| curl |
CVE-2026-13608 |
中危 |
8.5.0-2ubuntu10.13 |
|
A flaw in the libcurl SASL negotiation for LDAP authentication allows ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| curl |
CVE-2026-18924 |
中危 |
8.5.0-2ubuntu10.13 |
|
curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| curl |
CVE-2026-19931 |
中危 |
8.5.0-2ubuntu10.13 |
|
curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| curl |
CVE-2026-80230 |
中危 |
8.5.0-2ubuntu10.13 |
|
When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| curl |
CVE-2026-82209 |
中危 |
8.5.0-2ubuntu10.13 |
|
curl: libcurl: Information disclosure via improper Public Suffix List boundary check
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libc-bin |
CVE-2026-18374 |
中危 |
2.39-0ubuntu8.8 |
|
glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
|
| libc-bin |
CVE-2026-19499 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Buffer Overflow in strfmon right-justification padding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-09-14 18:17 修改: 2026-09-18 18:17
|
| libc-bin |
CVE-2026-19542 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Fix out-of-bounds array write in tdelete
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-09-14 18:17 修改: 2026-09-18 18:17
|
| libc-bin |
CVE-2026-6368 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: glibc: Process abort due to invalid memory in wordexp
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| libc-bin |
CVE-2026-6791 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| libc-bin |
CVE-2026-77117 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Non-progress DoS in SHIFT_JISX0213 ->
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-09-15 11:17 修改: 2026-09-18 18:17
|
| libc-bin |
CVE-2026-80489 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-09-15 11:17 修改: 2026-09-18 18:17
|
| libc6 |
CVE-2026-18374 |
中危 |
2.39-0ubuntu8.8 |
|
glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
|
| libc6 |
CVE-2026-19499 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Buffer Overflow in strfmon right-justification padding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-09-14 18:17 修改: 2026-09-18 18:17
|
| libc6 |
CVE-2026-19542 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Fix out-of-bounds array write in tdelete
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-09-14 18:17 修改: 2026-09-18 18:17
|
| libc6 |
CVE-2026-6368 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: glibc: Process abort due to invalid memory in wordexp
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| libc6 |
CVE-2026-6791 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| libc6 |
CVE-2026-77117 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Non-progress DoS in SHIFT_JISX0213 ->
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-09-15 11:17 修改: 2026-09-18 18:17
|
| libc6 |
CVE-2026-80489 |
中危 |
2.39-0ubuntu8.8 |
2.39-0ubuntu8.9 |
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-09-15 11:17 修改: 2026-09-18 18:17
|
| libcurl4t64 |
CVE-2026-13608 |
中危 |
8.5.0-2ubuntu10.13 |
|
A flaw in the libcurl SASL negotiation for LDAP authentication allows ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl4t64 |
CVE-2026-18924 |
中危 |
8.5.0-2ubuntu10.13 |
|
curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl4t64 |
CVE-2026-19931 |
中危 |
8.5.0-2ubuntu10.13 |
|
curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl4t64 |
CVE-2026-80230 |
中危 |
8.5.0-2ubuntu10.13 |
|
When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl4t64 |
CVE-2026-82209 |
中危 |
8.5.0-2ubuntu10.13 |
|
curl: libcurl: Information disclosure via improper Public Suffix List boundary check
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libxml2 |
CVE-2026-74860 |
中危 |
2.9.14+dfsg-1.3ubuntu3.8 |
|
libxml2: double-free/UAF in libxml2 Python bindings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74860
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-08 12:16 修改: 2026-09-10 20:17
|
| libxml2 |
CVE-2026-86140 |
中危 |
2.9.14+dfsg-1.3ubuntu3.8 |
|
libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86140
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:39
|
| libxslt1.1 |
CVE-2025-10911 |
中危 |
1.1.39-0exp1ubuntu0.24.04.3 |
|
libxslt: use-after-free with key data stored cross-RVT
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10911
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2025-09-25 16:15 修改: 2026-09-01 12:17
|
| libxslt1.1 |
CVE-2025-7425 |
中危 |
1.1.39-0exp1ubuntu0.24.04.3 |
|
libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2025-07-10 14:15 修改: 2026-09-08 16:17
|
| perl-base |
CVE-2026-15534 |
中危 |
5.38.2-3.2ubuntu0.4 |
5.38.2-3.2ubuntu0.6 |
perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
|
| perl-base |
CVE-2026-19487 |
中危 |
5.38.2-3.2ubuntu0.4 |
5.38.2-3.2ubuntu0.6 |
perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
|
| tar |
CVE-2026-18477 |
中危 |
1.35+dfsg-3ubuntu0.4 |
|
tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17
|
| tar |
CVE-2026-18508 |
中危 |
1.35+dfsg-3ubuntu0.4 |
|
tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17
|
| zlib1g |
CVE-2026-85091 |
中危 |
1:1.3.dfsg-3.1ubuntu2.2 |
|
zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
|
| libsystemd0 |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libudev1 |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libicu74 |
CVE-2025-5222 |
低危 |
74.2-1ubuntu3.1 |
|
icu: Stack buffer overflow in the SRBRoot::addTag function
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222
镜像层: sha256:0a0677f7ccf8f3d75d06ca68f504560e7aec88252a6cf20e2bc9e494d879f4ed
发布日期: 2025-05-27 21:15 修改: 2026-09-17 19:16
|
| login |
CVE-2024-56433 |
低危 |
1:4.13+dfsg1-4ubuntu3.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| passwd |
CVE-2024-56433 |
低危 |
1:4.13+dfsg1-4ubuntu3.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|