docker.io/rockylinux/rockylinux:10.2.20260525.0 linux/amd64

docker.io/rockylinux/rockylinux:10.2.20260525.0 - Trivy安全扫描结果 扫描时间: 2026-09-09 10:55
全部漏洞信息
低危漏洞:0 中危漏洞:11 高危漏洞:44 严重漏洞:0

系统OS: rocky 10.2 扫描引擎: Trivy 扫描时间: 2026-09-09 10:55

docker.io/rockylinux/rockylinux:10.2.20260525.0 (rocky 10.2) (rocky)
低危漏洞:0 中危漏洞:11 高危漏洞:44 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2026-8927 高危 8.12.1-4.el10 8.12.1-4.el10_2.4 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21

expat CVE-2026-45186 高危 2.7.3-1.el10 2.7.3-1.el10_2.1 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19

gnutls CVE-2026-33845 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-04-30 18:16 修改: 2026-09-04 13:19

gnutls CVE-2026-33846 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-04 10:15 修改: 2026-09-04 13:19

gnutls CVE-2026-3832 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-04-30 18:16 修改: 2026-09-01 13:19

gnutls CVE-2026-3833 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-04-30 18:16 修改: 2026-09-03 15:17

gnutls CVE-2026-42009 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-18 13:16 修改: 2026-09-04 13:19

gnutls CVE-2026-42010 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-07 12:16 修改: 2026-09-04 13:19

gnutls CVE-2026-42011 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-07 15:16 修改: 2026-09-03 15:17

gnutls CVE-2026-42012 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-26 22:16 修改: 2026-09-01 13:19

gnutls CVE-2026-42013 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-26 22:16 修改: 2026-09-03 15:17

gnutls CVE-2026-42014 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-16 02:16 修改: 2026-09-01 13:19

gnutls CVE-2026-42015 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-26 22:16 修改: 2026-09-01 13:19

gnutls CVE-2026-5260 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-26 22:16 修改: 2026-09-03 15:17

gnutls CVE-2026-5419 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-01 21:16 修改: 2026-09-01 13:19

libcurl-minimal CVE-2026-8927 高危 8.12.1-4.el10 8.12.1-4.el10_2.4 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21

openssl-libs CVE-2026-34180 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-34181 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-34182 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-34183 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42764 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42766 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42767 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42768 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42769 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42770 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-45445 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-45446 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-45447 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-09-07 13:20

openssl-libs CVE-2026-7383 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-9076 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

python3 CVE-2026-11940 高危 3.12.13-2.el10_2 3.12.14-1.el10_2 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16

python3-libs CVE-2026-11940 高危 3.12.13-2.el10_2 3.12.14-1.el10_2 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16

sqlite-libs CVE-2026-11822 高危 3.46.1-5.el10_1 3.46.1-6.el10_2 sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

sqlite-libs CVE-2026-11824 高危 3.46.1-5.el10_1 3.46.1-6.el10_2 sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

vim-data CVE-2026-46483 高危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.7 vim: command injection when decompressing .tgz archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46483

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-05-15 15:16 修改: 2026-06-17 10:53

vim-data CVE-2026-47162 高危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.7 vim: Vim: Arbitrary Code Execution via crafted directory names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47162

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-11 19:16 修改: 2026-09-04 13:19

vim-data CVE-2026-47167 高危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.7 vim: Vim: Arbitrary code execution via crafted step-definition patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47167

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:54

vim-data CVE-2026-52858 高危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.7 vim: Vim: Arbitrary code execution via Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52858

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:57

vim-data CVE-2026-55693 高危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.12 vim: Vim: Out-of-bounds Write in Spell File Word Count

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55693

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-25 16:16 修改: 2026-06-26 14:17

vim-data CVE-2026-57455 高危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.12 vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57455

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:23

vim-data CVE-2026-57456 高危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.12 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57456

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-data CVE-2026-59856 高危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.12 vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59856

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

vim-data CVE-2026-59858 高危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.12 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

openssl-libs CVE-2026-28390 中危 1:3.5.5-2.el10_2 1:3.5.5-3.el10_2 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

pam CVE-2026-54411 中危 1.6.1-9.el10 1.6.1-9.el10_2.1 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

pam-libs CVE-2026-54411 中危 1.6.1-9.el10 1.6.1-9.el10_2.1 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

gzip CVE-2026-41991 中危 1.13-3.el10 1.13-4.el10_2 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02

gzip CVE-2026-41992 中危 1.13-3.el10 1.13-4.el10_2 gzip: gzip: Information disclosure via global buffer overflow in LZH decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-29 12:16 修改: 2026-08-27 13:17

libattr CVE-2026-54371 中危 2.5.2-5.el10 2.6.0-1.el10_2 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18

attr CVE-2026-54371 中危 2.5.2-5.el10 2.6.0-1.el10_2 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18

libxml2 CVE-2026-11979 中危 2.12.5-10.el10 2.12.5-10.el10_2.3 libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11979

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-06-29 14:16 修改: 2026-06-30 20:22

vim-data CVE-2026-35177 中危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.3 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-04-06 18:16 修改: 2026-07-24 21:10

vim-data CVE-2026-41411 中危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.4 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

vim-minimal CVE-2026-35177 中危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.3 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:f0c7ff1acfc99a513a834c43874f79b8584ae074e5e56fa6aafc3dcf4f5ab428

发布日期: 2026-04-06 18:16 修改: 2026-07-24 21:10

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×