busybox |
CVE-2025-46394 |
低危 |
1.36.1-r31 |
1.37.0-r27 |
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394
镜像层: sha256:08bc4e534116aa76b16015484b82eac51f9a593416feae9296c8a2d4bb7aa4a2
发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
|
| busybox-binsh |
CVE-2025-46394 |
低危 |
1.36.1-r31 |
1.37.0-r27 |
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394
镜像层: sha256:08bc4e534116aa76b16015484b82eac51f9a593416feae9296c8a2d4bb7aa4a2
发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
|
| ssl_client |
CVE-2025-46394 |
低危 |
1.36.1-r31 |
1.37.0-r27 |
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394
镜像层: sha256:08bc4e534116aa76b16015484b82eac51f9a593416feae9296c8a2d4bb7aa4a2
发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
|