docker.io/jgraph/drawio:30.2.6 linux/amd64

docker.io/jgraph/drawio:30.2.6 - Trivy安全扫描结果 扫描时间: 2026-06-29 11:19
全部漏洞信息
低危漏洞:21 中危漏洞:57 高危漏洞:3 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-06-29 11:19

docker.io/jgraph/drawio:30.2.6 (ubuntu 24.04) (ubuntu)
低危漏洞:21 中危漏洞:56 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
curl CVE-2026-11856 中危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl CVE-2026-8927 中危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libc-bin CVE-2026-4046 中危 2.39-0ubuntu8.7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55
libc-bin CVE-2026-4437 中危 2.39-0ubuntu8.7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
libc-bin CVE-2026-4438 中危 2.39-0ubuntu8.7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
libc-bin CVE-2026-5435 中危 2.39-0ubuntu8.7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59
libc-bin CVE-2026-6238 中危 2.39-0ubuntu8.7 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17
libc6 CVE-2026-4046 中危 2.39-0ubuntu8.7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55
libc6 CVE-2026-4437 中危 2.39-0ubuntu8.7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
libc6 CVE-2026-4438 中危 2.39-0ubuntu8.7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
libc6 CVE-2026-5435 中危 2.39-0ubuntu8.7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59
libc6 CVE-2026-6238 中危 2.39-0ubuntu8.7 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17
libcurl4t64 CVE-2026-11856 中危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4t64 CVE-2026-8927 中危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libgcrypt20 CVE-2026-41989 中危 1.10.3-2build1 1.10.3-2ubuntu0.1 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-23 05:16 修改: 2026-06-17 10:47
libgnutls30t64 CVE-2026-33845 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-30 18:16 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-33846 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-04 10:15 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-3832 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-30 18:16 修改: 2026-06-24 17:16
libgnutls30t64 CVE-2026-3833 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-30 18:16 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-42009 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-18 13:16 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-42010 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-07 12:16 修改: 2026-06-26 11:16
libgnutls30t64 CVE-2026-42011 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-07 15:16 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-42012 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-26 22:16 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-42013 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-26 22:16 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-42014 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-16 02:16 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-42015 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-26 22:16 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-5260 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-26 22:16 修改: 2026-06-26 08:16
libgnutls30t64 CVE-2026-5419 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-01 21:16 修改: 2026-06-26 08:16
libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libpython3.12-minimal CVE-2025-13462 中危 3.12.3-1ubuntu0.13 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
libpython3.12-minimal CVE-2026-2297 中危 3.12.3-1ubuntu0.13 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
libpython3.12-stdlib CVE-2025-13462 中危 3.12.3-1ubuntu0.13 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
libpython3.12-stdlib CVE-2026-2297 中危 3.12.3-1ubuntu0.13 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libsystemd0 CVE-2026-40226 中危 255.4-1ubuntu8.15 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40226 中危 255.4-1ubuntu8.15 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libxslt1.1 CVE-2025-10911 中危 1.1.39-0exp1ubuntu0.24.04.3 libxslt: use-after-free with key data stored cross-RVT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10911

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2025-09-25 16:15 修改: 2026-06-26 08:16
libxslt1.1 CVE-2025-7425 中危 1.1.39-0exp1ubuntu0.24.04.3 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2025-07-10 14:15 修改: 2026-06-25 03:16
locales CVE-2026-4046 中危 2.39-0ubuntu8.7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55
locales CVE-2026-4437 中危 2.39-0ubuntu8.7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
locales CVE-2026-4438 中危 2.39-0ubuntu8.7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
locales CVE-2026-5435 中危 2.39-0ubuntu8.7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59
locales CVE-2026-6238 中危 2.39-0ubuntu8.7 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17
mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
python3.12 CVE-2025-13462 中危 3.12.3-1ubuntu0.13 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
python3.12 CVE-2026-2297 中危 3.12.3-1ubuntu0.13 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
python3.12-minimal CVE-2025-13462 中危 3.12.3-1ubuntu0.13 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
python3.12-minimal CVE-2026-2297 中危 3.12.3-1ubuntu0.13 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
tar CVE-2025-45582 中危 1.35+dfsg-3build1 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25
tar CVE-2026-5704 中危 1.35+dfsg-3build1 1.35+dfsg-3ubuntu0.1 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
wget CVE-2021-31879 中危 1.21.4-1ubuntu4.1 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.15 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libcurl4t64 CVE-2026-12064 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4t64 CVE-2026-8286 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4t64 CVE-2026-8458 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4t64 CVE-2026-8924 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4t64 CVE-2026-8932 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4t64 CVE-2026-9547 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl CVE-2026-9547 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libicu74 CVE-2025-5222 低危 74.2-1ubuntu3.1 icu: Stack buffer overflow in the SRBRoot::addTag function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222

镜像层: sha256:dd68fc48c58f88b9e3c2650f6a7461b3c292f10c13c6c3a2579bed49b6dcdde2

发布日期: 2025-05-27 21:15 修改: 2026-06-25 05:16
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
curl CVE-2026-10536 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libgcrypt20 CVE-2024-2236 低危 1.10.3-2build1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
curl CVE-2026-12064 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl CVE-2026-8286 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl CVE-2026-8458 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl CVE-2026-8924 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl CVE-2026-8932 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.15 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libcurl4t64 CVE-2026-10536 低危 8.5.0-2ubuntu10.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:9df792db729fdbb9f8ace580eb4a8185fe2dc649724ddadbae07e5e4d289b8e7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:0 中危漏洞:1 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
commons-fileupload:commons-fileupload CVE-2023-24998 高危 1.4 1.5 FileUpload: FileUpload DoS with excessive parts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998

镜像层: sha256:3a02c53b9780ee755fad5d7687d7719375491392b6efa26ffc1b951e936c788c

发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40
commons-fileupload:commons-fileupload CVE-2025-48976 高危 1.4 1.6.0 apache-commons-fileupload: Apache Commons FileUpload DoS via part headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48976

镜像层: sha256:3a02c53b9780ee755fad5d7687d7719375491392b6efa26ffc1b951e936c788c

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
commons-io:commons-io CVE-2024-47554 高危 2.11.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:3a02c53b9780ee755fad5d7687d7719375491392b6efa26ffc1b951e936c788c

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.12.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:3a02c53b9780ee755fad5d7687d7719375491392b6efa26ffc1b951e936c788c

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×