docker.io/seataio/seata-server:1.7.1 linux/amd64

docker.io/seataio/seata-server:1.7.1 - Trivy安全扫描结果扫描时间: 2024-11-06 18:25

全部漏洞信息

低危漏洞:187

中危漏洞:191

高危漏洞:199

严重漏洞:48

系统OS: debian 11.4 扫描引擎: Trivy 扫描时间: 2024-11-06 18:25

docker.io/seataio/seata-server:1.7.1 (debian 11.4) (debian)

低危漏洞:185

中危漏洞:159

高危漏洞:164

严重漏洞:40

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
curl	CVE-2021-22945	严重	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: use-after-free and double-free in MQTT sending 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22945 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-09-23 13:15 修改: 2024-03-27 15:04
curl	CVE-2022-32207	严重	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Unpreserved file permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32207 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
curl	CVE-2022-32221	严重	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u5	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-12-05 22:15 修改: 2024-03-27 15:00
curl	CVE-2023-23914	严重	7.74.0-1.3+deb11u1		curl: HSTS ignored on multiple requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23914 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
curl	CVE-2023-38545	严重	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u10	curl: heap based buffer overflow in the SOCKS5 proxy handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38545 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-10-18 04:15 修改: 2024-10-17 22:35
git	CVE-2022-23521	严重	1:2.30.2-1	1:2.30.2-1+deb11u1	git: gitattributes parsing integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23521 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-01-17 23:15 修改: 2023-12-27 10:15
git	CVE-2022-41903	严重	1:2.30.2-1	1:2.30.2-1+deb11u1	git: Heap overflow in `git archive`, `git log --format` leading to RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41903 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-01-17 23:15 修改: 2023-12-27 10:15
git	CVE-2024-32002	严重	1:2.30.2-1	1:2.30.2-1+deb11u3	git: Recursive clones RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32002 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
git-man	CVE-2022-23521	严重	1:2.30.2-1	1:2.30.2-1+deb11u1	git: gitattributes parsing integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23521 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-01-17 23:15 修改: 2023-12-27 10:15
git-man	CVE-2022-41903	严重	1:2.30.2-1	1:2.30.2-1+deb11u1	git: Heap overflow in `git archive`, `git log --format` leading to RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41903 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-01-17 23:15 修改: 2023-12-27 10:15
git-man	CVE-2024-32002	严重	1:2.30.2-1	1:2.30.2-1+deb11u3	git: Recursive clones RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32002 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
libapr1	CVE-2022-24963	严重	1.7.0-6+deb11u1	1.7.0-6+deb11u2	apr: integer overflow/wraparound in apr_encode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24963 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-01-31 16:15 修改: 2023-09-08 17:15
libcurl3-gnutls	CVE-2022-32221	严重	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u5	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-12-05 22:15 修改: 2024-03-27 15:00
libcurl3-gnutls	CVE-2023-23914	严重	7.74.0-1.3+deb11u2		curl: HSTS ignored on multiple requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23914 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
libcurl3-gnutls	CVE-2023-38545	严重	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u10	curl: heap based buffer overflow in the SOCKS5 proxy handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38545 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-10-18 04:15 修改: 2024-10-17 22:35
libcurl4	CVE-2021-22945	严重	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: use-after-free and double-free in MQTT sending 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22945 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-09-23 13:15 修改: 2024-03-27 15:04
libcurl4	CVE-2022-32207	严重	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Unpreserved file permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32207 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libcurl4	CVE-2022-32221	严重	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u5	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-12-05 22:15 修改: 2024-03-27 15:00
libcurl4	CVE-2023-23914	严重	7.74.0-1.3+deb11u1		curl: HSTS ignored on multiple requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23914 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
libcurl4	CVE-2023-38545	严重	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u10	curl: heap based buffer overflow in the SOCKS5 proxy handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38545 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-10-18 04:15 修改: 2024-10-17 22:35
libdb5.3	CVE-2019-8457	严重	5.3.28+dfsg1-0.8		sqlite: heap out-of-bound read in function rtreenode() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-05-30 16:29 修改: 2023-11-07 03:13
libexpat1	CVE-2024-45491	严重	2.2.10-2+deb11u3	2.2.10-2+deb11u6	libexpat: Integer Overflow or Wraparound 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libexpat1	CVE-2024-45492	严重	2.2.10-2+deb11u3	2.2.10-2+deb11u6	libexpat: integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libgssapi-krb5-2	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libk5crypto3	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5-3	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5support0	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libksba8	CVE-2022-3515	严重	1.5.0-3	1.5.0-3+deb11u1	libksba: integer overflow may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3515 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-01-12 15:15 修改: 2023-07-06 19:15
libksba8	CVE-2022-47629	严重	1.5.0-3	1.5.0-3+deb11u2	libksba: integer overflow to code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47629 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2022-12-20 23:15 修改: 2023-11-07 03:56
libpcre2-8-0	CVE-2022-1586	严重	10.36-2	10.36-2+deb11u1	pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1586 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-05-16 21:15 修改: 2023-11-07 03:42
libpcre2-8-0	CVE-2022-1587	严重	10.36-2	10.36-2+deb11u1	pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1587 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-05-16 21:15 修改: 2023-11-07 03:42
libpython3.9-minimal	CVE-2021-29921	严重	3.9.2-1		python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
libpython3.9-stdlib	CVE-2021-29921	严重	3.9.2-1		python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
libtasn1-6	CVE-2021-46848	严重	4.16.0-2	4.16.0-2+deb11u1	libtasn1: Out-of-bound access in ETYPE_OK 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-10-24 14:15 修改: 2023-11-07 03:40
openssh-client	CVE-2023-38408	严重	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u2	openssh: Remote code execution in ssh-agent PKCS#11 support 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-07-20 03:15 修改: 2024-10-15 19:35
python3.9	CVE-2021-29921	严重	3.9.2-1		python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
python3.9-minimal	CVE-2021-29921	严重	3.9.2-1		python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
wget	CVE-2024-38428	严重	1.21-1+deb11u1		wget: Misinterpretation of input may lead to improper behavior 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38428 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-06-16 03:15 修改: 2024-10-28 21:35
zlib1g	CVE-2022-37434	严重	1:1.2.11.dfsg-2+deb11u1	1:1.2.11.dfsg-2+deb11u2	zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-08-05 07:15 修改: 2023-07-19 00:56
zlib1g	CVE-2023-45853	严重	1:1.2.11.dfsg-2+deb11u1		zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-10-14 02:15 修改: 2024-08-01 13:44
git-man	CVE-2024-32004	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: RCE while cloning local repos 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32004 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
git-man	CVE-2024-32465	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: additional local RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32465 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
curl	CVE-2022-27782	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: TLS and SSH connection too eager reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
libblkid1	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libc-bin	CVE-2021-3999	高危	2.31-13+deb11u3	2.31-13+deb11u4	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-08-24 16:15 修改: 2023-02-12 23:43
libc-bin	CVE-2023-4911	高危	2.31-13+deb11u3	2.31-13+deb11u7	glibc: buffer overflow in ld.so leading to privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-10-03 18:15 修改: 2024-09-17 19:46
libc-bin	CVE-2024-2961	高危	2.31-13+deb11u3	2.31-13+deb11u9	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33599	高危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2021-3999	高危	2.31-13+deb11u3	2.31-13+deb11u4	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-08-24 16:15 修改: 2023-02-12 23:43
libc6	CVE-2023-4911	高危	2.31-13+deb11u3	2.31-13+deb11u7	glibc: buffer overflow in ld.so leading to privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-10-03 18:15 修改: 2024-09-17 19:46
libc6	CVE-2024-2961	高危	2.31-13+deb11u3	2.31-13+deb11u9	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33599	高危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libcom-err2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
curl	CVE-2022-42916	高危	7.74.0-1.3+deb11u1		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42916 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-10-29 02:15 修改: 2024-03-27 14:59
curl	CVE-2022-43551	高危	7.74.0-1.3+deb11u1		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-12-23 15:15 修改: 2024-03-27 14:58
curl	CVE-2023-27533	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libcurl3-gnutls	CVE-2022-42916	高危	7.74.0-1.3+deb11u2		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42916 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-29 02:15 修改: 2024-03-27 14:59
libcurl3-gnutls	CVE-2022-43551	高危	7.74.0-1.3+deb11u2		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-12-23 15:15 修改: 2024-03-27 14:58
libcurl3-gnutls	CVE-2023-27533	高危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libcurl3-gnutls	CVE-2023-27534	高危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libcurl3-gnutls	CVE-2024-2398	高危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u12	curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
curl	CVE-2023-27534	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
curl	CVE-2024-2398	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u12	curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
e2fsprogs	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
bsdutils	CVE-2024-28085	高危	1:2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
bash	CVE-2022-3715	高危	5.1-2+deb11u1		bash: a heap-buffer-overflow in valid_parameter_transform 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3715 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-01-05 15:15 修改: 2023-02-24 18:38
libcurl4	CVE-2021-22946	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:12
libcurl4	CVE-2022-22576	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: OAUTH2 bearer bypass in connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-05-26 17:15 修改: 2024-03-27 15:02
libcurl4	CVE-2022-27775	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: bad local IPv6 connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27775 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libcurl4	CVE-2022-27781	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: CERTINFO never-ending busy-loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
libcurl4	CVE-2022-27782	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: TLS and SSH connection too eager reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
libcurl4	CVE-2022-42916	高危	7.74.0-1.3+deb11u1		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42916 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-10-29 02:15 修改: 2024-03-27 14:59
libcurl4	CVE-2022-43551	高危	7.74.0-1.3+deb11u1		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-12-23 15:15 修改: 2024-03-27 14:58
libcurl4	CVE-2023-27533	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libcurl4	CVE-2023-27534	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libcurl4	CVE-2024-2398	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u12	curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
curl	CVE-2021-22946	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:12
git	CVE-2019-1387	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: Remote code execution in recursive clones with nested submodules 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1387 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2019-12-18 21:15 修改: 2024-06-26 10:15
git	CVE-2022-24765	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24765 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-04-12 18:15 修改: 2023-12-27 10:15
libexpat1	CVE-2022-40674	高危	2.2.10-2+deb11u3	2.2.10-2+deb11u4	expat: a use-after-free in the doContent function in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-09-14 11:15 修改: 2023-11-07 03:52
libexpat1	CVE-2022-43680	高危	2.2.10-2+deb11u3	2.2.10-2+deb11u5	expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-24 14:15 修改: 2024-01-21 02:08
libexpat1	CVE-2023-52425	高危	2.2.10-2+deb11u3	2.2.10-2+deb11u6	expat: parsing large tokens can trigger a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-02-04 20:15 修改: 2024-08-26 20:35
libexpat1	CVE-2024-45490	高危	2.2.10-2+deb11u3	2.2.10-2+deb11u6	libexpat: Negative Length Parsing Vulnerability in libexpat 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-30 03:15 修改: 2024-10-18 12:24
libext2fs2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
libgcrypt20	CVE-2021-33560	高危	1.8.7-6		libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2021-06-08 11:15 修改: 2023-11-07 03:35
libgnutls30	CVE-2022-2509	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u2	gnutls: Double free during gnutls_pkcs7_verify 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-08-01 14:15 修改: 2023-11-07 03:46
libgnutls30	CVE-2023-0361	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u3	gnutls: timing side-channel in the TLS RSA key exchange code 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-02-15 18:15 修改: 2023-11-07 04:00
libgnutls30	CVE-2024-0553	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u5	gnutls: incomplete fix for CVE-2023-5981 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-01-16 12:15 修改: 2024-09-16 13:15
libgnutls30	CVE-2024-0567	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u5	gnutls: rejects certificate chain with distributed trust 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0567 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-01-16 14:15 修改: 2024-09-16 13:15
git	CVE-2022-29187	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: Bypass of safe.directory protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29187 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-07-12 21:15 修改: 2024-01-14 10:15
libgssapi-krb5-2	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libgssapi-krb5-2	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
git	CVE-2022-39260	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: git shell function that splits command arguments can lead to arbitrary heap writes. 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39260 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-19 12:15 修改: 2023-12-27 10:15
libk5crypto3	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libk5crypto3	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
git	CVE-2023-23946	高危	1:2.30.2-1	1:2.30.2-1+deb11u2	git: git apply: a path outside the working tree can be overwritten with crafted input 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23946 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-14 20:15 修改: 2023-12-27 10:15
libkrb5-3	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libkrb5-3	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
git	CVE-2023-25652	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25652 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-25 20:15 修改: 2024-06-26 10:15
libkrb5support0	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libkrb5support0	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
git	CVE-2023-29007	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: arbitrary configuration injection when renaming or deleting a section from a configuration file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29007 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-25 21:15 修改: 2024-06-26 10:15
git	CVE-2024-32004	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: RCE while cloning local repos 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32004 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
libldap-2.4-2	CVE-2023-2953	高危	2.4.57+dfsg-3+deb11u1		openldap: null pointer dereference in ber_memalloc_x function 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-05-30 22:15 修改: 2023-08-02 16:46
libmount1	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libncurses6	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libncurses6	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libncursesw6	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libncursesw6	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libnghttp2-14	CVE-2023-44487	高危	1.43.0-1	1.43.0-1+deb11u1	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
git	CVE-2024-32465	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: additional local RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32465 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
curl	CVE-2022-22576	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: OAUTH2 bearer bypass in connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-05-26 17:15 修改: 2024-03-27 15:02
libperl5.32	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
libperl5.32	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
libperl5.32	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-12-18 14:15 修改: 2024-09-16 16:15
curl	CVE-2022-27775	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: bad local IPv6 connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27775 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libpython3.9-minimal	CVE-2015-20107	高危	3.9.2-1		python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
libpython3.9-minimal	CVE-2020-10735	高危	3.9.2-1		python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-09-09 14:15 修改: 2023-06-30 23:15
libpython3.9-minimal	CVE-2021-3737	高危	3.9.2-1		python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
libpython3.9-minimal	CVE-2022-0391	高危	3.9.2-1		python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
libpython3.9-minimal	CVE-2022-42919	高危	3.9.2-1		python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-11-07 00:15 修改: 2023-11-07 03:53
libpython3.9-minimal	CVE-2022-45061	高危	3.9.2-1		python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
libpython3.9-minimal	CVE-2023-24329	高危	3.9.2-1		python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
libpython3.9-minimal	CVE-2023-6597	高危	3.9.2-1		python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.9-minimal	CVE-2024-6232	高危	3.9.2-1		python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
libpython3.9-minimal	CVE-2024-7592	高危	3.9.2-1		cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
curl	CVE-2022-27781	高危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: CERTINFO never-ending busy-loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
libpython3.9-stdlib	CVE-2015-20107	高危	3.9.2-1		python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
libpython3.9-stdlib	CVE-2020-10735	高危	3.9.2-1		python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-09-09 14:15 修改: 2023-06-30 23:15
libpython3.9-stdlib	CVE-2021-3737	高危	3.9.2-1		python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
libpython3.9-stdlib	CVE-2022-0391	高危	3.9.2-1		python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
libpython3.9-stdlib	CVE-2022-42919	高危	3.9.2-1		python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-11-07 00:15 修改: 2023-11-07 03:53
libpython3.9-stdlib	CVE-2022-45061	高危	3.9.2-1		python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
libpython3.9-stdlib	CVE-2023-24329	高危	3.9.2-1		python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
libpython3.9-stdlib	CVE-2023-6597	高危	3.9.2-1		python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.9-stdlib	CVE-2024-6232	高危	3.9.2-1		python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
libpython3.9-stdlib	CVE-2024-7592	高危	3.9.2-1		cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
libsmartcols1	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libsqlite3-0	CVE-2021-36690	高危	3.34.1-3	3.34.1-3+deb11u1	A segmentation fault can occur in the sqlite3.exe command-line compone ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36690 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2021-08-24 14:15 修改: 2024-08-04 01:15
libsqlite3-0	CVE-2023-7104	高危	3.34.1-3	3.34.1-3+deb11u1	sqlite: heap-buffer-overflow at sessionfuzz 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-12-29 10:15 修改: 2024-05-17 02:34
libss2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
libssh2-1	CVE-2020-22218	高危	1.9.0-2	1.9.0-2+deb11u1	libssh2: use-of-uninitialized-value in _libssh2_transport_read 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-22218 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-08-22 19:16 修改: 2023-10-06 15:15
libssl1.1	CVE-2022-4450	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0215	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-02-08 20:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2023-0286	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0464	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-03-22 17:15 修改: 2024-06-21 19:15
libsystemd0	CVE-2023-50387	高危	247.3-7	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libsystemd0	CVE-2023-50868	高危	247.3-7	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
git-man	CVE-2019-1387	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: Remote code execution in recursive clones with nested submodules 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1387 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2019-12-18 21:15 修改: 2024-06-26 10:15
libtinfo6	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libtinfo6	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libtirpc-common	CVE-2021-46828	高危	1.3.1-1	1.3.1-1+deb11u1	libtirpc: DoS vulnerability with lots of connections 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46828 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-07-20 06:15 修改: 2023-11-07 03:40
libtirpc3	CVE-2021-46828	高危	1.3.1-1	1.3.1-1+deb11u1	libtirpc: DoS vulnerability with lots of connections 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46828 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-07-20 06:15 修改: 2023-11-07 03:40
libudev1	CVE-2023-50387	高危	247.3-7	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libudev1	CVE-2023-50868	高危	247.3-7	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libuuid1	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libzstd1	CVE-2022-4899	高危	1.4.8+dfsg-2.1		zstd: mysql: buffer overrun in util.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-03-31 20:15 修改: 2023-11-07 03:59
logsave	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
mount	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
ncurses-base	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
ncurses-base	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
ncurses-bin	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
ncurses-bin	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
git-man	CVE-2022-24765	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24765 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-04-12 18:15 修改: 2023-12-27 10:15
openssh-client	CVE-2021-41617	高危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u3	openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41617 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-09-26 19:15 修改: 2023-12-26 04:15
openssl	CVE-2022-4450	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0215	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-08 20:15 修改: 2024-06-21 19:15
openssl	CVE-2023-0286	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0464	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-22 17:15 修改: 2024-06-21 19:15
perl	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
perl	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
perl	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-12-18 14:15 修改: 2024-09-16 16:15
perl-base	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
perl-base	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
perl-base	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-12-18 14:15 修改: 2024-09-16 16:15
perl-modules-5.32	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
perl-modules-5.32	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
perl-modules-5.32	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-12-18 14:15 修改: 2024-09-16 16:15
git-man	CVE-2022-29187	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: Bypass of safe.directory protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29187 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-07-12 21:15 修改: 2024-01-14 10:15
python3.9	CVE-2015-20107	高危	3.9.2-1		python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
python3.9	CVE-2020-10735	高危	3.9.2-1		python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-09-09 14:15 修改: 2023-06-30 23:15
python3.9	CVE-2021-3737	高危	3.9.2-1		python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
python3.9	CVE-2022-0391	高危	3.9.2-1		python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
python3.9	CVE-2022-42919	高危	3.9.2-1		python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-11-07 00:15 修改: 2023-11-07 03:53
python3.9	CVE-2022-45061	高危	3.9.2-1		python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
python3.9	CVE-2023-24329	高危	3.9.2-1		python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
python3.9	CVE-2023-6597	高危	3.9.2-1		python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.9	CVE-2024-6232	高危	3.9.2-1		python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
python3.9	CVE-2024-7592	高危	3.9.2-1		cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
git-man	CVE-2022-39260	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: git shell function that splits command arguments can lead to arbitrary heap writes. 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39260 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-19 12:15 修改: 2023-12-27 10:15
python3.9-minimal	CVE-2015-20107	高危	3.9.2-1		python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
python3.9-minimal	CVE-2020-10735	高危	3.9.2-1		python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-09-09 14:15 修改: 2023-06-30 23:15
python3.9-minimal	CVE-2021-3737	高危	3.9.2-1		python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
python3.9-minimal	CVE-2022-0391	高危	3.9.2-1		python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
python3.9-minimal	CVE-2022-42919	高危	3.9.2-1		python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-11-07 00:15 修改: 2023-11-07 03:53
python3.9-minimal	CVE-2022-45061	高危	3.9.2-1		python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
python3.9-minimal	CVE-2023-24329	高危	3.9.2-1		python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
python3.9-minimal	CVE-2023-6597	高危	3.9.2-1		python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.9-minimal	CVE-2024-6232	高危	3.9.2-1		python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
python3.9-minimal	CVE-2024-7592	高危	3.9.2-1		cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
util-linux	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
git-man	CVE-2023-23946	高危	1:2.30.2-1	1:2.30.2-1+deb11u2	git: git apply: a path outside the working tree can be overwritten with crafted input 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23946 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-14 20:15 修改: 2023-12-27 10:15
git-man	CVE-2023-25652	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25652 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-25 20:15 修改: 2024-06-26 10:15
git-man	CVE-2023-29007	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: arbitrary configuration injection when renaming or deleting a section from a configuration file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29007 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-25 21:15 修改: 2024-06-26 10:15
libcurl4	CVE-2022-32205	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Set-Cookie denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32205 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:01
libcurl4	CVE-2022-32206	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: HTTP compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libcurl4	CVE-2022-32208	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: FTP-KRB bad message verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libpython3.9-minimal	CVE-2021-3426	中危	3.9.2-1		python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-05-20 13:15 修改: 2023-11-07 03:38
libpython3.9-minimal	CVE-2021-3733	中危	3.9.2-1		python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-03-10 17:42 修改: 2023-06-30 23:15
libpython3.9-minimal	CVE-2021-4189	中危	3.9.2-1		python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-08-24 16:15 修改: 2023-06-30 23:15
libpython3.9-minimal	CVE-2023-27043	中危	3.9.2-1		python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
libpython3.9-minimal	CVE-2023-40217	中危	3.9.2-1		python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
libpython3.9-minimal	CVE-2024-0397	中危	3.9.2-1		cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
libpython3.9-minimal	CVE-2024-0450	中危	3.9.2-1		python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.9-minimal	CVE-2024-6923	中危	3.9.2-1		cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
libpython3.9-minimal	CVE-2024-8088	中危	3.9.2-1		python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
libpython3.9-minimal	CVE-2024-9287	中危	3.9.2-1		python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
libcurl4	CVE-2022-43552	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u5	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-09 20:15 修改: 2024-10-27 15:35
libcurl4	CVE-2023-23915	中危	7.74.0-1.3+deb11u1		curl: HSTS amnesia with --parallel 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23915 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
libcurl4	CVE-2023-23916	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u7	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:54
libcurl4	CVE-2023-27535	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:47
libcurl4	CVE-2023-27536	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
libcurl4	CVE-2023-27538	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
libcurl4	CVE-2023-28321	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u9	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-05-26 21:15 修改: 2023-11-07 04:10
libcurl4	CVE-2023-46218	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u11	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-12-07 01:15 修改: 2024-01-25 14:15
libcurl4	CVE-2023-46219	中危	7.74.0-1.3+deb11u1		curl: excessively long file name may lead to unknown HSTS status 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46219 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-12-12 02:15 修改: 2024-01-19 16:15
libcurl4	CVE-2024-7264	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u13	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-07-31 08:15 修改: 2024-10-30 20:35
libcurl4	CVE-2024-8096	中危	7.74.0-1.3+deb11u1		curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
libpython3.9-stdlib	CVE-2021-3426	中危	3.9.2-1		python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-05-20 13:15 修改: 2023-11-07 03:38
libpython3.9-stdlib	CVE-2021-3733	中危	3.9.2-1		python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-03-10 17:42 修改: 2023-06-30 23:15
libpython3.9-stdlib	CVE-2021-4189	中危	3.9.2-1		python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-08-24 16:15 修改: 2023-06-30 23:15
libpython3.9-stdlib	CVE-2023-27043	中危	3.9.2-1		python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
libpython3.9-stdlib	CVE-2023-40217	中危	3.9.2-1		python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
libpython3.9-stdlib	CVE-2024-0397	中危	3.9.2-1		cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
libpython3.9-stdlib	CVE-2024-0450	中危	3.9.2-1		python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.9-stdlib	CVE-2024-6923	中危	3.9.2-1		cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
libpython3.9-stdlib	CVE-2024-8088	中危	3.9.2-1		python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
libpython3.9-stdlib	CVE-2024-9287	中危	3.9.2-1		python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
git	CVE-2023-22490	中危	1:2.30.2-1	1:2.30.2-1+deb11u2	git: data exfiltration with maliciously crafted repository 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22490 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-14 20:15 修改: 2023-12-27 10:15
curl	CVE-2023-46218	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u11	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-12-07 01:15 修改: 2024-01-25 14:15
curl	CVE-2023-46219	中危	7.74.0-1.3+deb11u1		curl: excessively long file name may lead to unknown HSTS status 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46219 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-12-12 02:15 修改: 2024-01-19 16:15
curl	CVE-2024-7264	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u13	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-07-31 08:15 修改: 2024-10-30 20:35
libc6	CVE-2023-4806	中危	2.31-13+deb11u3		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
libc6	CVE-2023-4813	中危	2.31-13+deb11u3		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
libc6	CVE-2024-33600	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libexpat1	CVE-2024-50602	中危	2.2.10-2+deb11u3		libexpat: expat: DoS via XML_ResumeParser 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-10-27 05:15 修改: 2024-10-30 18:35
libc6	CVE-2024-33601	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libssl1.1	CVE-2022-2097	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-07-05 11:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2022-4304	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0465	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0466	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-2650	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-3446	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2023-3817	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2023-5678	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-0727	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-4741	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl1.1	CVE-2024-5535	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libc6	CVE-2024-33602	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libgcrypt20	CVE-2024-2236	中危	1.8.7-6		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-06 22:15 修改: 2024-09-14 04:15
libsystemd0	CVE-2022-3821	中危	247.3-7	247.3-7+deb11u2	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libsystemd0	CVE-2022-4415	中危	247.3-7	247.3-7+deb11u2	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libsystemd0	CVE-2023-7008	中危	247.3-7	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
curl	CVE-2024-8096	中危	7.74.0-1.3+deb11u1		curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
curl	CVE-2021-22947	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Server responses received before STARTTLS processed after TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:03
curl	CVE-2022-27774	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: credential leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libtinfo6	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
curl	CVE-2022-27776	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: auth/cookie leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libgnutls30	CVE-2023-5981	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u4	gnutls: timing side-channel in the RSA-PSK authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-11-28 12:15 修改: 2024-09-16 13:15
libgnutls30	CVE-2024-28834	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u6	gnutls: vulnerable to Minerva side-channel information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-21 14:15 修改: 2024-09-12 20:15
libgnutls30	CVE-2024-28835	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u6	gnutls: potential crash during chain building/verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28835 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-21 06:15 修改: 2024-09-16 19:16
libudev1	CVE-2022-3821	中危	247.3-7	247.3-7+deb11u2	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libudev1	CVE-2022-4415	中危	247.3-7	247.3-7+deb11u2	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libudev1	CVE-2023-7008	中危	247.3-7	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
curl	CVE-2022-32205	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Set-Cookie denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32205 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:01
curl	CVE-2022-32206	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: HTTP compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
login	CVE-2023-4641	中危	1:4.8.1-1		shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
curl	CVE-2022-32208	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: FTP-KRB bad message verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libgssapi-krb5-2	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
curl	CVE-2022-43552	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u5	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-09 20:15 修改: 2024-10-27 15:35
curl	CVE-2023-23915	中危	7.74.0-1.3+deb11u1		curl: HSTS amnesia with --parallel 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23915 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
ncurses-base	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libcurl3-gnutls	CVE-2022-43552	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u5	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-09 20:15 修改: 2024-10-27 15:35
libk5crypto3	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
ncurses-bin	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libcurl3-gnutls	CVE-2023-23915	中危	7.74.0-1.3+deb11u2		curl: HSTS amnesia with --parallel 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23915 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
libcurl3-gnutls	CVE-2023-23916	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u7	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:54
openssh-client	CVE-2023-48795	中危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u3	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
openssh-client	CVE-2023-51385	中危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u3	openssh: potential command injection via shell metacharacters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-12-18 19:15 修改: 2024-03-13 21:15
libcurl3-gnutls	CVE-2023-27535	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:47
libkrb5-3	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libcurl3-gnutls	CVE-2023-27536	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
libcurl3-gnutls	CVE-2023-27538	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
openssl	CVE-2022-2097	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-07-05 11:15 修改: 2024-06-21 19:15
openssl	CVE-2022-4304	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0465	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0466	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
openssl	CVE-2023-2650	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
openssl	CVE-2023-3446	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
openssl	CVE-2023-3817	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
openssl	CVE-2023-5678	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
openssl	CVE-2024-0727	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
openssl	CVE-2024-4741	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl	CVE-2024-5535	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
passwd	CVE-2023-4641	中危	1:4.8.1-1		shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
libcurl3-gnutls	CVE-2023-28321	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u9	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-05-26 21:15 修改: 2023-11-07 04:10
libkrb5support0	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libcurl3-gnutls	CVE-2023-46218	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u11	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-12-07 01:15 修改: 2024-01-25 14:15
libcurl3-gnutls	CVE-2023-46219	中危	7.74.0-1.3+deb11u2		curl: excessively long file name may lead to unknown HSTS status 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46219 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-12-12 02:15 修改: 2024-01-19 16:15
libcurl3-gnutls	CVE-2024-7264	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u13	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-07-31 08:15 修改: 2024-10-30 20:35
libcurl3-gnutls	CVE-2024-8096	中危	7.74.0-1.3+deb11u2		curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
git-man	CVE-2022-39253	中危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: exposure of sensitive information to a malicious actor 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39253 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-19 11:15 修改: 2024-06-10 18:15
git-man	CVE-2023-22490	中危	1:2.30.2-1	1:2.30.2-1+deb11u2	git: data exfiltration with maliciously crafted repository 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22490 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-02-14 20:15 修改: 2023-12-27 10:15
libncurses6	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
curl	CVE-2023-23916	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u7	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:54
libapr1	CVE-2023-49582	中危	1.7.0-6+deb11u1		APR: Lax permissions in Apache Portable Runtime shared memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-49582 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-26 14:15 修改: 2024-08-27 16:04
libncursesw6	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libaprutil1	CVE-2022-25147	中危	1.6.1-5	1.6.1-5+deb11u1	apr-util: out-of-bounds writes in the apr_base64 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25147 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-01-31 16:15 修改: 2024-03-15 11:15
libnghttp2-14	CVE-2024-28182	中危	1.43.0-1	1.43.0-1+deb11u2	nghttp2: CONTINUATION frames DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-04-04 15:15 修改: 2024-05-01 18:15
libpam-modules	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-10-23 14:15 修改: 2024-11-04 22:27
libpam-modules	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpam-modules-bin	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-10-23 14:15 修改: 2024-11-04 22:27
libpam-modules-bin	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpam-runtime	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-10-23 14:15 修改: 2024-11-04 22:27
libpam-runtime	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
python3.9	CVE-2021-3426	中危	3.9.2-1		python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-05-20 13:15 修改: 2023-11-07 03:38
python3.9	CVE-2021-3733	中危	3.9.2-1		python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-03-10 17:42 修改: 2023-06-30 23:15
python3.9	CVE-2021-4189	中危	3.9.2-1		python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-08-24 16:15 修改: 2023-06-30 23:15
python3.9	CVE-2023-27043	中危	3.9.2-1		python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
python3.9	CVE-2023-40217	中危	3.9.2-1		python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
python3.9	CVE-2024-0397	中危	3.9.2-1		cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
python3.9	CVE-2024-0450	中危	3.9.2-1		python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.9	CVE-2024-6923	中危	3.9.2-1		cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
python3.9	CVE-2024-8088	中危	3.9.2-1		python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
python3.9	CVE-2024-9287	中危	3.9.2-1		python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
libpam0g	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-10-23 14:15 修改: 2024-11-04 22:27
libpam0g	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
curl	CVE-2023-27535	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:47
curl	CVE-2023-27536	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
curl	CVE-2023-27538	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u8	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
curl	CVE-2023-28321	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u9	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-05-26 21:15 修改: 2023-11-07 04:10
git	CVE-2022-39253	中危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: exposure of sensitive information to a malicious actor 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39253 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-19 11:15 修改: 2024-06-10 18:15
libc-bin	CVE-2023-4806	中危	2.31-13+deb11u3		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
libc-bin	CVE-2023-4813	中危	2.31-13+deb11u3		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
libc-bin	CVE-2024-33600	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33601	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
python3.9-minimal	CVE-2021-3426	中危	3.9.2-1		python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-05-20 13:15 修改: 2023-11-07 03:38
python3.9-minimal	CVE-2021-3733	中危	3.9.2-1		python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-03-10 17:42 修改: 2023-06-30 23:15
python3.9-minimal	CVE-2021-4189	中危	3.9.2-1		python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-08-24 16:15 修改: 2023-06-30 23:15
python3.9-minimal	CVE-2023-27043	中危	3.9.2-1		python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
python3.9-minimal	CVE-2023-40217	中危	3.9.2-1		python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
python3.9-minimal	CVE-2024-0397	中危	3.9.2-1		cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
python3.9-minimal	CVE-2024-0450	中危	3.9.2-1		python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.9-minimal	CVE-2024-6923	中危	3.9.2-1		cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
python3.9-minimal	CVE-2024-8088	中危	3.9.2-1		python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
python3.9-minimal	CVE-2024-9287	中危	3.9.2-1		python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
unzip	CVE-2022-0529	中危	6.0-26	6.0-26+deb11u1	unzip: Heap out-of-bound writes and reads during conversion of wide string to local string 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0529 镜像层: sha256:b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b 发布日期: 2022-02-09 23:15 修改: 2023-11-09 20:55
unzip	CVE-2022-0530	中危	6.0-26	6.0-26+deb11u1	unzip: SIGSEGV during the conversion of an utf-8 string to a local string 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0530 镜像层: sha256:b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b 发布日期: 2022-02-09 23:15 修改: 2023-11-09 20:55
libc-bin	CVE-2024-33602	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libcurl4	CVE-2021-22947	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Server responses received before STARTTLS processed after TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:03
wget	CVE-2021-31879	中危	1.21-1+deb11u1		wget: authorization header disclosure on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-04-29 05:15 修改: 2022-05-13 20:52
libcurl4	CVE-2022-27774	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: credential leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libcurl4	CVE-2022-27776	中危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: auth/cookie leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libsqlite3-0	CVE-2022-35737	低危	3.34.1-3		sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2022-08-03 06:15 修改: 2024-03-27 16:05
libcurl3-gnutls	CVE-2023-28322	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u9	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-05-26 21:15 修改: 2023-12-22 16:15
libk5crypto3	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libk5crypto3	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libk5crypto3	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libcurl3-gnutls	CVE-2023-38546	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u10	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-10-18 04:15 修改: 2024-07-09 14:15
libcurl3-gnutls	CVE-2024-2379	低危	7.74.0-1.3+deb11u2		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libblkid1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
git	CVE-2022-24975	低危	1:2.30.2-1		git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed" 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-02-11 20:15 修改: 2024-08-03 05:15
libkrb5-3	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libkrb5-3	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5-3	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
git	CVE-2023-25815	低危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: malicious placement of crafted messages when git was compiled with runtime prefix 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25815 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-25 20:15 修改: 2024-06-26 10:15
git	CVE-2024-32020	低危	1:2.30.2-1		git: insecure hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32020 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 19:15 修改: 2024-06-10 18:15
git	CVE-2024-32021	低危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: symlink bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32021 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
bsdutils	CVE-2022-0563	低危	1:2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libkrb5support0	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libkrb5support0	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libssl1.1	CVE-2024-2511	低危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-9143	低危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
libstdc++6	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
libkrb5support0	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
gcc-10-base	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
gcc-9-base	CVE-2023-4039	低危	9.3.0-22		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
coreutils	CVE-2016-2781	低危	8.32-4+b1		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2017-02-07 15:59 修改: 2023-11-07 02:32
libldap-2.4-2	CVE-2015-3276	低危	2.4.57+dfsg-3+deb11u1		openldap: incorrect multi-keyword mode cipherstring parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2015-12-07 20:59 修改: 2023-04-28 18:28
libsystemd0	CVE-2013-4392	低危	247.3-7		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libsystemd0	CVE-2020-13529	低危	247.3-7		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libsystemd0	CVE-2023-31437	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libsystemd0	CVE-2023-31438	低危	247.3-7		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libsystemd0	CVE-2023-31439	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libldap-2.4-2	CVE-2017-14159	低危	2.4.57+dfsg-3+deb11u1		openldap: Privilege escalation via PID file manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2017-09-05 18:29 修改: 2022-06-13 19:18
libldap-2.4-2	CVE-2017-17740	低危	2.4.57+dfsg-3+deb11u1		openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2017-12-18 06:29 修改: 2022-06-13 19:10
libldap-2.4-2	CVE-2020-15719	低危	2.4.57+dfsg-3+deb11u1		openldap: Certificate validation incorrectly matches name against CN-ID 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2020-07-14 14:15 修改: 2022-05-12 15:01
coreutils	CVE-2017-18018	低危	8.32-4+b1		coreutils: race condition vulnerability in chown and chgrp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2018-01-04 04:29 修改: 2018-01-19 15:46
libtinfo6	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
libmount1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libc-bin	CVE-2010-4756	低危	2.31-13+deb11u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
libc-bin	CVE-2018-20796	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
libc-bin	CVE-2019-1010022	低危	2.31-13+deb11u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libncurses6	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
libc-bin	CVE-2019-1010023	低危	2.31-13+deb11u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc-bin	CVE-2019-1010024	低危	2.31-13+deb11u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libudev1	CVE-2013-4392	低危	247.3-7		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libudev1	CVE-2020-13529	低危	247.3-7		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libudev1	CVE-2023-31437	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libudev1	CVE-2023-31438	低危	247.3-7		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libudev1	CVE-2023-31439	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libc-bin	CVE-2019-1010025	低危	2.31-13+deb11u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libuuid1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libncursesw6	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
libc-bin	CVE-2019-9192	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
login	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45
login	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
login	CVE-2023-29383	低危	1:4.8.1-1		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
login	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bash	TEMP-0841856-B18BAF	低危	5.1-2+deb11u1		[Privilege escalation possible to other user than root] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
apt	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08
mount	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
curl	CVE-2021-22898	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-06-11 16:15 修改: 2024-03-27 15:47
curl	CVE-2021-22922	低危	7.74.0-1.3+deb11u1		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:12
curl	CVE-2021-22923	低危	7.74.0-1.3+deb11u1		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
ncurses-base	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
curl	CVE-2021-22924	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Bad connection reuse due to flawed path name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
curl	CVE-2022-35252	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u3	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-09-23 14:15 修改: 2024-03-27 15:00
curl	CVE-2023-28320	低危	7.74.0-1.3+deb11u1		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-05-26 21:15 修改: 2023-10-20 18:42
ncurses-bin	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
curl	CVE-2023-28322	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u9	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-05-26 21:15 修改: 2023-12-22 16:15
libc6	CVE-2010-4756	低危	2.31-13+deb11u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
libc6	CVE-2018-20796	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
libpcre2-8-0	CVE-2022-41409	低危	10.36-2		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-07-18 14:15 修改: 2023-07-27 03:46
openssh-client	CVE-2007-2243	低危	1:8.4p1-5+deb11u1		OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabl ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2243 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2007-04-25 16:19 修改: 2017-07-29 01:31
openssh-client	CVE-2007-2768	低危	1:8.4p1-5+deb11u1		OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2768 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2007-05-21 20:30 修改: 2021-04-01 15:32
openssh-client	CVE-2008-3234	低危	1:8.4p1-5+deb11u1		sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapsh ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2008-3234 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2008-07-18 16:41 修改: 2017-09-29 01:31
openssh-client	CVE-2016-20012	低危	1:8.4p1-5+deb11u1		openssh: Public key information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20012 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-09-15 20:15 修改: 2024-08-06 04:16
openssh-client	CVE-2018-15919	低危	1:8.4p1-5+deb11u1		openssh: User enumeration via malformed packets in authentication requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15919 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2018-08-28 08:29 修改: 2019-03-07 16:29
openssh-client	CVE-2019-6110	低危	1:8.4p1-5+deb11u1		openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6110 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2019-01-31 18:29 修改: 2023-02-23 23:29
openssh-client	CVE-2020-14145	低危	1:8.4p1-5+deb11u1		openssh: Observable discrepancy leading to an information leak in the algorithm negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2020-06-29 18:15 修改: 2022-04-28 19:34
openssh-client	CVE-2020-15778	低危	1:8.4p1-5+deb11u1		openssh: scp allows command injection when using backtick characters in the destination argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15778 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2020-07-24 14:15 修改: 2024-08-04 14:15
openssh-client	CVE-2021-36368	低危	1:8.4p1-5+deb11u1		openssh: possible bypass of fido 2 devices and ssh-askpass 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36368 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-03-13 00:15 修改: 2024-08-04 01:15
openssh-client	CVE-2023-51767	低危	1:8.4p1-5+deb11u1		openssh: authentication bypass via row hammer attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51767 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-12-24 07:15 修改: 2024-02-27 15:51
libpcre3	CVE-2017-11164	低危	2:8.39-13		pcre: OP_KETRMAX feature in the match function in pcre_exec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2017-07-11 03:29 修改: 2023-11-07 02:38
libpcre3	CVE-2017-16231	低危	2:8.39-13		pcre: self-recursive call in match() in pcre_exec.c leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16231 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-03-21 15:59 修改: 2024-08-05 21:15
libpcre3	CVE-2017-7245	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2017-03-23 21:59 修改: 2018-08-17 10:29
libpcre3	CVE-2017-7246	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2017-03-23 21:59 修改: 2018-08-17 10:29
libpcre3	CVE-2019-20838	低危	2:8.39-13		pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20838 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2020-06-15 17:15 修改: 2024-03-27 16:05
libc6	CVE-2019-1010022	低危	2.31-13+deb11u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc6	CVE-2019-1010023	低危	2.31-13+deb11u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc6	CVE-2019-1010024	低危	2.31-13+deb11u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libperl5.32	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
libperl5.32	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
libpng16-16	CVE-2019-6129	低危	1.6.37-3		libpng: memory leak of png_info struct in pngcp.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6129 镜像层: sha256:b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b 发布日期: 2019-01-11 05:29 修改: 2024-08-04 21:15
libpng16-16	CVE-2021-4214	低危	1.6.37-3		libpng: hardcoded value leads to heap-overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4214 镜像层: sha256:b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b 发布日期: 2022-08-24 16:15 修改: 2022-11-08 02:32
libprocps8	CVE-2023-4016	低危	2:3.3.17-5		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
libc6	CVE-2019-1010025	低危	2.31-13+deb11u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libcurl4	CVE-2021-22898	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-06-11 16:15 修改: 2024-03-27 15:47
openssl	CVE-2024-2511	低危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
openssl	CVE-2024-9143	低危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
libcurl4	CVE-2021-22922	低危	7.74.0-1.3+deb11u1		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:12
passwd	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45
passwd	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
passwd	CVE-2023-29383	低危	1:4.8.1-1		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
passwd	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4	CVE-2021-22923	低危	7.74.0-1.3+deb11u1		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
libcurl4	CVE-2021-22924	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u2	curl: Bad connection reuse due to flawed path name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
libcurl4	CVE-2022-35252	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u3	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2022-09-23 14:15 修改: 2024-03-27 15:00
perl	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
perl	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
libcurl4	CVE-2023-28320	低危	7.74.0-1.3+deb11u1		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-05-26 21:15 修改: 2023-10-20 18:42
libcurl4	CVE-2023-28322	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u9	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-05-26 21:15 修改: 2023-12-22 16:15
libcurl4	CVE-2023-38546	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u10	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-10-18 04:15 修改: 2024-07-09 14:15
perl-base	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
perl-base	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
libcurl4	CVE-2024-2379	低危	7.74.0-1.3+deb11u1		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libc6	CVE-2019-9192	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
git-man	CVE-2018-1000021	低危	1:2.30.2-1		git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2018-02-09 23:29 修改: 2024-10-24 17:58
perl-modules-5.32	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
perl-modules-5.32	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
procps	CVE-2023-4016	低危	2:3.3.17-5		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
git-man	CVE-2022-24975	低危	1:2.30.2-1		git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed" 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-02-11 20:15 修改: 2024-08-03 05:15
git-man	CVE-2023-25815	低危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: malicious placement of crafted messages when git was compiled with runtime prefix 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25815 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-04-25 20:15 修改: 2024-06-26 10:15
git-man	CVE-2024-32020	低危	1:2.30.2-1		git: insecure hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32020 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 19:15 修改: 2024-06-10 18:15
git-man	CVE-2024-32021	低危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: symlink bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32021 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
gnupg	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
gnupg-l10n	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
libexpat1	CVE-2013-0340	低危	2.2.10-2+deb11u3		expat: internal entity expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0340 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2014-01-21 18:55 修改: 2023-11-07 02:13
libexpat1	CVE-2023-52426	低危	2.2.10-2+deb11u3		expat: recursive XML entity expansion vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-02-04 20:15 修改: 2024-03-07 17:15
libexpat1	CVE-2024-28757	低危	2.2.10-2+deb11u3		expat: XML Entity Expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-03-10 05:15 修改: 2024-05-01 19:15
libpython3.9-minimal	CVE-2020-27619	低危	3.9.2-1		python: Unsafe use of eval() on data retrieved via HTTP in the test suite 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2020-10-22 03:16 修改: 2024-02-03 07:15
libpython3.9-minimal	CVE-2021-28861	低危	3.9.2-1		python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-08-23 01:15 修改: 2024-08-03 22:15
libpython3.9-minimal	CVE-2022-37454	低危	3.9.2-1		XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
libpython3.9-minimal	CVE-2024-4032	低危	3.9.2-1		python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
libpython3.9-minimal	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-27 21:15 修改: 2024-07-28 14:15
gnupg-utils	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
libfreetype6	CVE-2022-31782	低危	2.10.4+dfsg-1+deb11u1		ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based bu ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31782 镜像层: sha256:b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b 发布日期: 2022-06-02 14:15 修改: 2022-06-10 18:08
libgcc-s1	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
gpg	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
gpg-agent	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
libgcrypt20	CVE-2018-6829	低危	1.8.7-6		libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2018-02-07 23:29 修改: 2020-01-15 20:15
gpg-wks-client	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
python3.9	CVE-2020-27619	低危	3.9.2-1		python: Unsafe use of eval() on data retrieved via HTTP in the test suite 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2020-10-22 03:16 修改: 2024-02-03 07:15
python3.9	CVE-2021-28861	低危	3.9.2-1		python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-08-23 01:15 修改: 2024-08-03 22:15
python3.9	CVE-2022-37454	低危	3.9.2-1		XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
python3.9	CVE-2024-4032	低危	3.9.2-1		python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
python3.9	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-27 21:15 修改: 2024-07-28 14:15
gpg-wks-server	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
gpgconf	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
gpgsm	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
gpgv	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
curl	CVE-2023-38546	低危	7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u10	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2023-10-18 04:15 修改: 2024-07-09 14:15
curl	CVE-2024-2379	低危	7.74.0-1.3+deb11u1		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libgnutls30	CVE-2011-3389	低危	3.7.1-5+deb11u1		HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2011-09-06 19:55 修改: 2022-11-29 15:56
dirmngr	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
libapt-pkg6.0	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08
git	CVE-2018-1000021	低危	1:2.30.2-1		git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2018-02-09 23:29 修改: 2024-10-24 17:58
libcurl3-gnutls	CVE-2021-22922	低危	7.74.0-1.3+deb11u2		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:12
libgssapi-krb5-2	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libgssapi-krb5-2	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libgssapi-krb5-2	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libpython3.9-stdlib	CVE-2020-27619	低危	3.9.2-1		python: Unsafe use of eval() on data retrieved via HTTP in the test suite 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2020-10-22 03:16 修改: 2024-02-03 07:15
libpython3.9-stdlib	CVE-2021-28861	低危	3.9.2-1		python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-08-23 01:15 修改: 2024-08-03 22:15
libpython3.9-stdlib	CVE-2022-37454	低危	3.9.2-1		XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
libpython3.9-stdlib	CVE-2024-4032	低危	3.9.2-1		python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
libpython3.9-stdlib	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-27 21:15 修改: 2024-07-28 14:15
libsepol1	CVE-2021-36084	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36085	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
python3.9-minimal	CVE-2020-27619	低危	3.9.2-1		python: Unsafe use of eval() on data retrieved via HTTP in the test suite 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2020-10-22 03:16 修改: 2024-02-03 07:15
python3.9-minimal	CVE-2021-28861	低危	3.9.2-1		python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-08-23 01:15 修改: 2024-08-03 22:15
python3.9-minimal	CVE-2022-37454	低危	3.9.2-1		XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
python3.9-minimal	CVE-2024-4032	低危	3.9.2-1		python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
python3.9-minimal	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2024-06-27 21:15 修改: 2024-07-28 14:15
sysvinit-utils	TEMP-0517018-A83CE6	低危	2.96-7+deb11u1		[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tar	CVE-2005-2541	低危	1.34+dfsg-1		tar: does not properly warn the user when extracting setuid or setgid files 漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2005-08-10 04:00 修改: 2023-11-07 01:57
tar	CVE-2022-48303	低危	1.34+dfsg-1	1.34+dfsg-1+deb11u1	tar: heap buffer overflow at from_header() in list.c via specially crafted checksum 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2023-01-30 04:15 修改: 2023-05-30 17:16
tar	CVE-2023-39804	低危	1.34+dfsg-1	1.34+dfsg-1+deb11u1	tar: Incorrectly handled extension attributes in PAX archives can lead to a crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2024-03-27 04:15 修改: 2024-03-27 12:29
tar	TEMP-0290435-0B57B5	低危	1.34+dfsg-1		[tar's rmt command may have undesired side effects] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsepol1	CVE-2021-36086	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in cil_reset_classpermission() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36087	低危	3.1-1	3.1-1+deb11u1	libsepol: heap-based buffer overflow in ebitmap_match_any() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
unzip	CVE-2021-4217	低危	6.0-26		unzip: Null pointer dereference in Unicode strings code 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4217 镜像层: sha256:b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b 发布日期: 2022-08-24 16:15 修改: 2022-11-29 15:45
libcurl3-gnutls	CVE-2021-22923	低危	7.74.0-1.3+deb11u2		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
util-linux	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libsmartcols1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libcurl3-gnutls	CVE-2022-35252	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u3	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2022-09-23 14:15 修改: 2024-03-27 15:00
libcurl3-gnutls	CVE-2023-28320	低危	7.74.0-1.3+deb11u2		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873 发布日期: 2023-05-26 21:15 修改: 2023-10-20 18:42
libsqlite3-0	CVE-2021-45346	低危	3.34.1-3		sqlite: crafted SQL query allows a malicious user to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346 镜像层: sha256:293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e 发布日期: 2022-02-14 19:15 修改: 2024-08-04 05:15
openssl	DLA-3942-2	未知	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl - regression update 漏洞详情: 镜像层: sha256:03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl1.1	DLA-3942-2	未知	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl - regression update 漏洞详情: 镜像层: sha256:9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Java (jar)

低危漏洞:2

中危漏洞:32

高危漏洞:35

严重漏洞:8

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
com.h2database:h2	CVE-2021-42392	严重	1.4.200	2.0.206	h2: Remote Code Execution in Console 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42392 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-01-10 14:10 修改: 2023-02-24 22:15
com.h2database:h2	CVE-2022-23221	严重	1.4.200	2.1.210	h2: Loading of custom classes from remote servers through JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23221 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-01-19 17:15 修改: 2023-08-18 14:15
org.apache.zookeeper:zookeeper	CVE-2023-44981	严重	3.5.9	3.7.2, 3.8.3, 3.9.1	zookeeper: Authorization Bypass in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-10-11 12:15 修改: 2024-06-21 19:15
org.postgresql:postgresql	CVE-2024-1597	严重	42.2.25	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2	pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1597 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-02-19 13:15 修改: 2024-06-10 17:16
org.springframework.security:spring-security-core	CVE-2022-22978	严重	5.5.6	5.5.7, 5.6.4, 5.4.11	springframework: Authorization Bypass in RegexRequestMatcher 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22978 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-05-19 15:15 修改: 2023-04-11 23:15
org.springframework.security:spring-security-web	CVE-2022-22978	严重	5.5.6	5.5.7, 5.6.4, 5.4.11	springframework: Authorization Bypass in RegexRequestMatcher 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22978 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-05-19 15:15 修改: 2023-04-11 23:15
org.springframework.security:spring-security-web	CVE-2024-38821	严重	5.5.6	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4	Spring-WebFlux: Authorization Bypass of Static Resources in WebFlux Applications 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38821 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-10-28 07:15 修改: 2024-10-28 13:58
org.springframework:spring-web	CVE-2016-1000027	严重	5.3.20	6.0.0	spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2020-01-02 23:15 修改: 2023-04-20 09:15
com.h2database:h2	CVE-2021-23463	高危	1.4.200	2.0.202	h2database: XXE injection vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23463 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2021-12-10 20:15 修改: 2023-08-18 14:15
com.h2database:h2	CVE-2022-45868	高危	1.4.200	2.2.220	The web-based admin console in H2 Database Engine before 2.2.220 can b ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45868 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-11-23 21:15 修改: 2024-08-03 15:15
commons-io:commons-io	CVE-2024-47554	高危	2.7	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-10-03 12:15 修改: 2024-10-04 13:50
io.grpc:grpc-protobuf	CVE-2023-1428	高危	1.27.1	1.53.0	gRPC: Reachable Assertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1428 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-06-09 11:15 修改: 2023-06-15 22:17
io.grpc:grpc-protobuf	CVE-2023-32731	高危	1.27.1	1.53.0	gRPC: sensitive information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32731 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-06-09 11:15 修改: 2023-06-15 22:18
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.76.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mysql:mysql-connector-java	CVE-2018-3258	高危	5.1.42	8.0.13	mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3258 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2018-10-17 01:31 修改: 2019-10-03 00:03
org.apache.commons:commons-compress	CVE-2024-25710	高危	1.21	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-02-19 09:15 修改: 2024-03-07 17:15
org.apache.tomcat.embed:tomcat-embed-core	CVE-2022-42252	高危	9.0.62	8.5.83, 9.0.68, 10.0.27, 10.1.1	tomcat: request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-11-01 09:15 修改: 2023-05-30 06:15
org.apache.tomcat.embed:tomcat-embed-core	CVE-2022-45143	高危	9.0.62	8.5.84, 9.0.69, 10.1.2	tomcat: JsonErrorReportValve injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45143 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-01-03 19:15 修改: 2023-06-27 13:15
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-24998	高危	9.0.62	10.1.5, 11.0.0-M5, 8.5.88, 9.0.71	FileUpload: FileUpload DoS with excessive parts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-02-20 16:15 修改: 2024-02-16 19:11
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-46589	高危	9.0.62	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96	tomcat: HTTP request smuggling via malformed trailer headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-11-28 16:15 修改: 2024-07-12 16:11
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-34750	高危	9.0.62	11.0.0-M21, 10.1.25, 9.0.90	tomcat: Improper Handling of Exceptional Conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-07-03 20:15 修改: 2024-07-09 16:22
com.alibaba.nacos:nacos-client	CVE-2021-43116	高危	1.4.2		Use of Hard-coded Credentials in Nacos 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43116 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-07-05 14:15 修改: 2023-04-03 20:15
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.4.0	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-09-16 10:15 修改: 2023-07-13 17:24
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.4.0	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-12-13 15:15 修改: 2023-01-30 17:57
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.4.0	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-12-13 15:15 修改: 2023-01-26 17:35
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.4.0	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-03-22 06:15 修改: 2023-11-07 04:03
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.12.6.1	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
org.postgresql:postgresql	CVE-2022-31197	高危	42.2.25	42.2.26, 42.4.1, 42.3.7	postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31197 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-08-03 19:15 修改: 2023-11-07 03:47
org.springframework.boot:spring-boot-autoconfigure	CVE-2023-20883	高危	2.5.13	3.0.7, 2.7.12, 2.6.15, 2.5.15	spring-boot: Spring Boot Welcome Page DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-05-26 17:15 修改: 2023-07-03 16:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.12.6.1	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
org.springframework.security:spring-security-core	CVE-2024-22257	高危	5.5.6	5.7.12, 5.8.11, 6.1.8, 6.2.3	spring-security: Broken Access Control With Direct Use of AuthenticatedVoter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22257 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-03-18 15:15 修改: 2024-04-19 07:15
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.16.3	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
ch.qos.logback:logback-classic	CVE-2023-6378	高危	1.2.11	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-11-29 12:15 修改: 2023-12-05 21:00
org.springframework:spring-expression	CVE-2023-20863	高危	5.3.20	6.0.8, 5.3.27, 5.2.24.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-04-13 20:15 修改: 2024-06-10 17:16
ch.qos.logback:logback-core	CVE-2023-6378	高危	1.2.11	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-11-29 12:15 修改: 2023-12-05 21:00
org.springframework:spring-web	CVE-2024-22243	高危	5.3.20	6.1.4, 6.0.17, 5.3.32	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-02-23 05:15 修改: 2024-08-22 15:35
org.springframework:spring-web	CVE-2024-22259	高危	5.3.20	6.1.5, 6.0.18, 5.3.33	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-03-16 05:15 修改: 2024-07-03 01:47
org.springframework:spring-web	CVE-2024-22262	高危	5.3.20	5.3.34, 6.0.19, 6.1.6	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-04-16 06:15 修改: 2024-08-27 14:35
org.springframework:spring-webmvc	CVE-2024-38816	高危	5.3.20	6.1.13	spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38816 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-09-13 06:15 修改: 2024-09-13 14:06
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.1.7.7	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-06-15 18:15 修改: 2024-02-01 14:17
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.1.7.7	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-09-25 20:15 修改: 2023-09-26 15:46
org.yaml:snakeyaml	CVE-2022-1471	高危	1.28	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-12-01 11:15 修改: 2024-06-21 19:15
org.yaml:snakeyaml	CVE-2022-25857	高危	1.28	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-08-30 05:15 修改: 2024-03-15 11:15
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.4.0	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-09-16 10:15 修改: 2023-03-01 16:32
org.apache.commons:commons-compress	CVE-2024-26308	中危	1.21	1.26.0	commons-compress: OutOfMemoryError unpacking broken Pack200 file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26308 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-02-19 09:15 修改: 2024-03-21 19:54
io.netty:netty-codec-haproxy	CVE-2022-41881	中危	4.1.76.Final	4.1.86.Final	codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41881 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-12-12 18:15 修改: 2023-03-01 15:08
org.postgresql:postgresql	CVE-2022-41946	中危	42.2.25	42.2.27, 42.3.8, 42.4.3, 42.5.1	postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41946 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-11-23 20:15 修改: 2024-03-29 13:15
org.postgresql:postgresql	GHSA-673j-qm5f-xpv8	中危	42.2.25	42.3.3	pgjdbc Arbitrary File Write Vulnerability 漏洞详情: https://github.com/advisories/GHSA-673j-qm5f-xpv8 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.76.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-05-06 12:15 修改: 2022-12-03 14:25
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.76.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-03-25 20:15 修改: 2024-06-21 22:15
com.alibaba.nacos:nacos-common	CVE-2021-44667	中危	1.4.2	2.0.4	Cross-site Scripting in Nacos 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44667 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-03-11 19:15 修改: 2022-03-18 20:01
org.springframework.security:spring-security-core	CVE-2022-22976	中危	5.5.6	5.5.7, 5.6.4	springframework: BCrypt skips salt rounds for work factor of 31 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22976 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-05-19 15:15 修改: 2024-06-13 18:38
io.netty:netty-handler	CVE-2023-34462	中危	4.1.76.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-06-22 23:15 修改: 2024-06-21 19:15
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-41080	中危	9.0.62	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11	tomcat: Open Redirect vulnerability in FORM authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-08-25 21:15 修改: 2023-11-03 19:00
org.springframework:spring-context	CVE-2024-38820	中危	5.3.20	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-10-18 06:15 修改: 2024-10-22 15:42
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-42795	中危	9.0.62	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	tomcat: improper cleaning of recycled objects could lead to information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-10-10 18:15 修改: 2023-11-04 06:15
org.springframework:spring-expression	CVE-2023-20861	中危	5.3.20	6.0.7, 5.3.26, 5.2.23.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-03-23 21:15 修改: 2023-04-20 09:15
org.springframework:spring-expression	CVE-2024-38808	中危	5.3.20	5.3.39	spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-08-20 08:15 修改: 2024-10-30 19:35
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-44487	中危	9.0.62	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-45648	中危	9.0.62	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	tomcat: incorrectly parsed http trailer headers can cause request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-10-10 19:15 修改: 2023-11-04 06:15
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-24549	中危	9.0.62	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17	Tomcat: HTTP/2 header handling DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-03-13 16:15 修改: 2024-11-04 22:35
org.apache.tomcat.embed:tomcat-embed-websocket	CVE-2024-23672	中危	9.0.62	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99	Tomcat: WebSocket DoS with incomplete closing handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-03-13 16:15 修改: 2024-06-23 09:15
org.springframework:spring-web	CVE-2024-38809	中危	5.3.20	5.3.38, 6.0.23, 6.1.12	org.springframework:spring-web: Spring Framework DoS via conditional HTTP request 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2024-09-27 17:15 修改: 2024-09-30 12:45
com.google.guava:guava	CVE-2023-2976	中危	30.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
mysql:mysql-connector-java	CVE-2019-2692	中危	5.1.42	8.0.16	mysql-connector-java: privilege escalation in MySQL connector 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2692 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2019-04-23 19:32 修改: 2020-08-24 17:37
mysql:mysql-connector-java	CVE-2022-21363	中危	5.1.42	8.0.28	mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2022-01-19 12:15 修改: 2022-05-27 14:50
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.1.7.7	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-06-15 17:15 修改: 2023-06-27 15:59
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.1.7.7	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-06-15 17:15 修改: 2023-06-27 16:04
mysql:mysql-connector-java	CVE-2022-21363	中危	8.0.27	8.0.28	mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2022-01-19 12:15 修改: 2022-05-27 14:50
io.grpc:grpc-protobuf	CVE-2023-32732	中危	1.27.1	1.53.0	gRPC: denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32732 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2023-06-09 11:15 修改: 2023-08-02 16:43
org.yaml:snakeyaml	CVE-2022-38749	中危	1.28	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38750	中危	1.28	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38751	中危	1.28	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38752	中危	1.28	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-41854	中危	1.28	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-11-11 13:15 修改: 2024-06-21 19:15
org.postgresql:postgresql	CVE-2022-26520	低危	42.2.25	42.3.3	postgresql-jdbc: Arbitrary File Write Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26520 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2022-03-10 17:47 修改: 2024-08-03 05:16
com.google.guava:guava	CVE-2020-8908	低危	30.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:9e75ac03dd8f83b0b1e3f199ba6030612c3455f660c37ab94982e4f480530428 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30