| mariadb-client |
CVE-2026-44170 |
严重 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44170
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| mariadb-client |
CVE-2026-44172 |
严重 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44172
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-07-30 12:18
|
| mariadb-common |
CVE-2026-44170 |
严重 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44170
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| mariadb-common |
CVE-2026-44172 |
严重 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44172
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-07-30 12:18
|
| mysql-client |
CVE-2026-44170 |
严重 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44170
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| mysql-client |
CVE-2026-44172 |
严重 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44172
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-07-30 12:18
|
| libcurl |
CVE-2026-6276 |
高危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
|
| libpq |
CVE-2026-14662 |
高危 |
18.3-r0 |
18.5-r0 |
postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14662
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:54
|
| libpq |
CVE-2026-14669 |
高危 |
18.3-r0 |
18.5-r0 |
postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14669
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:56
|
| libpq |
CVE-2026-14676 |
高危 |
18.3-r0 |
18.5-r0 |
postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14676
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:14
|
| libpq |
CVE-2026-6473 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6473
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-08-25 13:19
|
| libpq |
CVE-2026-6476 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6476
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| libpq |
CVE-2026-6477 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6477
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-08-25 13:19
|
| libpq |
CVE-2026-6478 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6478
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-08-25 13:19
|
| libpq |
CVE-2026-6479 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6479
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| libpq |
CVE-2026-6637 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6637
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:01
|
| libpq |
CVE-2026-6638 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6638
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:01
|
| libssl3 |
CVE-2026-14456 |
高危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-45447 |
高危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-08-25 13:19
|
| c-ares |
CVE-2026-33630 |
高危 |
1.34.6-r0 |
1.34.8-r0 |
c-ares: c-ares: Use-after-free / double-free in query-completion handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| curl |
CVE-2026-5773 |
高危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
|
| mariadb-client |
CVE-2026-44168 |
高危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44168
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| mariadb-client |
CVE-2026-44171 |
高危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: mbstream: Unauthorized file creation via path traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44171
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-06-17 10:50
|
| mariadb-client |
CVE-2026-48163 |
高危 |
11.4.10-r0 |
11.4.12-r0 |
mariadb: Arbitrary code execution via improper parameter validation during SST
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48163
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| mariadb-client |
CVE-2026-48165 |
高危 |
11.4.10-r0 |
11.4.12-r0 |
mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48165
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| curl |
CVE-2026-6276 |
高危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
|
| libcrypto3 |
CVE-2026-14456 |
高危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
|
| mariadb-common |
CVE-2026-44168 |
高危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44168
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| mariadb-common |
CVE-2026-44171 |
高危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: mbstream: Unauthorized file creation via path traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44171
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-06-17 10:50
|
| mariadb-common |
CVE-2026-48163 |
高危 |
11.4.10-r0 |
11.4.12-r0 |
mariadb: Arbitrary code execution via improper parameter validation during SST
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48163
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| mariadb-common |
CVE-2026-48165 |
高危 |
11.4.10-r0 |
11.4.12-r0 |
mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48165
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| libcrypto3 |
CVE-2026-45447 |
高危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-08-25 13:19
|
| libcurl |
CVE-2026-5773 |
高危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
|
| mysql-client |
CVE-2026-44168 |
高危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44168
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| mysql-client |
CVE-2026-44171 |
高危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: mbstream: Unauthorized file creation via path traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44171
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-06-17 10:50
|
| mysql-client |
CVE-2026-48163 |
高危 |
11.4.10-r0 |
11.4.12-r0 |
mariadb: Arbitrary code execution via improper parameter validation during SST
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48163
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| mysql-client |
CVE-2026-48165 |
高危 |
11.4.10-r0 |
11.4.12-r0 |
mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48165
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| postgresql18-client |
CVE-2026-14662 |
高危 |
18.3-r0 |
18.5-r0 |
postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14662
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:54
|
| postgresql18-client |
CVE-2026-14669 |
高危 |
18.3-r0 |
18.5-r0 |
postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14669
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:56
|
| postgresql18-client |
CVE-2026-14676 |
高危 |
18.3-r0 |
18.5-r0 |
postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14676
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:14
|
| postgresql18-client |
CVE-2026-6473 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6473
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-08-25 13:19
|
| postgresql18-client |
CVE-2026-6476 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6476
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| postgresql18-client |
CVE-2026-6477 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6477
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-08-25 13:19
|
| postgresql18-client |
CVE-2026-6478 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6478
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-08-25 13:19
|
| postgresql18-client |
CVE-2026-6479 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6479
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| postgresql18-client |
CVE-2026-6637 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6637
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:01
|
| postgresql18-client |
CVE-2026-6638 |
高危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6638
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:01
|
| libpq |
CVE-2026-14664 |
中危 |
18.3-r0 |
18.5-r0 |
Heap buffer overflow in PostgreSQL regexp allows the query author to e ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14664
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:55
|
| libpq |
CVE-2026-14666 |
中危 |
18.3-r0 |
18.5-r0 |
Incomplete tracking in PostgreSQL of changes to role membership, role ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14666
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:56
|
| libpq |
CVE-2026-14668 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion regarding input of PostgreSQL ctid data type selectivit ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14668
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:56
|
| libpq |
CVE-2026-14670 |
中危 |
18.3-r0 |
18.5-r0 |
Heap buffer overflow in PostgreSQL plperl return of a tied hash allows ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14670
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:57
|
| libpq |
CVE-2026-14671 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion in PostgreSQL module "refint" allows an object creator ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14671
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:57
|
| libpq |
CVE-2026-14672 |
中危 |
18.3-r0 |
18.5-r0 |
Observable response discrepancy in PostgreSQL SCRAM authentication all ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14672
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:57
|
| libpq |
CVE-2026-14673 |
中危 |
18.3-r0 |
18.5-r0 |
Untrusted search path in PostgreSQL amcheck allows a grantee of amchec ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14673
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:14
|
| libpq |
CVE-2026-14677 |
中危 |
18.3-r0 |
18.5-r0 |
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl all ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14677
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:15
|
| libpq |
CVE-2026-14678 |
中危 |
18.3-r0 |
18.5-r0 |
Buffer over-read in PostgreSQL pg_trgm index picksplit function reads ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14678
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:15
|
| libpq |
CVE-2026-14679 |
中危 |
18.3-r0 |
18.5-r0 |
Stack buffer overflow in PostgreSQL argument name matching allows an o ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14679
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:15
|
| libpq |
CVE-2026-14680 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion with PostgreSQL "internal" data type arguments allows a ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14680
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:16
|
| libpq |
CVE-2026-15741 |
中危 |
18.3-r0 |
18.5-r0 |
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner t ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15741
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:58
|
| libpq |
CVE-2026-15742 |
中危 |
18.3-r0 |
18.5-r0 |
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15742
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:58
|
| libpq |
CVE-2026-16238 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion in PostgreSQL pg_restore_attribute_stats() allows an ob ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16238
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:59
|
| libpq |
CVE-2026-16239 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user t ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16239
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:00
|
| libpq |
CVE-2026-16241 |
中危 |
18.3-r0 |
18.5-r0 |
Integer underflow in PostgreSQL ECPG allows a database server administ ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16241
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:00
|
| libpq |
CVE-2026-18024 |
中危 |
18.3-r0 |
18.5-r0 |
Buffer over-read in PostgreSQL ascii() SQL function allows a user to d ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18024
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:00
|
| libpq |
CVE-2026-18408 |
中危 |
18.3-r0 |
18.5-r0 |
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious s ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18408
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:00
|
| libpq |
CVE-2026-19385 |
中危 |
18.3-r0 |
18.5-r0 |
Heap buffer overflow in PostgreSQL pg_dump of long function transform ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19385
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:01
|
| libpq |
CVE-2026-6464 |
中危 |
18.3-r0 |
18.5-r0 |
Untrusted data inclusion in PostgreSQL psql COPY may allow a server ad ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6464
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:19 修改: 2026-08-19 15:01
|
| libpq |
CVE-2026-6469 |
中危 |
18.3-r0 |
18.5-r0 |
Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE co ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6469
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:19 修改: 2026-08-19 15:01
|
| libpq |
CVE-2026-6470 |
中危 |
18.3-r0 |
18.5-r0 |
Missing authorization in PostgreSQL DDL commands allows an object crea ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6470
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:19 修改: 2026-08-19 15:02
|
| libpq |
CVE-2026-6471 |
中危 |
18.3-r0 |
18.5-r0 |
Missing authorization in PostgreSQL logical decoding allows a non-supe ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6471
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:19 修改: 2026-08-19 01:13
|
| libpq |
CVE-2026-6472 |
中危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6472
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| libpq |
CVE-2026-6474 |
中危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Information disclosure via externally-controlled format string in timeofday() function
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6474
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| libpq |
CVE-2026-6475 |
中危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6475
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| libpq |
CVE-2026-6575 |
中危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_restore_attribute_stats()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6575
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:01
|
| libcrypto3 |
CVE-2026-34182 |
中危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-34183 |
中危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-18798 |
中危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: QUIC server may trigger double free when processing INITIAL packet
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-34182 |
中危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-34183 |
中危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42764 |
中危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: NULL pointer dereference in QUIC server initial packet handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-45445 |
中危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-63072 |
中危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: heap buffer overflow in CMS key unwrapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-63076 |
中危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: invalid pointer dereference in CMP server via crafted protectionAlg
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-42764 |
中危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: NULL pointer dereference in QUIC server initial packet handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-45445 |
中危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-63072 |
中危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: heap buffer overflow in CMS key unwrapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-63076 |
中危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: invalid pointer dereference in CMP server via crafted protectionAlg
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| curl |
CVE-2026-3783 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
|
| curl |
CVE-2026-3784 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Unauthorized access due to improper HTTP proxy connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
|
| mariadb-client |
CVE-2026-44169 |
中危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44169
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-06-17 16:24
|
| mariadb-client |
CVE-2026-44173 |
中危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44173
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| libcurl |
CVE-2025-14017 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
|
| libcurl |
CVE-2026-1965 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
|
| libcurl |
CVE-2026-3783 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
|
| libcurl |
CVE-2026-3784 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Unauthorized access due to improper HTTP proxy connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
|
| libcurl |
CVE-2026-3805 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
|
| libcurl |
CVE-2026-4873 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: curl: Information disclosure due to incorrect TLS connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
|
| mariadb-common |
CVE-2026-44169 |
中危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44169
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-06-17 16:24
|
| mariadb-common |
CVE-2026-44173 |
中危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44173
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| libcurl |
CVE-2026-5545 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
|
| libcurl |
CVE-2026-6253 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
|
| libcurl |
CVE-2026-6429 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Credential leak via reused proxy connection during HTTP redirects
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
|
| libcurl |
CVE-2026-7009 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: Curl: Certificate validation bypass due to OCSP stapling flaw
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7009
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
|
| libcurl |
CVE-2026-7168 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
|
| curl |
CVE-2026-3805 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
|
| mysql-client |
CVE-2026-44169 |
中危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44169
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-06-17 16:24
|
| mysql-client |
CVE-2026-44173 |
中危 |
11.4.10-r0 |
11.4.11-r0 |
mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44173
镜像层: sha256:1968182809f89a5f12dd2966975d685871b5bccf772ac1f1efc4be0656692f58
发布日期: 2026-06-12 18:16 修改: 2026-08-03 13:18
|
| curl |
CVE-2026-4873 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: curl: Information disclosure due to incorrect TLS connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
|
| curl |
CVE-2026-5545 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
|
| curl |
CVE-2026-6253 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
|
| curl |
CVE-2026-6429 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Credential leak via reused proxy connection during HTTP redirects
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
|
| curl |
CVE-2026-7009 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: Curl: Certificate validation bypass due to OCSP stapling flaw
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7009
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
|
| curl |
CVE-2026-7168 |
中危 |
8.17.0-r1 |
8.20.0-r0 |
curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
|
| curl |
CVE-2025-14017 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
|
| curl |
CVE-2026-1965 |
中危 |
8.17.0-r1 |
8.19.0-r0 |
curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
|
| libcrypto3 |
CVE-2026-18798 |
中危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: QUIC server may trigger double free when processing INITIAL packet
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
|
| libpq |
CVE-2026-14663 |
中危 |
18.3-r0 |
18.5-r0 |
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a use ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14663
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:54
|
| postgresql18-client |
CVE-2026-14663 |
中危 |
18.3-r0 |
18.5-r0 |
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a use ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14663
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:54
|
| postgresql18-client |
CVE-2026-14664 |
中危 |
18.3-r0 |
18.5-r0 |
Heap buffer overflow in PostgreSQL regexp allows the query author to e ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14664
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:55
|
| postgresql18-client |
CVE-2026-14666 |
中危 |
18.3-r0 |
18.5-r0 |
Incomplete tracking in PostgreSQL of changes to role membership, role ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14666
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:56
|
| postgresql18-client |
CVE-2026-14668 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion regarding input of PostgreSQL ctid data type selectivit ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14668
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:56
|
| postgresql18-client |
CVE-2026-14670 |
中危 |
18.3-r0 |
18.5-r0 |
Heap buffer overflow in PostgreSQL plperl return of a tied hash allows ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14670
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:57
|
| postgresql18-client |
CVE-2026-14671 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion in PostgreSQL module "refint" allows an object creator ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14671
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:57
|
| postgresql18-client |
CVE-2026-14672 |
中危 |
18.3-r0 |
18.5-r0 |
Observable response discrepancy in PostgreSQL SCRAM authentication all ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14672
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:57
|
| postgresql18-client |
CVE-2026-14673 |
中危 |
18.3-r0 |
18.5-r0 |
Untrusted search path in PostgreSQL amcheck allows a grantee of amchec ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14673
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:14
|
| postgresql18-client |
CVE-2026-14677 |
中危 |
18.3-r0 |
18.5-r0 |
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl all ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14677
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:15
|
| postgresql18-client |
CVE-2026-14678 |
中危 |
18.3-r0 |
18.5-r0 |
Buffer over-read in PostgreSQL pg_trgm index picksplit function reads ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14678
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:15
|
| postgresql18-client |
CVE-2026-14679 |
中危 |
18.3-r0 |
18.5-r0 |
Stack buffer overflow in PostgreSQL argument name matching allows an o ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14679
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:15
|
| postgresql18-client |
CVE-2026-14680 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion with PostgreSQL "internal" data type arguments allows a ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14680
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 01:16
|
| postgresql18-client |
CVE-2026-15741 |
中危 |
18.3-r0 |
18.5-r0 |
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner t ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15741
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:58
|
| postgresql18-client |
CVE-2026-15742 |
中危 |
18.3-r0 |
18.5-r0 |
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15742
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:58
|
| postgresql18-client |
CVE-2026-16238 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion in PostgreSQL pg_restore_attribute_stats() allows an ob ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16238
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 14:59
|
| postgresql18-client |
CVE-2026-16239 |
中危 |
18.3-r0 |
18.5-r0 |
Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user t ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16239
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:00
|
| postgresql18-client |
CVE-2026-16241 |
中危 |
18.3-r0 |
18.5-r0 |
Integer underflow in PostgreSQL ECPG allows a database server administ ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16241
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:00
|
| postgresql18-client |
CVE-2026-18024 |
中危 |
18.3-r0 |
18.5-r0 |
Buffer over-read in PostgreSQL ascii() SQL function allows a user to d ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18024
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:00
|
| postgresql18-client |
CVE-2026-18408 |
中危 |
18.3-r0 |
18.5-r0 |
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious s ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18408
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:00
|
| postgresql18-client |
CVE-2026-19385 |
中危 |
18.3-r0 |
18.5-r0 |
Heap buffer overflow in PostgreSQL pg_dump of long function transform ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19385
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:17 修改: 2026-08-19 15:01
|
| postgresql18-client |
CVE-2026-6464 |
中危 |
18.3-r0 |
18.5-r0 |
Untrusted data inclusion in PostgreSQL psql COPY may allow a server ad ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6464
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:19 修改: 2026-08-19 15:01
|
| postgresql18-client |
CVE-2026-6469 |
中危 |
18.3-r0 |
18.5-r0 |
Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE co ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6469
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:19 修改: 2026-08-19 15:01
|
| postgresql18-client |
CVE-2026-6470 |
中危 |
18.3-r0 |
18.5-r0 |
Missing authorization in PostgreSQL DDL commands allows an object crea ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6470
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:19 修改: 2026-08-19 15:02
|
| postgresql18-client |
CVE-2026-6471 |
中危 |
18.3-r0 |
18.5-r0 |
Missing authorization in PostgreSQL logical decoding allows a non-supe ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6471
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-08-13 13:19 修改: 2026-08-19 01:13
|
| postgresql18-client |
CVE-2026-6472 |
中危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6472
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| postgresql18-client |
CVE-2026-6474 |
中危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Information disclosure via externally-controlled format string in timeofday() function
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6474
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| postgresql18-client |
CVE-2026-6475 |
中危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6475
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
|
| postgresql18-client |
CVE-2026-6575 |
中危 |
18.3-r0 |
18.4-r0 |
postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_restore_attribute_stats()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6575
镜像层: sha256:575347c002ee6e48b879a1657034cf5b1a8b445be9d0193930b7a382f2663d9d
发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:01
|
| libssl3 |
CVE-2026-42769 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42770 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-45446 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-54874 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: excessive memory use buffering DTLS records for a future epoch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-63073 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: untrusted sender DN used as format string in CMP response validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-63074 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: CMP indefinite cache growth of ExtraCerts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-63075 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: QUIC ACK-only packet retention can cause memory exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-7383 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-75803 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-9076 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-14457 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: RPK server signature algorithm selection can dereference a missing certificate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-34180 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-34181 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42766 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Possible NULL Dereference in Password-Based CMS Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42767 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42768 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42769 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42770 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-45446 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-54874 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: excessive memory use buffering DTLS records for a future epoch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-63073 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: untrusted sender DN used as format string in CMP response validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libcurl |
CVE-2025-14524 |
低危 |
8.17.0-r1 |
8.19.0-r0 |
curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
|
| libcurl |
CVE-2025-14819 |
低危 |
8.17.0-r1 |
8.19.0-r0 |
curl: libcurl: Improper certificate validation due to cached TLS settings reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
|
| libcrypto3 |
CVE-2026-63074 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: CMP indefinite cache growth of ExtraCerts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-63075 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: QUIC ACK-only packet retention can cause memory exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-7383 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-75803 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-9076 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| curl |
CVE-2025-14819 |
低危 |
8.17.0-r1 |
8.19.0-r0 |
curl: libcurl: Improper certificate validation due to cached TLS settings reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
|
| curl |
CVE-2025-14524 |
低危 |
8.17.0-r1 |
8.19.0-r0 |
curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524
镜像层: sha256:1568584983f34903508d529c00da1320badb44becae5efeab17672bcb5402b47
发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
|
| libssl3 |
CVE-2026-14457 |
低危 |
3.5.6-r0 |
3.5.8-r0 |
openssl: RPK server signature algorithm selection can dereference a missing certificate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-34180 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-34181 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42766 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Possible NULL Dereference in Password-Based CMS Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42767 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42768 |
低危 |
3.5.6-r0 |
3.5.7-r0 |
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768
镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|