docker.io/geoservercloud/geoserver-cloud-gateway:3.0.1.1 linux/amd64

docker.io/geoservercloud/geoserver-cloud-gateway:3.0.1.1 - Trivy安全扫描结果 扫描时间: 2026-09-14 10:13
全部漏洞信息
低危漏洞:31 中危漏洞:191 高危漏洞:18 严重漏洞:4

系统OS: ubuntu 26.04 扫描引擎: Trivy 扫描时间: 2026-09-14 10:13

docker.io/geoservercloud/geoserver-cloud-gateway:3.0.1.1 (ubuntu 26.04) (ubuntu)
低危漏洞:29 中危漏洞:173 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-13595 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
bsdutils CVE-2026-27456 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
bsdutils CVE-2026-3184 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
bsdutils CVE-2026-53612 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53613 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53614 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53615 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl CVE-2026-11856 中危 8.18.0-1ubuntu2.3 8.18.0-1ubuntu2.4 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
curl CVE-2026-13608 中危 8.18.0-1ubuntu2.3 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
curl CVE-2026-18924 中危 8.18.0-1ubuntu2.3 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
curl CVE-2026-19931 中危 8.18.0-1ubuntu2.3 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
curl CVE-2026-80229 中危 8.18.0-1ubuntu2.3 When performing transfers via libcurl\u2019s multi interface, pooled T ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:06
curl CVE-2026-80230 中危 8.18.0-1ubuntu2.3 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
curl CVE-2026-80255 中危 8.18.0-1ubuntu2.3 A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
curl CVE-2026-82209 中危 8.18.0-1ubuntu2.3 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
diffutils CVE-2026-53910 中危 1:3.12-1 1:3.12-1ubuntu0.1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
gnu-coreutils CVE-2026-56391 中危 9.7-3ubuntu2 9.7-3ubuntu2.1 coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-07-24 09:16 修改: 2026-08-26 13:52
libattr1 CVE-2026-54371 中危 1:2.5.2-4 1:2.5.2-4ubuntu0.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-29 14:16 修改: 2026-09-11 13:18
libblkid1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libblkid1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libblkid1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin CVE-2026-18374 中危 2.43-2ubuntu2.3 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-19499 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin CVE-2026-19542 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin CVE-2026-6368 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-6791 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-77117 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin CVE-2026-80489 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-gconv-modules-extra CVE-2026-18374 中危 2.43-2ubuntu2.3 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc-gconv-modules-extra CVE-2026-19499 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-gconv-modules-extra CVE-2026-19542 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-gconv-modules-extra CVE-2026-6368 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-gconv-modules-extra CVE-2026-6791 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-gconv-modules-extra CVE-2026-77117 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-gconv-modules-extra CVE-2026-80489 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2026-18374 中危 2.43-2ubuntu2.3 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-19499 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2026-19542 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2026-6368 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-6791 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-77117 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2026-80489 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4t64 CVE-2026-11856 中危 8.18.0-1ubuntu2.3 8.18.0-1ubuntu2.4 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64 CVE-2026-13608 中危 8.18.0-1ubuntu2.3 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
libcurl4t64 CVE-2026-18924 中危 8.18.0-1ubuntu2.3 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl4t64 CVE-2026-19931 中危 8.18.0-1ubuntu2.3 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl4t64 CVE-2026-80229 中危 8.18.0-1ubuntu2.3 When performing transfers via libcurl\u2019s multi interface, pooled T ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:06
libcurl4t64 CVE-2026-80230 中危 8.18.0-1ubuntu2.3 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
libcurl4t64 CVE-2026-80255 中危 8.18.0-1ubuntu2.3 A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
libcurl4t64 CVE-2026-82209 中危 8.18.0-1ubuntu2.3 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libexpat1 CVE-2025-66382 中危 2.7.4-1 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libexpat1 CVE-2026-32776 中危 2.7.4-1 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32777 中危 2.7.4-1 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32778 中危 2.7.4-1 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-41080 中危 2.7.4-1 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libexpat1 CVE-2026-45186 中危 2.7.4-1 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19
libexpat1 CVE-2026-50219 中危 2.7.4-1 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat1 CVE-2026-56131 中危 2.7.4-1 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56132 中危 2.7.4-1 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56403 中危 2.7.4-1 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56404 中危 2.7.4-1 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56405 中危 2.7.4-1 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat1 CVE-2026-56406 中危 2.7.4-1 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat1 CVE-2026-56407 中危 2.7.4-1 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1 CVE-2026-56408 中危 2.7.4-1 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libexpat1 CVE-2026-56409 中危 2.7.4-1 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat1 CVE-2026-56410 中危 2.7.4-1 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1 CVE-2026-56411 中危 2.7.4-1 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1 CVE-2026-56412 中危 2.7.4-1 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libexpat1 CVE-2026-66046 中危 2.7.4-1 Expat through 2.8.3 contains a denial of service vulnerability caused ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17
libexpat1 CVE-2026-72522 中危 2.7.4-1 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33
libexpat1 CVE-2026-76641 中危 2.7.4-1 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17
libexpat1 CVE-2026-76957 中危 2.7.4-1 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56
libmount1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libmount1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libmount1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libp11-kit0 CVE-2026-13757 中危 0.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
libsmartcols1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libsmartcols1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libsmartcols1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssh2-1t64 CVE-2026-66032 中危 1.11.1-1ubuntu0.26.04.3 1.11.1-1ubuntu0.26.04.4 libssh2: libssh2: Arbitrary code execution via double-free in SFTP session

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66032

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-07-24 17:17 修改: 2026-08-07 01:07
libssh2-1t64 CVE-2026-66033 中危 1.11.1-1ubuntu0.26.04.3 1.11.1-1ubuntu0.26.04.4 libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66033

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44
libssh2-1t64 CVE-2026-66035 中危 1.11.1-1ubuntu0.26.04.3 1.11.1-1ubuntu0.26.04.4 libssh2: libssh2: Arbitrary code execution via heap buffer overflow during SSH negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66035

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:41
libssl3t64 CVE-2026-14456 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-18798 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63072 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3t64 CVE-2026-63076 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libuuid1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libuuid1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libuuid1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
locales CVE-2026-18374 中危 2.43-2ubuntu2.3 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
locales CVE-2026-19499 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
locales CVE-2026-19542 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
locales CVE-2026-6368 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
locales CVE-2026-6791 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
locales CVE-2026-77117 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
locales CVE-2026-80489 中危 2.43-2ubuntu2.3 2.43-2ubuntu2.4 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-13595 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
login CVE-2026-27456 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
login CVE-2026-3184 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
login CVE-2026-53612 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-53613 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-53614 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-53615 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
mount CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
mount CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl CVE-2026-14456 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
openssl CVE-2026-18798 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl CVE-2026-63072 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl CVE-2026-63076 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
openssl-provider-legacy CVE-2026-14456 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-18798 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-63072 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl-provider-legacy CVE-2026-63076 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
p11-kit CVE-2026-13757 中危 0.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
p11-kit-modules CVE-2026-13757 中危 0.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
perl-base CVE-2026-12087 中危 5.40.1-7ubuntu0.1 5.40.1-7ubuntu0.3 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base CVE-2026-13221 中危 5.40.1-7ubuntu0.1 5.40.1-7ubuntu0.3 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-07-13 17:16 修改: 2026-09-08 22:17
perl-base CVE-2026-15534 中危 5.40.1-7ubuntu0.1 5.40.1-7ubuntu0.2 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
perl-base CVE-2026-19487 中危 5.40.1-7ubuntu0.1 5.40.1-7ubuntu0.2 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
perl-base CVE-2026-57432 中危 5.40.1-7ubuntu0.1 5.40.1-7ubuntu0.3 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-07-13 17:17 修改: 2026-09-08 22:18
perl-base CVE-2026-57433 中危 5.40.1-7ubuntu0.1 5.40.1-7ubuntu0.3 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
rust-coreutils CVE-2026-35341 中危 0.8.0-0ubuntu3 A vulnerability in uutils coreutils mkfifo allows for the unauthorized ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35341

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35344 中危 0.8.0-0ubuntu3 The dd utility in uutils coreutils suppresses errors during file trunc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35344

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35345 中危 0.8.0-0ubuntu3 A vulnerability in the tail utility of uutils coreutils allows for the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35345

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35348 中危 0.8.0-0ubuntu3 The sort utility in uutils coreutils is vulnerable to a process panic ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35348

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35350 中危 0.8.0-0ubuntu3 The cp utility in uutils coreutils fails to properly handle setuid and ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35350

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35351 中危 0.8.0-0ubuntu3 The mv utility in uutils coreutils fails to preserve file ownership du ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35351

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35352 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35352

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35354 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35354

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35357 中危 0.8.0-0ubuntu3 The cp utility in uutils coreutils is vulnerable to an information dis ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35357

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35359 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35359

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35360 中危 0.8.0-0ubuntu3 The touch utility in uutils coreutils is vulnerable to a Time-of-Check ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35360

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35363 中危 0.8.0-0ubuntu3 A vulnerability in the rm utility of uutils coreutils allows the bypas ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35363

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35364 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35364

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35367 中危 0.8.0-0ubuntu3 The nohup utility in uutils coreutils creates its default output file, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35367

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35368 中危 0.8.0-0ubuntu3 A vulnerability exists in the chroot utility of uutils coreutils when ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35368

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35370 中危 0.8.0-0ubuntu3 The id utility in uutils coreutils miscalculates the groups= section o ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35370

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35371 中危 0.8.0-0ubuntu3 The id utility in uutils coreutils exhibits incorrect behavior in its ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35371

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35373 中危 0.8.0-0ubuntu3 A logic error in the ln utility of uutils coreutils causes the program ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35373

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35374 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35374

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35377 中危 0.8.0-0ubuntu3 A logic error in the env utility of uutils coreutils causes a failure ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35377

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
tar CVE-2026-18477 中危 1.35+dfsg-4ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17
tar CVE-2026-18508 中危 1.35+dfsg-4ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17
util-linux CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
util-linux CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
util-linux CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
zlib1g CVE-2026-85091 中危 1:1.3.dfsg+really1.3.1-1ubuntu3 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
libcurl4t64 CVE-2026-8932 低危 8.18.0-1ubuntu2.3 8.18.0-1ubuntu2.5 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
openssl CVE-2026-14457 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
openssl CVE-2026-54874 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl CVE-2026-63073 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl CVE-2026-63074 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl CVE-2026-63075 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
openssl CVE-2026-75803 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.5 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
curl CVE-2026-8932 低危 8.18.0-1ubuntu2.3 8.18.0-1ubuntu2.5 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
gnu-coreutils CVE-2025-5278 低危 9.7-3ubuntu2 9.7-3ubuntu2.1 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2025-05-27 21:15 修改: 2026-09-08 15:18
libssl3t64 CVE-2026-14457 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
login.defs CVE-2024-56433 低危 1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
openssl-provider-legacy CVE-2026-14457 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
openssl-provider-legacy CVE-2026-54874 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl-provider-legacy CVE-2026-63073 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl-provider-legacy CVE-2026-63074 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl-provider-legacy CVE-2026-63075 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
openssl-provider-legacy CVE-2026-75803 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.5 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libssl3t64 CVE-2026-54874 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3t64 CVE-2026-63073 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
passwd CVE-2024-56433 低危 1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libssl3t64 CVE-2026-63074 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3t64 CVE-2026-63075 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libssl3t64 CVE-2026-75803 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.5 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:c83e5dc3396b085be5beef9cbd69a49c599699a67b3b7ca17536990313480767

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libsystemd0 CVE-2026-40228 低危 259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40228 低危 259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:50b6cd51fa506047c67e6da76917c1a59109d1c08ac5fdaa5575113736bcffb1

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libbz2-1.0 CVE-2026-42250 低危 1.0.8-6build2 1.0.8-6ubuntu0.1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
libgcrypt20 CVE-2024-2236 低危 1.12.0-2ubuntu1 1.12.0-2ubuntu1.1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
gpgv CVE-2026-57062 低危 2.4.8-4ubuntu3 2.4.8-4ubuntu3.1 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16
zlib1g CVE-2026-27171 低危 1:1.3.dfsg+really1.3.1-1ubuntu3 1:1.3.dfsg+really1.3.1-1ubuntu3.1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:2 中危漏洞:18 高危漏洞:10 严重漏洞:4
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-handler CVE-2026-75595 严重 4.2.15.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65182 严重 11.0.22 11.0.25, 10.1.58, 9.0.121 Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65905 严重 11.0.22 11.0.25, 10.1.58, 9.0.121 tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-68525 严重 11.0.22 11.0.25, 10.1.58, 9.0.121 org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http3 CVE-2026-56816 高危 4.2.15.Final 4.2.16.Final Netty is a network application framework for development of protocol s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56816

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-21 22:17 修改: 2026-08-07 20:47
io.netty:netty-codec-compression CVE-2026-59901 高危 4.2.15.Final 4.2.16.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.3.6 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
io.netty:netty-codec-http CVE-2026-55831 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
tools.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 3.1.2 3.1.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
tools.jackson.core:jackson-databind CVE-2026-54512 高危 3.1.2 3.1.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
tools.jackson.core:jackson-databind CVE-2026-54513 高危 3.1.2 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
io.netty:netty-handler CVE-2026-75596 中危 4.2.15.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.4.4 5.6.3 org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
io.netty:netty-codec-http CVE-2026-59899 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.26.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
io.netty:netty-codec-http CVE-2026-59903 中危 4.2.15.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http CVE-2026-59921 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
io.netty:netty-codec-dns CVE-2026-73508 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-08-13 15:20 修改: 2026-09-09 20:58
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.81.1 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-04-15 10:16 修改: 2026-09-11 13:17
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-http CVE-2026-56746 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http CVE-2026-59898 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:70492b7cdf2f0c4968186861756eae1f6b0c7b565f4315ae90133e4c5c0023fd

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
tools.jackson.core:jackson-databind CVE-2026-54514 中危 3.1.2 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
tools.jackson.core:jackson-databind CVE-2026-54515 中危 3.1.2 3.1.4 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
tools.jackson.core:jackson-databind CVE-2026-54516 中危 3.1.2 3.1.4 jackson-databind: jackson-databind: Security bypass due to improper handling of renamed properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54516

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:52
tools.jackson.core:jackson-databind CVE-2026-54517 中危 3.1.2 3.1.4 jackson-databind: jackson-databind: Information disclosure via improper JsonView filter application

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54517

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:51
tools.jackson.core:jackson-databind CVE-2026-54518 中危 3.1.2 3.1.4 jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54518

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-06-23 22:16 修改: 2026-06-27 20:49
tools.jackson.core:jackson-databind CVE-2026-59888 中危 3.1.2 3.1.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
tools.jackson.core:jackson-databind CVE-2026-59889 中危 3.1.2 3.1.5, 3.2.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
ch.qos.logback:logback-core CVE-2026-10532 低危 1.5.25 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
ch.qos.logback:logback-core CVE-2026-9828 低危 1.5.25 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:2301ddc0bd06f795d8e14bf0c535297cd3438cafd096af7086c1c7f7bfbbaf4a

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
usr/bin/pebble (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-05-22 16:16 修改: 2026-09-11 13:17
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:24d9bad9efb08e44497f74cc79f9b0400818037a24628fd910db9145e5048649

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×