docker.io/nacos/nacos-server:v3.2.3 linux/arm64

docker.io/nacos/nacos-server:v3.2.3 - Trivy安全扫描结果 扫描时间: 2026-09-07 16:13 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:32 中危漏洞:251 高危漏洞:36 严重漏洞:8

系统OS: ubuntu 26.04 扫描引擎: Trivy 扫描时间: 2026-09-07 16:13

docker.io/nacos/nacos-server:v3.2.3 (ubuntu 26.04) (ubuntu)
低危漏洞:27 中危漏洞:213 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-13595 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
bsdutils CVE-2026-27456 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
bsdutils CVE-2026-3184 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
bsdutils CVE-2026-53612 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53613 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53614 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53615 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl CVE-2026-11856 中危 8.18.0-1ubuntu2.3 8.18.0-1ubuntu2.4 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
diffutils CVE-2026-53910 中危 1:3.12-1 1:3.12-1ubuntu0.1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
gnu-coreutils CVE-2026-56391 中危 9.7-3ubuntu2 9.7-3ubuntu2.1 coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-07-24 09:16 修改: 2026-08-26 13:52
gzip CVE-2026-41991 中危 1.14-1~exp2ubuntu1 1.14-1~exp2ubuntu1.1 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
gzip CVE-2026-41992 中危 1.14-1~exp2ubuntu1 1.14-1~exp2ubuntu1.1 gzip: gzip: Information disclosure via global buffer overflow in LZH decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 12:16 修改: 2026-08-27 13:17
libattr1 CVE-2026-54371 中危 1:2.5.2-4 1:2.5.2-4ubuntu0.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18
libblkid1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libblkid1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libblkid1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin CVE-2026-18374 中危 2.43-2ubuntu2 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-4046 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-bin CVE-2026-5435 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-bin CVE-2026-5450 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin CVE-2026-5928 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin CVE-2026-6238 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc-gconv-modules-extra CVE-2026-18374 中危 2.43-2ubuntu2 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc-gconv-modules-extra CVE-2026-4046 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-gconv-modules-extra CVE-2026-5435 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-gconv-modules-extra CVE-2026-5450 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-gconv-modules-extra CVE-2026-5928 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-gconv-modules-extra CVE-2026-6238 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6 CVE-2026-18374 中危 2.43-2ubuntu2 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-4046 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc6 CVE-2026-5435 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6 CVE-2026-5450 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6 CVE-2026-5928 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6 CVE-2026-6238 中危 2.43-2ubuntu2 2.43-2ubuntu2.3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libcurl4t64 CVE-2026-11856 中危 8.18.0-1ubuntu2.3 8.18.0-1ubuntu2.4 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libexpat1 CVE-2025-66382 中危 2.7.4-1 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libexpat1 CVE-2026-32776 中危 2.7.4-1 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32777 中危 2.7.4-1 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32778 中危 2.7.4-1 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-41080 中危 2.7.4-1 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libexpat1 CVE-2026-45186 中危 2.7.4-1 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19
libexpat1 CVE-2026-50219 中危 2.7.4-1 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat1 CVE-2026-56131 中危 2.7.4-1 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56132 中危 2.7.4-1 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56403 中危 2.7.4-1 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56404 中危 2.7.4-1 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56405 中危 2.7.4-1 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat1 CVE-2026-56406 中危 2.7.4-1 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat1 CVE-2026-56407 中危 2.7.4-1 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1 CVE-2026-56408 中危 2.7.4-1 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libexpat1 CVE-2026-56409 中危 2.7.4-1 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat1 CVE-2026-56410 中危 2.7.4-1 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1 CVE-2026-56411 中危 2.7.4-1 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1 CVE-2026-56412 中危 2.7.4-1 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libexpat1 CVE-2026-66046 中危 2.7.4-1 Expat through 2.8.3 contains a denial of service vulnerability caused ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17
libexpat1 CVE-2026-72522 中危 2.7.4-1 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33
libexpat1 CVE-2026-76641 中危 2.7.4-1 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17
libexpat1 CVE-2026-76957 中危 2.7.4-1 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-20 05:16 修改: 2026-09-03 17:37
libgssapi-krb5-2 CVE-2026-11850 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libgssapi-krb5-2 CVE-2026-40355 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libgssapi-krb5-2 CVE-2026-40356 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libk5crypto3 CVE-2026-11850 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libk5crypto3 CVE-2026-40355 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libk5crypto3 CVE-2026-40356 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5-3 CVE-2026-11850 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libkrb5-3 CVE-2026-40355 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5-3 CVE-2026-40356 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5support0 CVE-2026-11850 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libkrb5support0 CVE-2026-40355 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5support0 CVE-2026-40356 中危 1.22.1-2ubuntu4 1.22.1-2ubuntu4.1 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libmount1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libmount1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libmount1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libp11-kit0 CVE-2026-13757 中危 0.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
libpam-modules CVE-2026-54411 中危 1.7.0-5ubuntu3 1.7.0-5ubuntu3.1 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-modules-bin CVE-2026-54411 中危 1.7.0-5ubuntu3 1.7.0-5ubuntu3.1 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-runtime CVE-2026-54411 中危 1.7.0-5ubuntu3 1.7.0-5ubuntu3.1 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam0g CVE-2026-54411 中危 1.7.0-5ubuntu3 1.7.0-5ubuntu3.1 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libsmartcols1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libsmartcols1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libsmartcols1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsqlite3-0 CVE-2026-39113 中危 3.46.1-9ubuntu0.1 Buffer Overflow vulnerability in SQLite affected version source snapsh ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 21:17 修改: 2026-08-31 16:17
libsqlite3-0 CVE-2026-50812 中危 3.46.1-9ubuntu0.1 3.46.1-9ubuntu0.2 sqlite: SQLite: Denial of Service via malformed changeset in Session Extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libsqlite3-0 CVE-2026-50813 中危 3.46.1-9ubuntu0.1 3.46.1-9ubuntu0.2 sqlite: SQLite: Information disclosure via Session Extension changeset merge path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libssh2-1t64 CVE-2026-66032 中危 1.11.1-1ubuntu0.26.04.3 1.11.1-1ubuntu0.26.04.4 libssh2: libssh2: Arbitrary code execution via double-free in SFTP session

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66032

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-24 17:17 修改: 2026-08-07 01:07
libssh2-1t64 CVE-2026-66033 中危 1.11.1-1ubuntu0.26.04.3 1.11.1-1ubuntu0.26.04.4 libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66033

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44
libssh2-1t64 CVE-2026-66035 中危 1.11.1-1ubuntu0.26.04.3 1.11.1-1ubuntu0.26.04.4 libssh2: libssh2: Arbitrary code execution via heap buffer overflow during SSH negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66035

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:41
libssl3t64 CVE-2026-14456 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-18798 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63072 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63076 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libsystemd0 CVE-2026-15059 中危 259.5-0ubuntu3 259.5-0ubuntu3.4 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libsystemd0 CVE-2026-15060 中危 259.5-0ubuntu3 259.5-0ubuntu3.4 systemd-machined: systemd-machined: Unprivileged users can terminate arbitrary processes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15060

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libsystemd0 CVE-2026-16742 中危 259.5-0ubuntu3 259.5-0ubuntu3.4 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libudev1 CVE-2026-15059 中危 259.5-0ubuntu3 259.5-0ubuntu3.4 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libudev1 CVE-2026-15060 中危 259.5-0ubuntu3 259.5-0ubuntu3.4 systemd-machined: systemd-machined: Unprivileged users can terminate arbitrary processes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15060

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libudev1 CVE-2026-16742 中危 259.5-0ubuntu3 259.5-0ubuntu3.4 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libuuid1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libuuid1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libuuid1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-13595 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
login CVE-2026-27456 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
login CVE-2026-3184 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
login CVE-2026-53612 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-53613 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-53614 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-53615 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
mount CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
mount CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openjdk-17-jre-headless CVE-2026-46917 中危 17.0.19+10-1~26.04.2 17.0.20+8-1~26.04 openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
openjdk-17-jre-headless CVE-2026-46968 中危 17.0.19+10-1~26.04.2 17.0.20+8-1~26.04 openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27
openjdk-17-jre-headless CVE-2026-47010 中危 17.0.19+10-1~26.04.2 17.0.20+8-1~26.04 openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13
openjdk-17-jre-headless CVE-2026-47021 中危 17.0.19+10-1~26.04.2 17.0.20+8-1~26.04 openjdk: Enhance XBM image support (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17
openjdk-17-jre-headless CVE-2026-47027 中危 17.0.19+10-1~26.04.2 17.0.20+8-1~26.04 openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
openjdk-17-jre-headless CVE-2026-47059 中危 17.0.19+10-1~26.04.2 17.0.20+8-1~26.04 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51
openjdk-17-jre-headless CVE-2026-47063 中危 17.0.19+10-1~26.04.2 17.0.20+8-1~26.04 openjdk: Enhance Jar handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50
openjdk-17-jre-headless CVE-2026-60147 中危 17.0.19+10-1~26.04.2 17.0.20+8-1~26.04 openjdk: Improve certification checking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49
openssl CVE-2026-14456 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
openssl CVE-2026-18798 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl CVE-2026-63072 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63076 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-14456 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-18798 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-63072 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-63076 中危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
rust-coreutils CVE-2026-35341 中危 0.8.0-0ubuntu3 A vulnerability in uutils coreutils mkfifo allows for the unauthorized ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35341

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35344 中危 0.8.0-0ubuntu3 The dd utility in uutils coreutils suppresses errors during file trunc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35344

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35345 中危 0.8.0-0ubuntu3 A vulnerability in the tail utility of uutils coreutils allows for the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35345

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35348 中危 0.8.0-0ubuntu3 The sort utility in uutils coreutils is vulnerable to a process panic ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35348

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35350 中危 0.8.0-0ubuntu3 The cp utility in uutils coreutils fails to properly handle setuid and ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35350

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35351 中危 0.8.0-0ubuntu3 The mv utility in uutils coreutils fails to preserve file ownership du ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35351

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35352 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35352

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35354 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35354

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35357 中危 0.8.0-0ubuntu3 The cp utility in uutils coreutils is vulnerable to an information dis ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35357

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35359 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35359

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35360 中危 0.8.0-0ubuntu3 The touch utility in uutils coreutils is vulnerable to a Time-of-Check ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35360

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35363 中危 0.8.0-0ubuntu3 A vulnerability in the rm utility of uutils coreutils allows the bypas ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35363

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35364 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35364

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35367 中危 0.8.0-0ubuntu3 The nohup utility in uutils coreutils creates its default output file, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35367

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35368 中危 0.8.0-0ubuntu3 A vulnerability exists in the chroot utility of uutils coreutils when ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35368

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35370 中危 0.8.0-0ubuntu3 The id utility in uutils coreutils miscalculates the groups= section o ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35370

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35371 中危 0.8.0-0ubuntu3 The id utility in uutils coreutils exhibits incorrect behavior in its ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35371

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35373 中危 0.8.0-0ubuntu3 A logic error in the ln utility of uutils coreutils causes the program ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35373

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35374 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35374

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35377 中危 0.8.0-0ubuntu3 A logic error in the env utility of uutils coreutils causes a failure ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35377

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
tar CVE-2025-45582 中危 1.35+dfsg-4ubuntu0.1 1.35+dfsg-4ubuntu0.2 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25
tar CVE-2026-18477 中危 1.35+dfsg-4ubuntu0.1 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
tar CVE-2026-18508 中危 1.35+dfsg-4ubuntu0.1 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
tar CVE-2026-5704 中危 1.35+dfsg-4ubuntu0.1 1.35+dfsg-4ubuntu0.4 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-06 16:16 修改: 2026-09-01 15:17
util-linux CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
util-linux CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
util-linux CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
vim CVE-2026-51400 中危 2:9.1.2141-1ubuntu4.6 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51400

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:38
vim CVE-2026-51401 中危 2:9.1.2141-1ubuntu4.6 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51401

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:33
vim CVE-2026-59856 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.7 vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59856

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16
vim CVE-2026-59857 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.7 vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59857

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-09 23:17 修改: 2026-07-10 19:23
vim CVE-2026-59858 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.7 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16
vim CVE-2026-73071 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Denial of Service via Use-After-Free in JSON Decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73071

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 17:19
vim CVE-2026-73072 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Heap buffer overflow allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73072

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-13 16:19
vim CVE-2026-73073 中危 2:9.1.2141-1ubuntu4.6 Vim is an open source, command line text editor. Prior to 9.2.0845, St ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73073

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-18 16:18 修改: 2026-08-18 16:18
vim CVE-2026-73074 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Heap buffer overflow via integer wraparound in text property handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73074

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-12 23:17
vim CVE-2026-73076 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Arbitrary command execution via crafted vimball

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73076

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 16:17
vim CVE-2026-73077 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73077

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 19:18
vim CVE-2026-73078 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73078

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 17:19
vim-common CVE-2026-51400 中危 2:9.1.2141-1ubuntu4.6 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51400

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:38
vim-common CVE-2026-51401 中危 2:9.1.2141-1ubuntu4.6 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51401

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:33
vim-common CVE-2026-59856 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.7 vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59856

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16
vim-common CVE-2026-59857 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.7 vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59857

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-09 23:17 修改: 2026-07-10 19:23
vim-common CVE-2026-59858 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.7 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16
vim-common CVE-2026-73071 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Denial of Service via Use-After-Free in JSON Decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73071

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 17:19
vim-common CVE-2026-73072 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Heap buffer overflow allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73072

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-13 16:19
vim-common CVE-2026-73073 中危 2:9.1.2141-1ubuntu4.6 Vim is an open source, command line text editor. Prior to 9.2.0845, St ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73073

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-18 16:18 修改: 2026-08-18 16:18
vim-common CVE-2026-73074 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Heap buffer overflow via integer wraparound in text property handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73074

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-12 23:17
vim-common CVE-2026-73076 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Arbitrary command execution via crafted vimball

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73076

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 16:17
vim-common CVE-2026-73077 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73077

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 19:18
vim-common CVE-2026-73078 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73078

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 17:19
vim-runtime CVE-2026-51400 中危 2:9.1.2141-1ubuntu4.6 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51400

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:38
vim-runtime CVE-2026-51401 中危 2:9.1.2141-1ubuntu4.6 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51401

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:33
vim-runtime CVE-2026-59856 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.7 vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59856

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16
vim-runtime CVE-2026-59857 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.7 vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59857

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-09 23:17 修改: 2026-07-10 19:23
vim-runtime CVE-2026-59858 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.7 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16
vim-runtime CVE-2026-73071 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Denial of Service via Use-After-Free in JSON Decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73071

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 17:19
vim-runtime CVE-2026-73072 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Heap buffer overflow allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73072

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-13 16:19
vim-runtime CVE-2026-73073 中危 2:9.1.2141-1ubuntu4.6 Vim is an open source, command line text editor. Prior to 9.2.0845, St ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73073

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-18 16:18 修改: 2026-08-18 16:18
vim-runtime CVE-2026-73074 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Heap buffer overflow via integer wraparound in text property handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73074

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-12 23:17
vim-runtime CVE-2026-73076 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Arbitrary command execution via crafted vimball

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73076

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 16:17
vim-runtime CVE-2026-73077 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73077

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 19:18
vim-runtime CVE-2026-73078 中危 2:9.1.2141-1ubuntu4.6 2:9.1.2141-1ubuntu4.8 vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73078

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-11 16:17 修改: 2026-08-11 17:19
gnu-coreutils CVE-2025-5278 低危 9.7-3ubuntu2 9.7-3ubuntu2.1 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2025-05-27 21:15 修改: 2026-09-06 22:17
libssl3t64 CVE-2026-14457 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-54874 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libudev1 CVE-2026-40228 低危 259.5-0ubuntu3 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
openssl-provider-legacy CVE-2026-14457 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-54874 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-63073 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
openssl-provider-legacy CVE-2026-63074 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-63075 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-75803 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.5 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
passwd CVE-2024-56433 低危 1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libssl3t64 CVE-2026-63073 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
libssl3t64 CVE-2026-63074 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
login.defs CVE-2024-56433 低危 1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libssl3t64 CVE-2026-63075 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-75803 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.5 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
gpgv CVE-2026-57062 低危 2.4.8-4ubuntu3 2.4.8-4ubuntu3.1 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16
libbz2-1.0 CVE-2026-42250 低危 1.0.8-6build2 1.0.8-6ubuntu0.1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
libgcrypt20 CVE-2024-2236 低危 1.12.0-2ubuntu0.1 1.12.0-2ubuntu1.1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
libsystemd0 CVE-2026-40228 低危 259.5-0ubuntu3 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
openssl CVE-2026-14457 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl CVE-2026-54874 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63073 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
openssl CVE-2026-63074 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63075 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.4 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-75803 低危 3.5.5-1ubuntu3.2 3.5.5-1ubuntu3.5 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:869a5652d13818289e2aa343fb51f91d7f0198667234f66de12b4b703d64eb42

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
zlib1g CVE-2026-27171 低危 1:1.3.dfsg+really1.3.1-1ubuntu3 1:1.3.dfsg+really1.3.1-1ubuntu3.1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:5 中危漏洞:26 高危漏洞:18 严重漏洞:8
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.apache.derby:derby CVE-2022-46337 严重 10.14.2.0 10.14.2.1, 10.16.1.2, 10.15.2.1 A cleverly devised username might bypass LDAP authentication checks. I ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46337

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2023-11-20 09:15 修改: 2026-06-17 05:11
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41293 严重 10.1.54 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43512 严重 10.1.54 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43515 严重 10.1.54 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65182 严重 10.1.54 11.0.25, 10.1.58, 9.0.121 Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65905 严重 10.1.54 11.0.25, 10.1.58, 9.0.121 tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-68525 严重 10.1.54 11.0.25, 10.1.58, 9.0.121 org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15
org.bouncycastle:bcprov-jdk18on CVE-2025-14813 严重 1.79 1.80.2, 1.81.1, 1.84 bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-04-15 10:16 修改: 2026-09-04 13:17
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.3.6 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.3.6 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.21.2 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.21.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.21.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-23 21:17 修改: 2026-09-02 13:18
io.micrometer:micrometer-core CVE-2026-40983 高危 1.15.11 1.16.6, 1.15.12 micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40983

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-09-02 13:17
io.micrometer:micrometer-core CVE-2026-40984 高危 1.15.11 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-09-02 13:17
io.modelcontextprotocol.sdk:mcp-core CVE-2026-35568 高危 0.18.2 1.0.0 Java-SDK has a DNS Rebinding Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35568

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 21:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41284 高危 10.1.54 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-42498 高危 10.1.54 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43513 高危 10.1.54 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
com.alipay.sofa:hessian CVE-2024-46983 高危 3.3.6 3.5.5 SOFA Hessian Remote Command Execution (RCE) Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46983

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2024-09-19 23:15 修改: 2026-06-17 07:56
org.json:json CVE-2022-45688 高危 20090211 20230227 json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.json:json CVE-2023-5072 高危 20090211 20231013 JSON-java: parser confusion leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5072

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2023-10-12 17:15 修改: 2026-06-17 06:47
org.postgresql:postgresql CVE-2026-54291 高危 42.7.11 42.7.12 org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54291

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-07-06 19:17 修改: 2026-07-09 13:16
org.springframework:spring-expression CVE-2026-41850 高危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41842 高危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41845 高危 6.2.18 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.21.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54516 中危 2.21.2 2.21.4, 3.1.4 jackson-databind: jackson-databind: Security bypass due to improper handling of renamed properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54516

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:52
io.modelcontextprotocol.sdk:mcp-core CVE-2026-34237 中危 0.18.2 1.0.1, 1.1.1, 0.18.3 MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34237

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-03-31 16:16 修改: 2026-07-24 20:10
io.opentelemetry:opentelemetry-api CVE-2026-45292 中危 1.49.0 1.62.0 opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45292

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-05-28 17:16 修改: 2026-09-02 13:17
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.17.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.bouncycastle:bcpkix-jdk18on CVE-2026-5588 中危 1.79 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-04-15 10:16 修改: 2026-09-02 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54517 中危 2.21.2 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information disclosure via improper JsonView filter application

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54517

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:51
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.79 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-04-15 10:16 修改: 2026-09-03 13:04
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.5.2 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-54518 中危 2.21.2 2.21.4 jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54518

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-23 22:16 修改: 2026-06-27 20:49
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.21.2 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
org.springframework.boot:spring-boot-autoconfigure CVE-2026-41001 中危 3.5.14 4.0.7, 3.5.15 spring-boot: Spring Boot: Local attacker can manipulate data directory due to predictable path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41001

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-11 07:16 修改: 2026-09-04 18:13
org.springframework.security:spring-security-web CVE-2026-41706 中危 6.5.10 7.0.6, 6.5.11 Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41706

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.security:spring-security-web CVE-2026-47838 中危 6.5.10 6.5.11 Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47838

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.springframework:spring-expression CVE-2026-41851 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-web CVE-2026-41854 中危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Server-Side Request Forgery via incorrect host parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41854

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.2 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.2 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
org.springframework:spring-webmvc CVE-2026-41841 中危 6.2.18 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41843 中危 6.2.18 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41844 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41846 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41853 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
ch.qos.logback:logback-core CVE-2026-10532 低危 1.5.32 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
org.springframework:spring-expression CVE-2026-41852 低危 6.2.18 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43514 低危 10.1.54 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.springframework:spring-core CVE-2026-41848 低危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
ch.qos.logback:logback-core CVE-2026-9828 低危 1.5.32 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:75e9390a13ba28fc7421390a383a25bf6d6176b9114d04431d302295213ebce4

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
Python (python-pkg)
低危漏洞:0 中危漏洞:4 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aiohttp CVE-2026-69244 高危 3.14.1 3.14.3 aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69244

镜像层: sha256:43362fdee750cdfcee43c15138a1df64f755e6b8747b4b868df1c533d99bf2d6

发布日期: 2026-08-03 21:16 修改: 2026-08-04 15:16
cryptography CVE-2026-69247 高危 49.0.0 50.0.0 python-cryptography: python-cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69247

镜像层: sha256:43362fdee750cdfcee43c15138a1df64f755e6b8747b4b868df1c533d99bf2d6

发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
aiohttp CVE-2026-69243 中危 3.14.1 3.14.2 aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69243

镜像层: sha256:43362fdee750cdfcee43c15138a1df64f755e6b8747b4b868df1c533d99bf2d6

发布日期: 2026-08-03 21:16 修改: 2026-08-05 16:17
aiohttp CVE-2026-59881 中危 3.14.1 3.14.2 aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59881

镜像层: sha256:43362fdee750cdfcee43c15138a1df64f755e6b8747b4b868df1c533d99bf2d6

发布日期: 2026-07-30 19:18 修改: 2026-07-30 20:03
pip CVE-2026-13346 中危 26.1.2 26.2.0 pip: pip: Arbitrary file installation via malicious package indexes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13346

镜像层: sha256:ebdc0731d826520b0d8943da533aad183cdfd272b644047c73eb4f45ee14cc7e

发布日期: 2026-07-29 19:16 修改: 2026-08-20 13:17
setuptools CVE-2026-59890 中危 82.0.1 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:ebdc0731d826520b0d8943da533aad183cdfd272b644047c73eb4f45ee14cc7e

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
root/.local/bin/uv (rustbinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
root/.local/bin/uvx (rustbinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
usr/bin/pebble (gobinary)
低危漏洞:0 中危漏洞:8 高危漏洞:16 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-25681 高危 v0.40.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-27136 高危 v0.40.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-33814 高危 v0.40.0 0.53.0 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-07 20:16 修改: 2026-09-04 13:19
golang.org/x/net CVE-2026-39821 高危 v0.40.0 0.55.0 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-22 16:16 修改: 2026-08-31 13:18
golang.org/x/net CVE-2026-46600 高危 v0.40.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-27145 高危 v1.26.3 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-02 23:16 修改: 2026-09-04 13:18
stdlib CVE-2026-33818 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-39821 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-22 16:16 修改: 2026-08-31 13:18
stdlib CVE-2026-39822 高危 v1.26.3 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib CVE-2026-42504 高危 v1.26.3 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib CVE-2026-46600 高危 v1.26.3 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56858 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56859 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56860 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56862 高危 v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
golang.org/x/net CVE-2026-42506 中危 v0.40.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
github.com/gorilla/websocket GHSA-w67g-5rqw-f597 中危 v1.5.1 1.5.3 Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

漏洞详情: https://github.com/advisories/GHSA-w67g-5rqw-f597

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-08-24 21:00 修改: 2026-08-24 21:00
golang.org/x/net CVE-2025-47911 中危 v0.40.0 0.45.0 golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
golang.org/x/net CVE-2025-58190 中危 v0.40.0 0.45.0 golang.org/x/net/html: Infinite parsing loop in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
golang.org/x/net CVE-2026-25680 中危 v0.40.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-42502 中危 v0.40.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
stdlib CVE-2026-42505 中危 v1.26.3 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib CVE-2026-42507 中危 v1.26.3 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/sys CVE-2026-39824 未知 v0.33.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:d53a84bf1d58844107eb79a09419e41b2d1c38e1e6abe98c2a539c122a7e8311

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
/home/nacos/.venv/lib/python3.10/site-packages/skill_scanner/data/default_policy.yaml ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/home/nacos/.venv/lib/python3.10/site-packages/skill_scanner/data/permissive_policy.yaml ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×