| bsdutils |
CVE-2026-27456 |
中危 |
1:2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| glib-networking |
CVE-2026-10028 |
中危 |
2.80.0-1build1 |
|
glib-networking: Infinite loop in glib-networking GnuTLS backend allows remote denial of service via circular certificate chain
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10028
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-28 23:16 修改: 2026-06-17 10:11
|
| glib-networking-common |
CVE-2026-10028 |
中危 |
2.80.0-1build1 |
|
glib-networking: Infinite loop in glib-networking GnuTLS backend allows remote denial of service via circular certificate chain
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10028
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-28 23:16 修改: 2026-06-17 10:11
|
| glib-networking-services |
CVE-2026-10028 |
中危 |
2.80.0-1build1 |
|
glib-networking: Infinite loop in glib-networking GnuTLS backend allows remote denial of service via circular certificate chain
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10028
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-28 23:16 修改: 2026-06-17 10:11
|
| jq |
CVE-2026-41256 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: embedded NUL truncates top-level jq programs loaded with -f
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
|
| jq |
CVE-2026-41257 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: signed-int overflow in stack_reallocate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
|
| jq |
CVE-2026-43895 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
|
| jq |
CVE-2026-43896 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: stack overflow in recursive object merge
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
|
| jq |
CVE-2026-44777 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: stack overflow in module loading on mutual include
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
|
| libavahi-client3 |
CVE-2025-59529 |
中危 |
0.8-13ubuntu6.2 |
|
avahi: simple clients denial-of-service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46
|
| libavahi-common-data |
CVE-2025-59529 |
中危 |
0.8-13ubuntu6.2 |
|
avahi: simple clients denial-of-service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46
|
| libavahi-common3 |
CVE-2025-59529 |
中危 |
0.8-13ubuntu6.2 |
|
avahi: simple clients denial-of-service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46
|
| libblkid1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| libc-bin |
CVE-2026-4046 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| libc-bin |
CVE-2026-4437 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| libc-bin |
CVE-2026-4438 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| libc-bin |
CVE-2026-5435 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Out-of-bounds write via TSIG record processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
|
| libc-bin |
CVE-2026-6238 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Application crash or uninitialized memory read via crafted DNS response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
|
| libc6 |
CVE-2026-4046 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| libc6 |
CVE-2026-4437 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| libc6 |
CVE-2026-4438 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| libc6 |
CVE-2026-5435 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Out-of-bounds write via TSIG record processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
|
| libc6 |
CVE-2026-6238 |
中危 |
2.39-0ubuntu8.7 |
|
glibc: glibc: Application crash or uninitialized memory read via crafted DNS response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
|
| libduktape207 |
CVE-2026-12216 |
中危 |
2.7.0+tests-0ubuntu3 |
|
Duktape: svaarala duktape duk_api_bytecode.c memory corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12216
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-06-15 04:16 修改: 2026-06-17 10:14
|
| libexpat1 |
CVE-2025-66382 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Denial of service via crafted file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
|
| libfdisk1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| libjavascriptcoregtk-4.1-0 |
CVE-2025-66286 |
中危 |
2.52.3-0ubuntu0.24.04.1 |
|
webkitgtk: Authorization bypass through WebPage::send-request signal handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66286
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-23 13:16 修改: 2026-06-17 09:56
|
| libjq1 |
CVE-2026-41256 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: embedded NUL truncates top-level jq programs loaded with -f
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
|
| libjq1 |
CVE-2026-41257 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: signed-int overflow in stack_reallocate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
|
| libjq1 |
CVE-2026-43895 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
|
| libjq1 |
CVE-2026-43896 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: stack overflow in recursive object merge
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
|
| libjq1 |
CVE-2026-44777 |
中危 |
1.7.1-3ubuntu0.24.04.2 |
|
jq: stack overflow in module loading on mutual include
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
|
| libmount1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| libp11-kit0 |
CVE-2026-13757 |
中危 |
0.25.3-4ubuntu2.1 |
|
p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
|
| libpixman-1-0 |
CVE-2023-37769 |
中危 |
0.42.2-1build1 |
|
stress-test master commit e4c878 was discovered to contain a FPE vulne ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37769
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2023-07-17 20:15 修改: 2026-06-17 06:08
|
| libsmartcols1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| libsndfile1 |
CVE-2025-52194 |
中危 |
1.2.2-1ubuntu5.24.04.1 |
|
libsndfile: buffer overflow when processing crafted IRCAM audio files
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52194
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-08-21 15:15 修改: 2026-06-17 09:36
|
| libsndfile1 |
CVE-2026-37555 |
中危 |
1.2.2-1ubuntu5.24.04.1 |
|
libsndfile: integer overflow in ima_reader_init()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37555
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-29 16:16 修改: 2026-07-15 02:20
|
| libsoup-3.0-0 |
CVE-2025-14523 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins)
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14523
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-12-11 13:15 修改: 2026-06-29 21:16
|
| libsoup-3.0-0 |
CVE-2025-32049 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Denial of Service attack to websocket server
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32049
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-04-03 14:15 修改: 2026-06-30 01:16
|
| libsoup-3.0-0 |
CVE-2025-4035 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Cookie domain validation bypass via uppercase characters in libsoup
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4035
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-04-29 13:15 修改: 2026-06-30 15:16
|
| libsoup-3.0-0 |
CVE-2026-0716 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Out-of-Bounds Read in libsoup WebSocket Frame Processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0716
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-01-13 23:16 修改: 2026-06-17 10:11
|
| libsoup-3.0-0 |
CVE-2026-0719 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0719
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-01-08 13:15 修改: 2026-07-15 02:17
|
| libsoup-3.0-0 |
CVE-2026-3632 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: libsoup: HTTP Smuggling and Server-Side Request Forgery via Malformed Hostnames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3632
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
|
| libsoup-3.0-0 |
CVE-2026-3633 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: libsoup: Header and HTTP request injection via CRLF injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3633
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
|
| libsoup-3.0-0 |
CVE-2026-3634 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: libsoup: HTTP header injection and response splitting via CRLF injection in Content-Type header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3634
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
|
| libsoup-3.0-common |
CVE-2025-14523 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins)
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14523
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-12-11 13:15 修改: 2026-06-29 21:16
|
| libsoup-3.0-common |
CVE-2025-32049 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Denial of Service attack to websocket server
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32049
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-04-03 14:15 修改: 2026-06-30 01:16
|
| libsoup-3.0-common |
CVE-2025-4035 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Cookie domain validation bypass via uppercase characters in libsoup
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4035
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-04-29 13:15 修改: 2026-06-30 15:16
|
| libsoup-3.0-common |
CVE-2026-0716 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Out-of-Bounds Read in libsoup WebSocket Frame Processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0716
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-01-13 23:16 修改: 2026-06-17 10:11
|
| libsoup-3.0-common |
CVE-2026-0719 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0719
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-01-08 13:15 修改: 2026-07-15 02:17
|
| libsoup-3.0-common |
CVE-2026-3632 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: libsoup: HTTP Smuggling and Server-Side Request Forgery via Malformed Hostnames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3632
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
|
| libsoup-3.0-common |
CVE-2026-3633 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: libsoup: Header and HTTP request injection via CRLF injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3633
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
|
| libsoup-3.0-common |
CVE-2026-3634 |
中危 |
3.4.4-5ubuntu0.7 |
|
libsoup: libsoup: HTTP header injection and response splitting via CRLF injection in Content-Type header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3634
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-03-17 10:16 修改: 2026-06-17 10:43
|
| libuuid1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| libwebkit2gtk-4.1-0 |
CVE-2025-66286 |
中危 |
2.52.3-0ubuntu0.24.04.1 |
|
webkitgtk: Authorization bypass through WebPage::send-request signal handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66286
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-23 13:16 修改: 2026-06-17 09:56
|
| libxslt1.1 |
CVE-2025-10911 |
中危 |
1.1.39-0exp1ubuntu0.24.04.3 |
|
libxslt: use-after-free with key data stored cross-RVT
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10911
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-09-25 16:15 修改: 2026-06-30 00:16
|
| libxslt1.1 |
CVE-2025-7425 |
中危 |
1.1.39-0exp1ubuntu0.24.04.3 |
|
libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-07-10 14:15 修改: 2026-06-29 21:16
|
| mount |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| util-linux |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| libavahi-common3 |
CVE-2024-52616 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Predictable Transaction IDs
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| libavahi-client3 |
CVE-2024-52615 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Uses Constant Source Port
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| libgcrypt20 |
CVE-2024-2236 |
低危 |
1.10.3-2ubuntu0.1 |
|
libgcrypt: vulnerable to Marvin Attack
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
|
| libharfbuzz-icu0 |
CVE-2026-22693 |
低危 |
8.3.0-2build2 |
|
harfbuzz: Null Pointer Dereference in harfbuzz
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22693
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-01-10 06:15 修改: 2026-06-17 10:20
|
| libharfbuzz0b |
CVE-2026-22693 |
低危 |
8.3.0-2build2 |
|
harfbuzz: Null Pointer Dereference in harfbuzz
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22693
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-01-10 06:15 修改: 2026-06-17 10:20
|
| libicu74 |
CVE-2025-5222 |
低危 |
74.2-1ubuntu3.1 |
|
icu: Stack buffer overflow in the SRBRoot::addTag function
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-05-27 21:15 修改: 2026-07-14 13:17
|
| libbpf1 |
CVE-2025-29481 |
低危 |
1:1.3.0-2build2 |
|
libbpf: Heap Buffer Overflow in libbpf
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29481
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-04-07 20:15 修改: 2026-06-17 09:05
|
| libsoup-3.0-0 |
CVE-2025-9901 |
低危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Improper Handling of HTTP Vary Header in libsoup Caching
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9901
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-09-03 13:15 修改: 2026-06-30 03:17
|
| libsoup-3.0-0 |
CVE-2026-3099 |
低危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Libsoup: Authentication bypass via digest authentication replay attack
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3099
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-03-12 14:16 修改: 2026-06-17 10:43
|
| libavahi-common-data |
CVE-2024-52615 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Uses Constant Source Port
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| libavahi-common-data |
CVE-2024-52616 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Predictable Transaction IDs
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| libavahi-client3 |
CVE-2024-52616 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Predictable Transaction IDs
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| libcairo-gobject2 |
CVE-2017-7475 |
低危 |
1.18.0-3build1 |
|
cairo: NULL pointer dereference with a crafted font file
漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24
|
| libcairo-gobject2 |
CVE-2018-18064 |
低危 |
1.18.0-3build1 |
|
cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46
|
| libcairo2 |
CVE-2017-7475 |
低危 |
1.18.0-3build1 |
|
cairo: NULL pointer dereference with a crafted font file
漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24
|
| libcairo2 |
CVE-2018-18064 |
低危 |
1.18.0-3build1 |
|
cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46
|
| libpam-systemd |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.16 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libsoup-3.0-common |
CVE-2025-9901 |
低危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Improper Handling of HTTP Vary Header in libsoup Caching
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9901
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-09-03 13:15 修改: 2026-06-30 03:17
|
| libsoup-3.0-common |
CVE-2026-3099 |
低危 |
3.4.4-5ubuntu0.7 |
|
libsoup: Libsoup: Authentication bypass via digest authentication replay attack
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3099
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-03-12 14:16 修改: 2026-06-17 10:43
|
| libsystemd-shared |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.16 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libsystemd0 |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.16 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libudev1 |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.16 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libavahi-common3 |
CVE-2024-52615 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Uses Constant Source Port
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| libwavpack1 |
CVE-2021-44269 |
低危 |
5.6.0-1build1 |
|
wavpack: Heap out-of-bounds read in WavpackPackSamples()
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44269
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2022-03-10 17:44 修改: 2026-06-17 04:12
|
| libdw1t64 |
CVE-2025-1352 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38
|
| libdw1t64 |
CVE-2025-1376 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
|
| libelf1t64 |
CVE-2025-1352 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38
|
| login |
CVE-2024-56433 |
低危 |
1:4.13+dfsg1-4ubuntu3.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| libsndfile1 |
CVE-2024-50613 |
低危 |
1.2.2-1ubuntu5.24.04.1 |
|
libsndfile: Reachable assertion in mpeg_l3_encoder_close
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50613
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2024-10-27 22:15 修改: 2026-06-17 08:04
|
| passwd |
CVE-2024-56433 |
低危 |
1:4.13+dfsg1-4ubuntu3.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| systemd |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.16 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| systemd-dev |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.16 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| systemd-sysv |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.16 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| udev |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.16 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libelf1t64 |
CVE-2025-1376 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376
镜像层: sha256:ef9f9a61784515a79f92bf2f3255d885af35dc64d03f85198d493d00a3ad8b66
发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
|
| zlib1g |
CVE-2026-27171 |
低危 |
1:1.3.dfsg-3.1ubuntu2.1 |
|
zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171
镜像层: sha256:f103cd120fdd6cbc7f3d0e1d5bfb3e16290c32ead7b822d15c34460ecdf64b29
发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
|