docker.io/kerberos/kerberos:latest linux/amd64

docker.io/kerberos/kerberos:latest - Trivy安全扫描结果 扫描时间: 2026-08-25 11:44
全部漏洞信息
低危漏洞:64 中危漏洞:89 高危漏洞:117 严重漏洞:24

系统OS: debian 9.13 扫描引擎: Trivy 扫描时间: 2026-08-25 11:44

docker.io/kerberos/kerberos:latest (debian 9.13) (debian)
低危漏洞:62 中危漏洞:54 高危漏洞:95 严重漏洞:20
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bzip2 CVE-2019-12900 严重 1.0.6-8.1 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15
dpkg CVE-2022-1664 严重 1.18.25 1.18.26 Dpkg::Source::Archive in dpkg, the Debian package management system, b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1664

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-05-26 14:15 修改: 2026-06-17 04:22
libbz2-1.0 CVE-2019-12900 严重 1.0.6-8.1 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15
libdb5.3 CVE-2019-8457 严重 5.3.28-12+deb9u1 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42
libexpat1 CVE-2022-22822 严重 2.2.0-2+deb9u3 2.2.0-2+deb9u4 expat: Integer overflow in addBinding in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29
libexpat1 CVE-2022-22823 严重 2.2.0-2+deb9u3 2.2.0-2+deb9u4 expat: Integer overflow in build_model in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29
libexpat1 CVE-2022-22824 严重 2.2.0-2+deb9u3 2.2.0-2+deb9u4 expat: Integer overflow in defineAttribute in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29
libexpat1 CVE-2022-23852 严重 2.2.0-2+deb9u3 2.2.0-2+deb9u5 expat: Integer overflow in function XML_GetBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-24 02:15 修改: 2026-06-17 04:30
libexpat1 CVE-2022-25235 严重 2.2.0-2+deb9u3 2.2.0-2+deb9u5 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33
libexpat1 CVE-2022-25236 严重 2.2.0-2+deb9u3 2.2.0-2+deb9u5 expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33
libexpat1 CVE-2022-25315 严重 2.2.0-2+deb9u3 2.2.0-2+deb9u5 expat: Integer overflow in storeRawNames()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33
libfreetype6 CVE-2022-27404 严重 2.6.3-3.2+deb9u2 FreeType: Buffer overflow in sfnt_init_face

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27404

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-04-22 14:15 修改: 2026-06-17 04:36
libldap-2.4-2 CVE-2022-29155 严重 2.4.44+dfsg-5+deb9u8 2.4.44+dfsg-5+deb9u9 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-05-04 20:15 修改: 2026-06-17 04:39
libldap-common CVE-2022-29155 严重 2.4.44+dfsg-5+deb9u8 2.4.44+dfsg-5+deb9u9 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-05-04 20:15 修改: 2026-06-17 04:39
libpng16-16 CVE-2017-12652 严重 1.6.28-1+deb9u1 libpng: does not check length of chunks against user limit

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12652

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2019-07-10 15:15 修改: 2026-06-17 01:03
libpython2.7-minimal CVE-2021-3177 严重 2.7.13-2+deb9u5 2.7.13-2+deb9u6 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2021-01-19 06:15 修改: 2026-06-17 04:04
libpython2.7-stdlib CVE-2021-3177 严重 2.7.13-2+deb9u5 2.7.13-2+deb9u6 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2021-01-19 06:15 修改: 2026-06-17 04:04
libsqlite3-0 CVE-2019-8457 严重 3.16.2-5+deb9u3 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42
python2.7 CVE-2021-3177 严重 2.7.13-2+deb9u5 2.7.13-2+deb9u6 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2021-01-19 06:15 修改: 2026-06-17 04:04
python2.7-minimal CVE-2021-3177 严重 2.7.13-2+deb9u5 2.7.13-2+deb9u6 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2021-01-19 06:15 修改: 2026-06-17 04:04
libexpat1 CVE-2021-45960 高危 2.2.0-2+deb9u3 2.2.0-2+deb9u4 expat: Large number of prefixed XML attributes on a single tag can crash libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-01 19:15 修改: 2026-06-17 04:14
libexpat1 CVE-2021-46143 高危 2.2.0-2+deb9u3 2.2.0-2+deb9u4 expat: Integer overflow in doProlog in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-06 04:15 修改: 2026-06-17 04:14
libexpat1 CVE-2022-22825 高危 2.2.0-2+deb9u3 2.2.0-2+deb9u4 expat: Integer overflow in lookup in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29
libexpat1 CVE-2022-22826 高危 2.2.0-2+deb9u3 2.2.0-2+deb9u4 expat: Integer overflow in nextScaffoldPart in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29
libexpat1 CVE-2022-22827 高危 2.2.0-2+deb9u3 2.2.0-2+deb9u4 expat: Integer overflow in storeAtts in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29
libexpat1 CVE-2022-23990 高危 2.2.0-2+deb9u3 2.2.0-2+deb9u4 expat: integer overflow in the doProlog function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-26 19:15 修改: 2026-06-17 04:31
libfdisk1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
libcomerr2 CVE-2022-1304 高危 1.43.4-2+deb9u2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
libfreetype6 CVE-2022-27405 高危 2.6.3-3.2+deb9u2 FreeType: Segmentation violation via FNT_Size_Request

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27405

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17
libfreetype6 CVE-2022-27406 高危 2.6.3-3.2+deb9u2 Freetype: Segmentation violation via FT_Request_Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27406

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17
libgcc1 CVE-2018-12886 高危 1:6.3.0-18+deb9u1 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38
libgcrypt20 CVE-2021-33560 高危 1.7.6-2+deb9u4 libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-06-08 11:15 修改: 2026-06-17 03:54
libgd3 CVE-2017-6363 高危 2.2.5-5.2+0~20190808.4+debian9~1.gbp6d9343 In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap- ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6363

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2020-02-27 05:15 修改: 2026-06-17 01:22
libglib2.0-0 CVE-2021-27218 高危 2.50.3-2+deb9u2 2.50.3-2+deb9u3 glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27218

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:44
libglib2.0-0 CVE-2021-27219 高危 2.50.3-2+deb9u2 2.50.3-2+deb9u3 glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27219

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:44
libglib2.0-data CVE-2021-27218 高危 2.50.3-2+deb9u2 2.50.3-2+deb9u3 glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27218

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:44
libglib2.0-data CVE-2021-27219 高危 2.50.3-2+deb9u2 2.50.3-2+deb9u3 glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27219

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:44
libgmp10 CVE-2021-43618 高危 2:6.1.2+dfsg-1 2:6.1.2+dfsg-1+deb9u1 gmp: Integer overflow and resultant buffer overflow via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2021-11-15 04:15 修改: 2026-06-17 04:11
libjpeg62-turbo CVE-2019-2201 高危 1:1.5.1-2+deb9u1 1:1.5.1-2+deb9u2 libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress gigapixel images

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2201

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2019-11-13 18:15 修改: 2026-06-17 02:33
e2fslibs CVE-2022-1304 高危 1.43.4-2+deb9u2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
e2fsprogs CVE-2022-1304 高危 1.43.4-2+deb9u2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
liblzma5 CVE-2022-1271 高危 5.2.2-1.2+b1 5.2.2-1.2+deb9u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22
libmagic-mgc CVE-2019-8907 高危 1:5.30-1+deb9u3 file: do_core_note in readelf.c allows remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8907

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42
libmagic1 CVE-2019-8907 高危 1:5.30-1+deb9u3 file: do_core_note in readelf.c allows remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8907

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42
libmount1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
libncurses5 CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43
libncursesw5 CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43
libnghttp2-14 CVE-2018-1000168 高危 1.18.1-1+deb9u1 1.18.1-1+deb9u2 nghttp2: Null pointer dereference when too large ALTSVC frame is received

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000168

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2018-05-08 15:29 修改: 2026-06-17 01:32
libnghttp2-14 CVE-2020-11080 高危 1.18.1-1+deb9u1 1.18.1-1+deb9u2 nghttp2: overly large SETTINGS frames can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11080

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2020-06-03 23:15 修改: 2026-06-17 02:49
libnginx-mod-http-auth-pam CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libnginx-mod-http-dav-ext CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libnginx-mod-http-echo CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libnginx-mod-http-geoip CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libnginx-mod-http-image-filter CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libnginx-mod-http-subs-filter CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libnginx-mod-http-upstream-fair CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libnginx-mod-http-xslt-filter CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libnginx-mod-mail CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libnginx-mod-stream CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
libpam-systemd CVE-2019-3843 高危 232-25+deb9u13 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35
libpam-systemd CVE-2019-3844 高危 232-25+deb9u13 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35
libpam-systemd CVE-2020-1712 高危 232-25+deb9u13 232-25+deb9u14 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02
file CVE-2019-8907 高危 1:5.30-1+deb9u3 file: do_core_note in readelf.c allows remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8907

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42
gcc-6-base CVE-2018-12886 高危 6.3.0-18+deb9u1 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38
libpython2.7-minimal CVE-2015-20107 高危 2.7.13-2+deb9u5 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
gpgv CVE-2018-1000858 高危 2.1.18-8~deb9u4 gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000858

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-12-20 17:29 修改: 2026-06-17 01:33
libpython2.7-stdlib CVE-2015-20107 高危 2.7.13-2+deb9u5 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
libpython3.5-minimal CVE-2015-20107 高危 3.5.3-1+deb9u4 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
libpython3.5-minimal CVE-2021-3737 高危 3.5.3-1+deb9u4 3.5.3-1+deb9u5 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05
libpython3.5-stdlib CVE-2015-20107 高危 3.5.3-1+deb9u4 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
libpython3.5-stdlib CVE-2021-3737 高危 3.5.3-1+deb9u4 3.5.3-1+deb9u5 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05
libsasl2-2 CVE-2022-24407 高危 2.1.27~101-g0780600+dfsg-3+deb9u1 2.1.27~101-g0780600+dfsg-3+deb9u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31
libsasl2-modules CVE-2022-24407 高危 2.1.27~101-g0780600+dfsg-3+deb9u1 2.1.27~101-g0780600+dfsg-3+deb9u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31
libsasl2-modules-db CVE-2022-24407 高危 2.1.27~101-g0780600+dfsg-3+deb9u1 2.1.27~101-g0780600+dfsg-3+deb9u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31
libsmartcols1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
gzip CVE-2022-1271 高危 1.6-5+b1 1.6-5+deb9u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22
libss2 CVE-2022-1304 高危 1.43.4-2+deb9u2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
libssh2-1 CVE-2019-13115 高危 1.7.0-1+deb9u1 1.7.0-1+deb9u2 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13115

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-07-16 18:15 修改: 2026-06-17 02:16
libssh2-1 CVE-2019-17498 高危 1.7.0-1+deb9u1 1.7.0-1+deb9u2 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17498

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-10-21 22:15 修改: 2026-06-17 02:24
libssl1.0.2 CVE-2022-0778 高危 1.0.2u-1~deb9u6 1.0.2u-1~deb9u7 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21
libssl1.1 CVE-2022-0778 高危 1.1.0l-1~deb9u4 1.1.0l-1~deb9u5 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21
libssl1.1 CVE-2022-1292 高危 1.1.0l-1~deb9u4 1.1.0l-1~deb9u6 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22
libstdc++6 CVE-2018-12886 高危 6.3.0-18+deb9u1 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38
libsystemd0 CVE-2019-3843 高危 232-25+deb9u13 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35
libsystemd0 CVE-2019-3844 高危 232-25+deb9u13 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35
libsystemd0 CVE-2020-1712 高危 232-25+deb9u13 232-25+deb9u14 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02
libtinfo5 CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43
libudev1 CVE-2019-3843 高危 232-25+deb9u13 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35
libudev1 CVE-2019-3844 高危 232-25+deb9u13 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35
libudev1 CVE-2020-1712 高危 232-25+deb9u13 232-25+deb9u14 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02
libuuid1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
libwebp6 CVE-2020-36332 高危 0.5.2-1+deb9u1 libwebp: excessive memory allocation when reading a file

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36332

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-05-21 17:15 修改: 2026-06-17 03:15
mount CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
ncurses-base CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43
ncurses-bin CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43
nginx CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
nginx-common CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
nginx-full CVE-2021-3618 高危 1.10.3-1+deb9u7 ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3618

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:05
openssl CVE-2022-0778 高危 1.1.0l-1~deb9u4 1.1.0l-1~deb9u5 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21
openssl CVE-2022-1292 高危 1.1.0l-1~deb9u4 1.1.0l-1~deb9u6 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22
perl-base CVE-2020-16156 高危 5.24.1-3+deb9u7 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57
libblkid1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
python2.7 CVE-2015-20107 高危 2.7.13-2+deb9u5 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
bsdutils CVE-2016-2779 高危 1:2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
python2.7-minimal CVE-2015-20107 高危 2.7.13-2+deb9u5 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
python3.5 CVE-2015-20107 高危 3.5.3-1+deb9u4 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
python3.5 CVE-2021-3737 高危 3.5.3-1+deb9u4 3.5.3-1+deb9u5 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05
python3.5-minimal CVE-2015-20107 高危 3.5.3-1+deb9u4 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
python3.5-minimal CVE-2021-3737 高危 3.5.3-1+deb9u4 3.5.3-1+deb9u5 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05
systemd CVE-2019-3843 高危 232-25+deb9u13 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35
systemd CVE-2019-3844 高危 232-25+deb9u13 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35
systemd CVE-2020-1712 高危 232-25+deb9u13 232-25+deb9u14 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02
util-linux CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
xz-utils CVE-2022-1271 高危 5.2.2-1.2+b1 5.2.2-1.2+deb9u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22
zlib1g CVE-2018-25032 高危 1:1.2.8.dfsg-5 1:1.2.8.dfsg-5+deb9u1 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-03-25 09:15 修改: 2026-07-14 12:16
libssl1.1 CVE-2019-1551 中危 1.1.0l-1~deb9u4 1.1.0l-1~deb9u5 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28
libssl1.1 CVE-2021-4160 中危 1.1.0l-1~deb9u4 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:19
libnettle6 CVE-2018-16869 中危 3.3-1+deb9u1 nettle: Leaky data conversion exposing a manager oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44
libhogweed4 CVE-2018-16869 中危 3.3-1+deb9u1 nettle: Leaky data conversion exposing a manager oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44
libexpat1 CVE-2022-25313 中危 2.2.0-2+deb9u3 2.2.0-2+deb9u5 expat: Stack exhaustion in doctype parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33
libpam-systemd CVE-2021-3997 中危 232-25+deb9u13 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06
libsystemd0 CVE-2021-3997 中危 232-25+deb9u13 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06
libtiff5 CVE-2022-0561 中危 4.0.8-2+deb9u7 4.0.8-2+deb9u8 libtiff: Denial of Service via crafted TIFF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0561

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-02-11 18:15 修改: 2026-06-17 04:20
libtiff5 CVE-2022-0562 中危 4.0.8-2+deb9u7 4.0.8-2+deb9u8 libtiff: Null source pointer lead to Denial of Service via crafted TIFF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0562

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-02-11 18:15 修改: 2026-06-17 04:20
libtiff5 CVE-2022-22844 中危 4.0.8-2+deb9u7 4.0.8-2+deb9u8 libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22844

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29
libpcre3 CVE-2020-14155 中危 2:8.44-2+0~20210301.9+debian9~1.gbpa278ad pcre: Integer overflow when parsing callout numeric arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:54
libgcrypt20 CVE-2019-13627 中危 1.7.6-2+deb9u4 libgcrypt: ECDSA timing attack allowing private key leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13627

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-09-25 15:15 修改: 2026-06-17 02:17
libnginx-mod-http-auth-pam CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
libglib2.0-0 CVE-2021-28153 中危 2.50.3-2+deb9u2 2.50.3-2+deb9u3 glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28153

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2021-03-11 22:15 修改: 2026-06-17 03:45
libudev1 CVE-2021-3997 中危 232-25+deb9u13 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06
libpython2.7-minimal CVE-2021-4189 中危 2.7.13-2+deb9u5 2.7.13-2+deb9u6 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libnginx-mod-http-dav-ext CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
file CVE-2019-8905 中危 1:5.30-1+deb9u3 file: stack-based buffer over-read in do_core_note in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8905

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42
libpython2.7-stdlib CVE-2021-4189 中危 2.7.13-2+deb9u5 2.7.13-2+deb9u6 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libnginx-mod-http-echo CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
libgd3 CVE-2021-38115 中危 2.2.5-5.2+0~20190808.4+debian9~1.gbp6d9343 read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) thr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38115

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-08-04 21:15 修改: 2026-06-17 04:01
nginx CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
libpython3.5-minimal CVE-2021-3733 中危 3.5.3-1+deb9u4 3.5.3-1+deb9u5 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05
nginx-common CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
libpython3.5-minimal CVE-2021-4189 中危 3.5.3-1+deb9u4 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
nginx-full CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
libnginx-mod-http-geoip CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
libmagic-mgc CVE-2019-8905 中危 1:5.30-1+deb9u3 file: stack-based buffer over-read in do_core_note in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8905

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42
openssl CVE-2019-1551 中危 1.1.0l-1~deb9u4 1.1.0l-1~deb9u5 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28
openssl CVE-2021-4160 中危 1.1.0l-1~deb9u4 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:19
libpython3.5-stdlib CVE-2021-3733 中危 3.5.3-1+deb9u4 3.5.3-1+deb9u5 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05
libpython3.5-stdlib CVE-2021-4189 中危 3.5.3-1+deb9u4 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libnginx-mod-http-image-filter CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
python2.7 CVE-2021-4189 中危 2.7.13-2+deb9u5 2.7.13-2+deb9u6 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libglib2.0-data CVE-2021-28153 中危 2.50.3-2+deb9u2 2.50.3-2+deb9u3 glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28153

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2021-03-11 22:15 修改: 2026-06-17 03:45
libnginx-mod-http-subs-filter CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
python2.7-minimal CVE-2021-4189 中危 2.7.13-2+deb9u5 2.7.13-2+deb9u6 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:2f6ec83273d9f43b4401e6ff3aeb3b5437ee85991595c672d12c607cc4346250

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libmagic1 CVE-2019-8905 中危 1:5.30-1+deb9u3 file: stack-based buffer over-read in do_core_note in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8905

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42
libnginx-mod-http-upstream-fair CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
python3.5 CVE-2021-3733 中危 3.5.3-1+deb9u4 3.5.3-1+deb9u5 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05
python3.5 CVE-2021-4189 中危 3.5.3-1+deb9u4 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libsqlite3-0 CVE-2019-19645 中危 3.16.2-5+deb9u3 sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19645

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2019-12-09 16:15 修改: 2026-06-17 02:26
libsqlite3-0 CVE-2020-13631 中危 3.16.2-5+deb9u3 sqlite: Virtual table can be renamed into the name of one of its shadow tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13631

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2020-05-27 15:15 修改: 2026-06-17 02:53
python3.5-minimal CVE-2021-3733 中危 3.5.3-1+deb9u4 3.5.3-1+deb9u5 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05
python3.5-minimal CVE-2021-4189 中危 3.5.3-1+deb9u4 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libgd3 CVE-2021-40812 中危 2.2.5-5.2+0~20190808.4+debian9~1.gbp6d9343 The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40812

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-09-08 21:15 修改: 2026-06-17 04:07
libnginx-mod-http-xslt-filter CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
libgnutls30 CVE-2018-16868 中危 3.5.8-5+deb9u6 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16868

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44
systemd CVE-2021-3997 中危 232-25+deb9u13 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06
tar CVE-2018-20482 中危 1.29b-1.1 1.29b-1.1+deb9u1 tar: Infinite read loop in sparse_dump_region function in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20482

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-12-26 18:29 修改: 2026-06-17 01:52
libnginx-mod-mail CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
wget CVE-2021-31879 中危 1.18-5+deb9u3 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
libgnutls30 CVE-2021-4209 中危 3.5.8-5+deb9u6 GnuTLS: Null pointer dereference in MD_UPDATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libnginx-mod-stream CVE-2020-36309 中危 1.10.3-1+deb9u7 ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36309

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2021-04-06 19:15 修改: 2026-06-17 03:15
libtinfo5 CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libnginx-mod-http-echo CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
bsdutils CVE-2021-37600 低危 1:2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00
gpgv CVE-2018-9234 低危 2.1.18-8~deb9u4 GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9234

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-04-04 00:29 修改: 2026-06-17 02:06
libnginx-mod-http-geoip CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
libudev1 CVE-2018-16888 低危 232-25+deb9u13 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
libudev1 CVE-2018-6954 低危 232-25+deb9u13 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02
gpgv CVE-2019-14855 低危 2.1.18-8~deb9u4 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19
libuuid1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00
libfdisk1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00
login CVE-2018-7169 低危 1:4.4-4.1+deb9u1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02
libnginx-mod-http-image-filter CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
mount CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00
libmount1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00
ncurses-base CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
ncurses-base CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
ncurses-base CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libgssapi-krb5-2 CVE-2017-11462 低危 1.15-1+deb9u3 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01
ncurses-bin CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
ncurses-bin CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
ncurses-bin CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libnginx-mod-http-subs-filter CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
libncurses5 CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
nginx CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
libncurses5 CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libnginx-mod-http-upstream-fair CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
nginx-common CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
libsepol1 CVE-2021-36084 低危 2.6-2 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libsepol1 CVE-2021-36085 低危 2.6-2 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
nginx-full CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
libsepol1 CVE-2021-36086 低危 2.6-2 libsepol: use-after-free in cil_reset_classpermission()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libsepol1 CVE-2021-36087 低危 2.6-2 libsepol: heap-based buffer overflow in ebitmap_match_any()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libncurses5 CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libsmartcols1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00
passwd CVE-2018-7169 低危 1:4.4-4.1+deb9u1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02
libgd3 CVE-2018-14553 低危 2.2.5-5.2+0~20190808.4+debian9~1.gbp6d9343 gd: NULL pointer dereference in gdImageClone

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14553

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2020-02-11 13:15 修改: 2026-06-17 01:41
libnginx-mod-http-xslt-filter CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
libncursesw5 CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
libncursesw5 CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libnginx-mod-mail CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
libncursesw5 CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libdevmapper1.02.1 CVE-2020-8991 低危 2:1.02.137-2 lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8991

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2020-02-14 05:15 修改: 2026-06-17 03:27
libnginx-mod-stream CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
libk5crypto3 CVE-2017-11462 低危 1.15-1+deb9u3 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01
libkrb5-3 CVE-2017-11462 低危 1.15-1+deb9u3 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01
libkrb5support0 CVE-2017-11462 低危 1.15-1+deb9u3 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01
coreutils CVE-2016-2781 低危 8.26-3 coreutils: Non-privileged session can escape to the parent session in chroot

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
libpam-systemd CVE-2018-16888 低危 232-25+deb9u13 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
libpam-systemd CVE-2018-6954 低危 232-25+deb9u13 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02
libnginx-mod-http-auth-pam CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
krb5-locales CVE-2017-11462 低危 1.15-1+deb9u3 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:757fced81a72c0580577876ffbf7edeed336ef8be380a490ab08d0964debbb7d

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01
libsystemd0 CVE-2018-16888 低危 232-25+deb9u13 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
libsystemd0 CVE-2018-6954 低危 232-25+deb9u13 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02
liblz4-1 CVE-2019-17543 低危 0.0~r131-2+deb9u1 lz4: heap-based buffer overflow in LZ4_write32

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17543

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-10-14 02:15 修改: 2026-06-17 02:24
systemd CVE-2018-16888 低危 232-25+deb9u13 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
systemd CVE-2018-6954 低危 232-25+deb9u13 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02
libnginx-mod-http-dav-ext CVE-2013-0337 低危 1.10.3-1+deb9u7 The default configuration of nginx, possibly 1.3.13 and earlier, uses ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337

镜像层: sha256:e691ef26096cc3865feb9ef331e30cd467564887bd816c1d5ccf36a1397336d6

发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
dmsetup CVE-2020-8991 低危 2:1.02.137-2 lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8991

镜像层: sha256:e383e5a82109d436b0171f650028b33a5f3cb925015dd9f49c4181aa8140e619

发布日期: 2020-02-14 05:15 修改: 2026-06-17 03:27
util-linux CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00
libblkid1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00
libtinfo5 CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
libtinfo5 CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
tzdata DLA-2797-1 未知 2021a-0+deb9u1 2021a-0+deb9u2 tzdata - new upstream version

漏洞详情:

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata DLA-2963-1 未知 2021a-0+deb9u1 2021a-0+deb9u3 tzdata - new timezone database

漏洞详情:

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata DLA-3051-1 未知 2021a-0+deb9u1 2021a-0+deb9u4 tzdata - new timezone database

漏洞详情:

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
debian-archive-keyring DLA-2948-1 未知 2017.5+deb9u1 2017.5+deb9u2 debian-archive-keyring - security update

漏洞详情:

镜像层: sha256:af9ed0aefcf5340f2ee3d7c6290730b1c79925ec5a1d0cd04850e0525111c4e0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
Node.js (node-pkg)
低危漏洞:0 中危漏洞:11 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
chart.js CVE-2020-7746 高危 1.0.2 2.9.4 chart.js: prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7746

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2020-10-29 08:15 修改: 2026-06-17 03:25
progressbar.js CVE-2023-26133 高危 1.0.1 1.1.1 progressbar.js vulnerable to Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26133

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2023-06-12 05:15 修改: 2026-06-17 05:42
bootstrap CVE-2018-14042 中危 3.3.7 4.1.2, 3.4.0 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14042

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2018-07-13 14:29 修改: 2026-06-17 01:40
bootstrap CVE-2018-20676 中危 3.3.7 3.4.0 bootstrap: XSS in the tooltip data-viewport attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20676

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2019-01-09 05:29 修改: 2026-06-17 01:53
bootstrap CVE-2018-20677 中危 3.3.7 3.4.0 bootstrap: XSS in the affix configuration target property

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20677

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2019-01-09 05:29 修改: 2026-06-17 01:53
bootstrap CVE-2019-8331 中危 3.3.7 4.3.1, 3.4.1 bootstrap: XSS in the tooltip or popover data-template attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8331

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2019-02-20 16:29 修改: 2026-06-17 02:41
bootstrap CVE-2024-6485 中危 3.3.7 bootstrap: Cross-Site Scripting via button plugin on bootstrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6485

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2024-07-11 17:15 修改: 2026-06-17 08:18
bootstrap CVE-2016-10735 中危 3.3.7 3.4.0, 4.0.0-beta.2 bootstrap: XSS in the data-target attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10735

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2019-01-09 05:29 修改: 2026-06-17 00:40
morris.js CVE-2017-16022 中危 0.5.0 Cross-Site Scripting in morris.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16022

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2018-06-04 19:29 修改: 2026-06-17 01:08
morris.js NSWG-ECO-307 中危 0.5.0 <0.0.0 XSS in Hover Over Label Names

漏洞详情:

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mustache CVE-2015-8862 中危 0.7.0 >=2.2.1 mustache package before 2.2.1 for Node.js allows remote attackers to c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8862

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2017-01-23 21:59 修改: 2026-05-13 00:24
bootstrap CVE-2018-14040 中危 3.3.7 4.1.2, 3.4.0 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14040

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2018-07-13 14:29 修改: 2026-06-17 01:40
video.js CVE-2021-23414 中危 5.17.0 7.14.3 Cross-site Scripting in video.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23414

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2021-07-28 08:15 修改: 2026-06-17 03:38
var/www/web/vendor/composer/installed.json (composer-vendor)
低危漏洞:2 中危漏洞:24 高危漏洞:20 严重漏洞:4
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
laravel/framework GHSA-qm5c-m76r-2hfr 严重 v5.4.36 6.18.31, 7.22.4 Laravel RCE vulnerability in "cookie" session driver

漏洞详情: https://github.com/advisories/GHSA-qm5c-m76r-2hfr

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2024-05-15 22:16 修改: 2024-05-15 22:16
mtdowling/jmespath.php CVE-2026-54133 严重 2.6.1 2.9.1 CompilerRuntime code injection via unescaped function names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54133

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:58
swiftmailer/swiftmailer CVE-2024-28859 严重 v5.4.12 6.0.0, 6.2.5 Deserialization Gadget chain in Swift Mailer

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28859

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2024-03-15 23:15 修改: 2026-06-17 07:21
symfony/process CVE-2024-51736 严重 v3.4.47 7.1.7, 4.0.0, 5.3.0, 6.3.0, 5.0.0, 6.1.0, 5.1.0, 5.4.0, 5.4.46, 6.2.0, 6.4.14, 7.1.0, 3.0.0, 5.2.0, 6.4.0 CVE-2024-51736: Command execution hijack on Windows with Process class

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51736

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2024-11-06 21:15 修改: 2026-06-17 08:06
guzzlehttp/guzzle CVE-2022-31090 高危 6.5.5 6.5.8, 7.4.5 Guzzle, an extensible PHP HTTP client. `Authorization` headers on requ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31090

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2022-06-27 22:15 修改: 2026-06-17 04:44
guzzlehttp/guzzle CVE-2022-31091 高危 6.5.5 6.5.8, 7.4.5 Guzzle, an extensible PHP HTTP client. `Authorization` and `Cookie` he ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31091

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2022-06-27 22:15 修改: 2026-06-17 04:44
guzzlehttp/guzzle CVE-2026-69246 高危 6.5.5 7.15.2, 8.0.1 Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Gu ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69246

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-08-03 21:16 修改: 2026-08-04 15:16
guzzlehttp/psr7 CVE-2022-24775 高危 1.8.3 2.1.1, 1.8.4 guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24775

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2022-03-21 19:15 修改: 2026-06-17 04:32
guzzlehttp/psr7 CVE-2023-29197 高危 1.8.3 2.4.5, 1.9.1 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29197

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2023-04-17 22:15 修改: 2026-06-17 05:49
aws/aws-sdk-php GHSA-27qh-8cxx-2cr5 高危 3.197.1 3.371.4 AWS SDK for PHP has CloudFront Policy Document Injection via Special Characters

漏洞详情: https://github.com/advisories/GHSA-27qh-8cxx-2cr5

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-03-27 19:54 修改: 2026-03-27 19:54
laravel/framework CVE-2018-15133 高危 v5.4.36 5.6.30 Laravel Framework RCE Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15133

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2018-08-09 19:29 修改: 2026-06-17 01:42
laravel/framework CVE-2020-19316 高危 v5.4.36 5.8.17 OS Command Injection in Laravel Framework

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19316

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2021-12-20 20:15 修改: 2026-06-17 02:59
laravel/framework CVE-2020-24941 高危 v5.4.36 6.18.35, 7.24.0 Improper Input Validation in Laravel

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24941

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2020-09-04 02:15 修改: 2026-06-17 03:06
laravel/framework CVE-2024-52301 高危 v5.4.36 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, 11.31.0 Laravel is a web application framework. When the register_argc_argv ph ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52301

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2024-11-12 20:15 修改: 2026-06-17 08:06
laravel/framework GHSA-4mg9-vhxq-vm7j 高危 v5.4.36 8.40.0, 6.20.26 SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database

漏洞详情: https://github.com/advisories/GHSA-4mg9-vhxq-vm7j

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2021-04-29 21:52 修改: 2021-11-18 19:46
laravel/framework GHSA-5vg9-5847-vvmq 高危 v5.4.36 13.10.0, 12.60.0 Laravel Framework: CRLF injection in default email rule

漏洞详情: https://github.com/advisories/GHSA-5vg9-5847-vvmq

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-06-17 13:53 修改: 2026-06-17 13:53
laravel/framework GHSA-x7p5-p2c9-phvg 高危 v5.4.36 6.20.14, 7.30.4, 8.24.0 Unexpected database bindings

漏洞详情: https://github.com/advisories/GHSA-x7p5-p2c9-phvg

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2021-02-02 15:47 修改: 2021-02-02 15:46
league/flysystem CVE-2021-32708 高危 1.0.70 2.1.1, 1.1.4 Flysystem is an open source file storage library for PHP. The whitespa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32708

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2021-06-24 17:15 修改: 2026-06-17 03:53
guzzlehttp/guzzle CVE-2022-29248 高危 6.5.5 7.4.3, 6.5.6 Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29248

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2022-05-25 18:15 修改: 2026-06-17 04:39
phpunit/phpunit CVE-2026-24765 高危 7.5.20 8.5.52, 9.6.33, 10.5.62, 11.5.50, 12.5.8 phpunit: PHPUnit: Arbitrary code execution via unsafe deserialization of code coverage files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24765

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-01-27 22:15 修改: 2026-06-17 10:23
guzzlehttp/guzzle CVE-2022-31042 高危 6.5.5 7.4.4, 6.5.7 Guzzle is an open source PHP HTTP client. In affected versions the `Co ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31042

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2022-06-10 00:15 修改: 2026-06-17 04:44
symfony/http-foundation CVE-2025-64500 高危 v3.4.47 6.4.0, 3.0.0, 5.4.50, 6.1.0, 6.2.0, 7.3.0, 4.0.0, 5.2.0, 5.3.0, 5.0.0, 5.1.0, 5.4.0, 6.3.0, 6.4.29, 7.1.0, 7.2.0, 7.3.7 Symfony is a PHP framework for web and console applications and a set ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64500

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2025-11-12 22:15 修改: 2026-06-17 09:54
symfony/http-kernel CVE-2022-24894 高危 v3.4.49 4.4.50, 2.2.0, 2.3.0, 3.1.0, 3.4.0, 5.4.0, 6.1.12, 4.0.0, 2.1.0, 2.6.0, 3.0.0, 3.2.0, 3.3.0, 4.1.0, 4.3.0, 2.5.0, 5.1.0, 5.2.0, 5.3.0, 5.4.20, 6.0.20, 6.2.6, 2.4.0, 2.7.0, 2.8.0, 4.2.0, 4.4.0 Symfony is a PHP framework for web and console applications and a set ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24894

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2023-02-03 22:15 修改: 2026-06-17 04:32
guzzlehttp/guzzle CVE-2022-31043 高危 6.5.5 7.4.4, 6.5.7 Guzzle is an open source PHP HTTP client. In affected versions `Author ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31043

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2022-06-10 00:15 修改: 2026-06-17 04:44
guzzlehttp/guzzle CVE-2026-67339 中危 6.5.5 7.14.2 guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Prox ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67339

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-08-01 13:17 修改: 2026-08-03 19:16
guzzlehttp/guzzle CVE-2026-67353 中危 6.5.5 7.15.1 guzzlehttp/guzzle versions before 7.15.1 contain a denial of service v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67353

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-08-01 13:17 修改: 2026-08-03 19:16
guzzlehttp/guzzle CVE-2026-67354 中危 6.5.5 7.15.1 guzzlehttp/guzzle versions before 7.15.1 contain an information disclo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67354

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-08-01 13:17 修改: 2026-08-03 19:16
guzzlehttp/guzzle CVE-2026-67355 中危 6.5.5 7.15.1 guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only co ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67355

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-08-01 13:17 修改: 2026-08-03 20:17
guzzlehttp/guzzle CVE-2026-69245 中危 6.5.5 7.15.2, 8.0.1 Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Se ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69245

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-08-03 21:16 修改: 2026-08-04 16:16
aws/aws-sdk-php CVE-2025-14761 中危 3.197.1 3.368.0 Key Commitment Issues in S3 Encryption Clients

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14761

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2025-12-17 21:15 修改: 2026-06-17 08:36
laravel/framework CVE-2017-14775 中危 v5.4.36 5.5.10 Timing attack vector for remember me token

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14775

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2017-09-28 01:29 修改: 2026-06-17 01:06
laravel/framework CVE-2021-43808 中危 v5.4.36 7.30.6, 8.75.0, 6.20.42 Laravel is a web application framework. Laravel prior to versions 8.75 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43808

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2021-12-08 00:15 修改: 2026-06-17 04:11
laravel/framework CVE-2025-27515 中危 v5.4.36 12.1.1, 11.44.1, 10.48.29 Laravel is a web application framework. When using wildcard validation ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27515

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2025-03-05 19:15 修改: 2026-06-17 09:03
laravel/framework GHSA-7852-w36x-6mf6 中危 v5.4.36 5.5.40, 5.6.15 Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior

漏洞详情: https://github.com/advisories/GHSA-7852-w36x-6mf6

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2024-05-15 22:08 修改: 2024-05-15 22:08
laravel/framework GHSA-crmm-hgp2-wgrp 中危 v5.4.36 13.12.0, 12.61.1 Laravel Framework: Temporary Signed URL Path Confusion

漏洞详情: https://github.com/advisories/GHSA-crmm-hgp2-wgrp

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-06-17 13:54 修改: 2026-06-17 13:54
guzzlehttp/guzzle CVE-2026-55568 中危 6.5.5 7.12.1 Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, in certain c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55568

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-06-23 16:17 修改: 2026-06-26 19:34
guzzlehttp/psr7 CVE-2026-48998 中危 1.8.3 2.10.2 guzzlehttp/psr7: guzzlehttp/psr7: Information disclosure via improper Host header validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48998

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-06-11 13:16 修改: 2026-06-17 10:55
nesbot/carbon CVE-2025-22145 中危 1.39.1 3.8.4, 2.72.6 Carbon is an international PHP extension for DateTime. Application pas ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22145

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2025-01-08 21:15 修改: 2026-06-17 08:45
guzzlehttp/psr7 CVE-2026-49214 中危 1.8.3 2.10.2 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49214

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-06-11 13:16 修改: 2026-06-17 10:55
psy/psysh CVE-2026-25129 中危 v0.9.12 0.12.19, 0.11.23 PsySH has Local Privilege Escalation via CWD .psysh.php auto-load

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25129

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-01-30 21:15 修改: 2026-06-17 10:24
guzzlehttp/psr7 CVE-2026-55766 中危 1.8.3 2.12.1 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55766

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-06-23 16:17 修改: 2026-06-30 17:17
guzzlehttp/psr7 CVE-2026-59882 中危 1.8.3 2.12.3 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59882

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-07-08 17:17 修改: 2026-07-17 14:29
symfony/http-foundation CVE-2024-50345 中危 v3.4.47 5.4.0, 6.3.0, 5.0.0, 5.1.0, 5.3.0, 6.1.0, 7.1.0, 7.1.7, 3.0.0, 4.0.0, 5.2.0, 5.4.46, 6.4.0, 6.2.0, 6.4.14 symfony/http-foundation is a module for the Symphony PHP framework whi ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50345

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2024-11-06 21:15 修改: 2026-06-17 08:04
guzzlehttp/guzzle CVE-2026-55767 中危 6.5.5 7.12.1 Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, CookieJar in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55767

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-06-23 16:17 修改: 2026-08-05 22:17
guzzlehttp/guzzle CVE-2026-59883 中危 6.5.5 7.12.3 guzzle/guzzle: Guzzle: Cross-host cookie disclosure and injection due to improper domain matching in CookieJar.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59883

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:01
symfony/process CVE-2026-24739 中危 v3.4.47 5.4.51, 6.4.33, 7.3.11, 7.4.5, 8.0.5 Symfony's incorrect argument escaping under MSYS2/Git Bash can lead to destructive file operations on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24739

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-01-28 21:16 修改: 2026-06-17 10:23
symfony/routing CVE-2026-45065 中危 v3.4.47 5.0.0, 5.1.0, 5.2.0, 5.3.0, 6.3.0, 7.4.12, 3.0.0, 4.0.0, 5.4.0, 6.2.0, 6.4.0, 6.4.40, 7.4.0, 8.0.12, 5.4.52, 7.2.0, 6.1.0, 7.1.0, 7.3.0 Symfony is a PHP framework for web and console applications and a set ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45065

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-07-14 18:17 修改: 2026-07-15 14:14
symfony/routing CVE-2026-48784 中危 v3.4.47 6.4.0, 7.1.0, 8.0.13, 5.4.0, 7.4.0, 5.4.53, 6.4.41, 5.1.0, 5.2.0, 6.1.0, 6.2.0, 6.3.0, 7.2.0, 7.3.0, 7.4.13, 3.0.0, 4.0.0, 5.0.0, 5.3.0 Symfony is a PHP framework for web and console applications and a set ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48784

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-07-14 20:17 修改: 2026-07-15 14:44
aws/aws-sdk-php CVE-2023-51651 低危 3.197.1 3.288.1 Potential URI resolution path traversal in the AWS SDK for PHP

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51651

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2023-12-22 21:15 修改: 2026-06-17 06:41
symfony/polyfill-intl-idn CVE-2026-46644 低危 v1.23.0 1.38.1 Symfony Polyfill backports PHP features and provides compatibility lay ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46644

镜像层: sha256:bbc0757d216368f2bb9c99959fcdfc7d521a1e00033c097a0fdc0122200e0c46

发布日期: 2026-07-14 21:16 修改: 2026-07-15 18:16
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×