docker.io/webgoat/webgoat:latest linux/arm64

docker.io/webgoat/webgoat:latest - Trivy安全扫描结果 扫描时间: 2026-09-20 18:04 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:20 中危漏洞:102 高危漏洞:22 严重漏洞:4

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-20 18:04

docker.io/webgoat/webgoat:latest (ubuntu 24.04) (ubuntu)
低危漏洞:20 中危漏洞:88 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
binutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

binutils-aarch64-linux-gnu CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-aarch64-linux-gnu CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-aarch64-linux-gnu CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-aarch64-linux-gnu CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils-aarch64-linux-gnu CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils-aarch64-linux-gnu CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-aarch64-linux-gnu CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils-common CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils-common CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils-common CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libbinutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libbinutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libbinutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.9 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc6 CVE-2026-18374 中危 2.39-0ubuntu8.9 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libctf-nobfd0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf-nobfd0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libctf0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libctf0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libctf0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libexpat1 CVE-2025-59375 中危 2.6.1-2ubuntu0.4 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46

libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

libexpat1 CVE-2026-32776 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32777 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32778 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-41080 中危 2.6.1-2ubuntu0.4 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18

libexpat1 CVE-2026-45186 中危 2.6.1-2ubuntu0.4 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-05-10 07:16 修改: 2026-09-16 13:17

libexpat1 CVE-2026-50219 中危 2.6.1-2ubuntu0.4 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10

libexpat1 CVE-2026-56131 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56132 中危 2.6.1-2ubuntu0.4 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56403 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56404 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56405 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14

libexpat1 CVE-2026-56406 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29

libexpat1 CVE-2026-56407 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28

libexpat1 CVE-2026-56408 中危 2.6.1-2ubuntu0.4 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27

libexpat1 CVE-2026-56409 中危 2.6.1-2ubuntu0.4 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21

libexpat1 CVE-2026-56410 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18

libexpat1 CVE-2026-56411 中危 2.6.1-2ubuntu0.4 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16

libexpat1 CVE-2026-56412 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31

libexpat1 CVE-2026-66046 中危 2.6.1-2ubuntu0.4 expat: Expat: Denial of Service via quadratic complexity in attribute processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-08-18 15:16 修改: 2026-09-18 15:07

libexpat1 CVE-2026-72522 中危 2.6.1-2ubuntu0.4 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33

libexpat1 CVE-2026-76641 中危 2.6.1-2ubuntu0.4 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17

libexpat1 CVE-2026-76957 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56

libgprofng0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libgprofng0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

libsframe1 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libsframe1 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libsframe1 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libsframe1 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libsframe1 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

libsframe1 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

libsframe1 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

locales CVE-2026-18374 中危 2.39-0ubuntu8.9 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

perl-base CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

perl-base CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17

tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17

zlib1g CVE-2026-85091 中危 1:1.3.dfsg-3.1ubuntu2.2 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41

libgprofng0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

binutils-aarch64-linux-gnu CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

libbinutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

libbinutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

libctf0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

libctf0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

binutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

libctf-nobfd0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

libsframe1 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

libsframe1 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libctf-nobfd0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

binutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

binutils-aarch64-linux-gnu CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

binutils-common CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

binutils-common CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

libgprofng0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9a4fd1e15dac3b6a9b4b9b8767837b1e83bf6b3d02e4887ad761fd5e5e66beec

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05

Java (jar)
低危漏洞:0 中危漏洞:14 高危漏洞:22 严重漏洞:4
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.thoughtworks.xstream:xstream CVE-2013-7285 严重 1.4.5 1.4.7, 1.4.11 XStream: remote code execution due to insecure XML deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7285

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2019-05-15 17:29 修改: 2025-05-23 16:54

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65182 严重 11.0.24 11.0.25, 10.1.58, 9.0.121 Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65905 严重 11.0.24 11.0.25, 10.1.58, 9.0.121 tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-68525 严重 11.0.24 11.0.25, 10.1.58, 9.0.121 org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15

com.thoughtworks.xstream:xstream CVE-2021-21341 高危 1.4.5 1.4.16 XStream: allow a remote attacker to cause DoS only by manipulating the processed input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21341

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-29505 高危 1.4.5 1.4.17 XStream: remote command execution attack by manipulating the processed input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29505

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-05-28 21:15 修改: 2026-06-17 03:47

com.thoughtworks.xstream:xstream CVE-2021-39139 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39139

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39141 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.xml.internal.ws.client.sei.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39141

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39144 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39144

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39145 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39145

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39146 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39146

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39147 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapSearchEnumeration

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39147

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39148 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.toolkit.dir.ContextEnumerator

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39148

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39149 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.corba.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39149

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39150 高危 1.4.5 1.4.18 xstream: Server-side request forgery (SSRF) via unsafe deserialization of com.sun.xml.internal.ws.client.sei.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39150

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 19:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39151 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39151

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39152 高危 1.4.5 1.4.18 xstream: Server-side request forgery (SSRF) via unsafe deserialization of jdk.nashorn.internal.runtime.Source$URLData

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39152

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 19:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39153 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39153

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-39154 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39154

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03

com.thoughtworks.xstream:xstream CVE-2021-43859 高危 1.4.5 1.4.19 xstream: Injecting highly recursive collections or maps can cause a DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43859

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2022-02-01 12:15 修改: 2026-06-17 04:11

com.thoughtworks.xstream:xstream CVE-2022-40151 高危 1.4.5 1.4.20 xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40151

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01

com.thoughtworks.xstream:xstream CVE-2022-41966 高危 1.4.5 1.4.20 xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41966

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2022-12-28 00:15 修改: 2026-06-17 05:04

com.thoughtworks.xstream:xstream CVE-2024-47072 高危 1.4.5 1.4.21 com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2024-11-08 00:15 修改: 2026-06-17 07:56

com.thoughtworks.xstream:xstream CVE-2016-3674 高危 1.4.5 1.4.9 XStream: enabled processing of external entities

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3674

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2016-05-17 14:08 修改: 2026-06-17 00:46

com.thoughtworks.xstream:xstream CVE-2017-7957 高危 1.4.5 1.4.10 XStream: DoS when unmarshalling void type

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7957

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2017-04-29 19:59 修改: 2026-06-17 01:25

com.thoughtworks.xstream:xstream CVE-2020-26217 高危 1.4.5 1.4.14-java7 XStream: remote code execution due to insecure XML deserialization when relying on blocklists

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26217

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2020-11-16 21:15 修改: 2026-06-17 03:07

com.thoughtworks.xstream:xstream CVE-2021-21343 中危 1.4.5 1.4.16 XStream: arbitrary file deletion on the local host via crafted input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21343

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-21344 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21344

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-21345 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21345

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-21346 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21346

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-21347 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21347

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-21348 中危 1.4.5 1.4.16 XStream: ReDoS vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21348

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-21349 中危 1.4.5 1.4.16 XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21349

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-21350 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21350

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-21351 中危 1.4.5 1.4.16 XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21351

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

com.thoughtworks.xstream:xstream CVE-2021-39140 中危 1.4.5 1.4.18 xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39140

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-08-23 19:15 修改: 2026-06-17 04:03

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.14.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

com.thoughtworks.xstream:xstream CVE-2020-26258 中危 1.4.5 1.4.15 XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26258

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2020-12-16 01:15 修改: 2026-06-17 03:07

com.thoughtworks.xstream:xstream CVE-2020-26259 中危 1.4.5 1.4.15 XStream: arbitrary file deletion on the local host when unmarshalling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26259

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2020-12-16 01:15 修改: 2026-06-17 03:07

com.thoughtworks.xstream:xstream CVE-2021-21342 中危 1.4.5 1.4.16 XStream: SSRF via crafted input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21342

镜像层: sha256:abb227bffe9eedd301077688d5f989d7aa67d75c6c26c8d7897b631473015655

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×