docker.io/zhusaidong/nacos-server-m1:2.0.3 linux/arm64

docker.io/zhusaidong/nacos-server-m1:2.0.3 - Trivy安全扫描结果 扫描时间: 2026-07-23 09:58 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:814 中危漏洞:1343 高危漏洞:323 严重漏洞:23

系统OS: centos 8.3.2011 扫描引擎: Trivy 扫描时间: 2026-07-23 09:58

docker.io/zhusaidong/nacos-server-m1:2.0.3 (centos 8.3.2011) (centos)
低危漏洞:799 中危漏洞:1251 高危漏洞:234 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
nss CVE-2021-43527 严重 3.53.1-17.el8_3 3.67.0-7.el8_5 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-08 22:15 修改: 2026-06-17 04:11

nss-softokn CVE-2021-43527 严重 3.53.1-17.el8_3 3.67.0-7.el8_5 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-08 22:15 修改: 2026-06-17 04:11

nss-softokn-freebl CVE-2021-43527 严重 3.53.1-17.el8_3 3.67.0-7.el8_5 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-08 22:15 修改: 2026-06-17 04:11

nss-sysinit CVE-2021-43527 严重 3.53.1-17.el8_3 3.67.0-7.el8_5 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-08 22:15 修改: 2026-06-17 04:11

nss-util CVE-2021-43527 严重 3.53.1-17.el8_3 3.67.0-7.el8_5 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-08 22:15 修改: 2026-06-17 04:11

bind-export-libs CVE-2023-4408 高危 32:9.11.26-4.el8_4 32:9.11.36-14.el8_10 bind9: Parsing large DNS messages may cause excessive CPU load

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4408

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-13 14:15 修改: 2026-06-17 06:37

bind-export-libs CVE-2023-50387 高危 32:9.11.26-4.el8_4 32:9.11.36-14.el8_10 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39

bind-export-libs CVE-2023-50868 高危 32:9.11.26-4.el8_4 32:9.11.36-14.el8_10 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40

bind-export-libs CVE-2024-11187 高危 32:9.11.26-4.el8_4 32:9.11.36-16.el8_10.4 bind: bind9: Many records in the additional section cause CPU exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11187

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-29 22:15 修改: 2026-06-17 06:57

bind-export-libs CVE-2024-1737 高危 32:9.11.26-4.el8_4 32:9.11.36-16.el8_10.2 bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1737

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-23 15:15 修改: 2026-06-17 07:04

bind-export-libs CVE-2024-1975 高危 32:9.11.26-4.el8_4 32:9.11.36-16.el8_10.2 bind9: bind: SIG(0) can be used to exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1975

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-23 15:15 修改: 2026-06-17 07:05

bind-export-libs CVE-2025-40778 高危 32:9.11.26-4.el8_4 32:9.11.36-16.el8_10.6 bind: Cache poisoning attacks with unsolicited RRs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40778

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-22 16:15 修改: 2026-06-17 09:22

bind-export-libs CVE-2026-1519 高危 32:9.11.26-4.el8_4 32:9.11.36-16.el8_10.7 bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1519

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-25 14:16 修改: 2026-07-20 12:17

bind-export-libs CVE-2026-3039 高危 32:9.11.26-4.el8_4 32:9.11.36-16.el8_10.8 bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3039

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 13:16 修改: 2026-07-15 02:20

bind-export-libs CVE-2026-5946 高危 32:9.11.26-4.el8_4 32:9.11.36-16.el8_10.8 bind: BIND: Denial of Service via specially crafted DNS messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5946

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 13:16 修改: 2026-07-15 01:16

cups-libs CVE-2022-26691 高危 1:2.2.6-38.el8 1:2.2.6-45.el8_6.2 cups: authorization bypass when using "local" authorization

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26691

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-26 18:15 修改: 2026-06-17 04:35

cups-libs CVE-2023-32360 高危 1:2.2.6-38.el8 1:2.2.6-51.el8_8.1 cups: Information leak through Cups-Get-Document operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32360

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-23 18:15 修改: 2026-06-17 05:58

cups-libs CVE-2025-58060 高危 1:2.2.6-38.el8 1:2.2.6-63.el8_10 cups: Authentication Bypass in CUPS Authorization Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58060

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-11 18:15 修改: 2026-06-17 09:43

curl CVE-2026-11352 高危 7.61.1-18.el8 curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01

curl CVE-2026-11586 高危 7.61.1-18.el8 curl: curl: Denial of Service via WebSocket PING flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59

curl CVE-2026-12064 高危 7.61.1-18.el8 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

curl CVE-2026-8286 高危 7.61.1-18.el8 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

curl CVE-2026-8925 高危 7.61.1-18.el8 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04

curl CVE-2026-9547 高危 7.61.1-18.el8 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52

cyrus-sasl-lib CVE-2022-24407 高危 2.1.27-5.el8 2.1.27-6.el8_5 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31

dracut CVE-2026-16445 高危 049-135.git20210121.el8 049-244.git20260529.el8_10 dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-21 13:17 修改: 2026-07-21 18:31

dracut CVE-2026-6893 高危 049-135.git20210121.el8 049-244.git20260529.el8_10 dracut: dracut: Root code execution via DHCP options command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6893

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-10 20:17 修改: 2026-07-15 01:16

dracut-network CVE-2026-16445 高危 049-135.git20210121.el8 049-244.git20260529.el8_10 dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-21 13:17 修改: 2026-07-21 18:31

dracut-network CVE-2026-6893 高危 049-135.git20210121.el8 049-244.git20260529.el8_10 dracut: dracut: Root code execution via DHCP options command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6893

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-10 20:17 修改: 2026-07-15 01:16

dracut-squash CVE-2026-16445 高危 049-135.git20210121.el8 049-244.git20260529.el8_10 dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-21 13:17 修改: 2026-07-21 18:31

dracut-squash CVE-2026-6893 高危 049-135.git20210121.el8 049-244.git20260529.el8_10 dracut: dracut: Root code execution via DHCP options command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6893

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-10 20:17 修改: 2026-07-15 01:16

expat CVE-2022-22822 高危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Integer overflow in addBinding in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

expat CVE-2022-22823 高危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Integer overflow in build_model in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

expat CVE-2022-22824 高危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Integer overflow in defineAttribute in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

expat CVE-2022-25235 高危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

expat CVE-2022-25236 高危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

expat CVE-2022-25315 高危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Integer overflow in storeRawNames()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

expat CVE-2022-40674 高危 2.2.5-4.el8 2.2.5-8.el8_6.3 expat: a use-after-free in the doContent function in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-09-14 11:15 修改: 2026-06-17 05:01

expat CVE-2025-59375 高危 2.2.5-4.el8 2.5.0-1.el8_10 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46

expat CVE-2026-45186 高危 2.2.5-4.el8 2.5.0-2.el8_10 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-05-10 07:16 修改: 2026-07-15 02:22

freetype CVE-2025-27363 高危 2.9.1-4.el8_3.1 2.9.1-10.el8_10 freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27363

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-03-11 14:15 修改: 2026-06-17 09:03

gdk-pixbuf2 CVE-2026-5201 高危 2.36.12-5.el8 2.36.12-8.el8_10 gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5201

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-31 09:16 修改: 2026-07-15 01:16

gdk-pixbuf2-modules CVE-2026-5201 高危 2.36.12-5.el8 2.36.12-8.el8_10 gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5201

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-31 09:16 修改: 2026-07-15 01:16

giflib CVE-2026-23868 高危 5.1.4-3.el8 5.1.4-4.el8_10 giflib: Giflib: Double-free vulnerability leading to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23868

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-10 20:16 修改: 2026-07-15 02:18

giflib CVE-2026-26740 高危 5.1.4-3.el8 5.1.4-5.el8_10 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26740

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-18 18:16 修改: 2026-07-15 02:19

glib2 CVE-2026-58016 高危 2.56.4-10.el8_4 2.56.4-170.el8_10 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-30 13:19 修改: 2026-07-21 04:16

glibc CVE-2023-4911 高危 2.28-151.el8 2.28-225.el8_8.6 glibc: buffer overflow in ld.so leading to privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-03 18:15 修改: 2026-06-17 06:38

glibc CVE-2024-2961 高危 2.28-151.el8 2.28-251.el8_10.1 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25

glibc CVE-2024-33599 高危 2.28-151.el8 2.28-251.el8_10.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-common CVE-2023-4911 高危 2.28-151.el8 2.28-225.el8_8.6 glibc: buffer overflow in ld.so leading to privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-03 18:15 修改: 2026-06-17 06:38

glibc-common CVE-2024-2961 高危 2.28-151.el8 2.28-251.el8_10.1 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25

glibc-common CVE-2024-33599 高危 2.28-151.el8 2.28-251.el8_10.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-langpack-en CVE-2023-4911 高危 2.28-151.el8 2.28-225.el8_8.6 glibc: buffer overflow in ld.so leading to privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-03 18:15 修改: 2026-06-17 06:38

glibc-langpack-en CVE-2024-2961 高危 2.28-151.el8 2.28-251.el8_10.1 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25

glibc-langpack-en CVE-2024-33599 高危 2.28-151.el8 2.28-251.el8_10.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-minimal-langpack CVE-2023-4911 高危 2.28-151.el8 2.28-225.el8_8.6 glibc: buffer overflow in ld.so leading to privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-03 18:15 修改: 2026-06-17 06:38

glibc-minimal-langpack CVE-2024-2961 高危 2.28-151.el8 2.28-251.el8_10.1 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25

glibc-minimal-langpack CVE-2024-33599 高危 2.28-151.el8 2.28-251.el8_10.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

gnupg2 CVE-2025-68973 高危 2.2.20-2.el8 2.2.20-4.el8_10 GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59

gnutls CVE-2026-33845 高危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-30 18:16 修改: 2026-07-20 12:18

gnutls CVE-2026-33846 高危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-04 10:15 修改: 2026-07-20 12:18

gnutls CVE-2026-42009 高危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-18 13:16 修改: 2026-07-20 12:19

gnutls CVE-2026-42010 高危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-07 12:16 修改: 2026-07-20 12:19

grub2-common CVE-2022-28733 高危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Integer underflow in grub_net_recv_ip4_packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28733

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-common CVE-2025-0624 高危 1:2.02-99.el8 1:2.02-162.el8_10 grub2: net: Out-of-bounds write in grub_net_search_config_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0624

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 19:15 修改: 2026-06-29 21:16

grub2-tools CVE-2022-28733 高危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Integer underflow in grub_net_recv_ip4_packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28733

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools CVE-2025-0624 高危 1:2.02-99.el8 1:2.02-162.el8_10 grub2: net: Out-of-bounds write in grub_net_search_config_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0624

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 19:15 修改: 2026-06-29 21:16

grub2-tools-minimal CVE-2022-28733 高危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Integer underflow in grub_net_recv_ip4_packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28733

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools-minimal CVE-2025-0624 高危 1:2.02-99.el8 1:2.02-162.el8_10 grub2: net: Out-of-bounds write in grub_net_search_config_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0624

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 19:15 修改: 2026-06-29 21:16

gzip CVE-2022-1271 高危 1.9-12.el8 1.9-13.el8_5 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

java-1.8.0-openjdk CVE-2021-35565 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35565

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2021-35567 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35567

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2022-21476 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21476

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-34169 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.342.b07-2.el8_6 OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34169

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-19 18:15 修改: 2026-06-17 04:49

java-1.8.0-openjdk CVE-2023-21930 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: improper connection handling during TLS handshake (8294474)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21930

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2024-20918 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20918

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-20952 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20952

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21147 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: RangeCheckElimination array index overflow (8323231)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21147

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2025-30749 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Better Glyph drawing (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30749

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk CVE-2025-50106 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50106

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34

java-1.8.0-openjdk CVE-2025-64720 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 libpng: LIBPNG buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

java-1.8.0-openjdk CVE-2025-65018 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 libpng: LIBPNG heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

java-1.8.0-openjdk CVE-2025-66293 高危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG out-of-bounds read in png_image_read_composite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56

java-1.8.0-openjdk CVE-2026-21945 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21945

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

java-1.8.0-openjdk CVE-2026-22016 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

java-1.8.0-openjdk CVE-2026-22020 高危 1:1.8.0.302.b08-0.el8_4 Important: java-17-openjdk security update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22020

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk CVE-2026-25646 高危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-10 18:16 修改: 2026-07-15 02:18

java-1.8.0-openjdk-devel CVE-2021-35565 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35565

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2021-35567 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35567

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2022-21476 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21476

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-34169 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.342.b07-2.el8_6 OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34169

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-19 18:15 修改: 2026-06-17 04:49

java-1.8.0-openjdk-devel CVE-2023-21930 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: improper connection handling during TLS handshake (8294474)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21930

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2024-20918 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20918

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-20952 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20952

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21147 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: RangeCheckElimination array index overflow (8323231)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21147

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2025-30749 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Better Glyph drawing (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30749

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-devel CVE-2025-50106 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50106

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34

java-1.8.0-openjdk-devel CVE-2025-64720 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 libpng: LIBPNG buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

java-1.8.0-openjdk-devel CVE-2025-65018 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 libpng: LIBPNG heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

java-1.8.0-openjdk-devel CVE-2025-66293 高危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG out-of-bounds read in png_image_read_composite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56

java-1.8.0-openjdk-devel CVE-2026-21945 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21945

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

java-1.8.0-openjdk-devel CVE-2026-22016 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

java-1.8.0-openjdk-devel CVE-2026-22020 高危 1:1.8.0.302.b08-0.el8_4 Important: java-17-openjdk security update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22020

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk-devel CVE-2026-25646 高危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-10 18:16 修改: 2026-07-15 02:18

java-1.8.0-openjdk-headless CVE-2021-35565 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35565

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2021-35567 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35567

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2022-21476 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21476

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-34169 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.342.b07-2.el8_6 OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34169

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-19 18:15 修改: 2026-06-17 04:49

java-1.8.0-openjdk-headless CVE-2023-21930 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: improper connection handling during TLS handshake (8294474)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21930

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2024-20918 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20918

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-20952 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20952

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21147 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: RangeCheckElimination array index overflow (8323231)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21147

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2025-30749 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Better Glyph drawing (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30749

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-headless CVE-2025-50106 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50106

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34

java-1.8.0-openjdk-headless CVE-2025-64720 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 libpng: LIBPNG buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

java-1.8.0-openjdk-headless CVE-2025-65018 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 libpng: LIBPNG heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

java-1.8.0-openjdk-headless CVE-2025-66293 高危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG out-of-bounds read in png_image_read_composite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56

java-1.8.0-openjdk-headless CVE-2026-21945 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21945

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

java-1.8.0-openjdk-headless CVE-2026-22016 高危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

java-1.8.0-openjdk-headless CVE-2026-22020 高危 1:1.8.0.302.b08-0.el8_4 Important: java-17-openjdk security update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22020

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk-headless CVE-2026-25646 高危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-10 18:16 修改: 2026-07-15 02:18

krb5-libs CVE-2022-42898 高危 1.18.2-8.el8 1.18.2-25.el8_8 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

krb5-libs CVE-2024-3596 高危 1.18.2-8.el8 1.18.2-30.el8_10 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44

less CVE-2024-32487 高危 530-1.el8 530-3.el8_10 less: OS command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32487

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-04-13 15:15 修改: 2026-06-17 07:29

libX11 CVE-2021-31535 高危 1.6.8-4.el8 1.6.8-5.el8 libX11: missing request length checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31535

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-27 13:15 修改: 2026-06-17 03:51

libX11-common CVE-2021-31535 高危 1.6.8-4.el8 1.6.8-5.el8 libX11: missing request length checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31535

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-27 13:15 修改: 2026-06-17 03:51

libacl CVE-2026-54369 高危 2.2.53-1.el8 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16

libarchive CVE-2025-5914 高危 3.3.3-1.el8 3.3.3-6.el8_10 libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5914

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-09 20:15 修改: 2026-07-21 00:16

libarchive CVE-2026-4424 高危 3.3.3-1.el8 3.3.3-7.el8_10 libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4424

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-19 15:16 修改: 2026-07-15 02:22

libcap CVE-2026-4878 高危 2.26-4.el8 2.48-6.el8_10.1 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-09 16:16 修改: 2026-07-21 12:18

libcurl-minimal CVE-2026-11352 高危 7.61.1-18.el8 curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01

libcurl-minimal CVE-2026-11586 高危 7.61.1-18.el8 curl: curl: Denial of Service via WebSocket PING flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59

libcurl-minimal CVE-2026-12064 高危 7.61.1-18.el8 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

libcurl-minimal CVE-2026-8286 高危 7.61.1-18.el8 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

libcurl-minimal CVE-2026-8925 高危 7.61.1-18.el8 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04

libcurl-minimal CVE-2026-9547 高危 7.61.1-18.el8 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52

libksba CVE-2022-3515 高危 1.3.5-7.el8 1.3.5-8.el8_6 libksba: integer overflow may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3515

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libksba CVE-2022-47629 高危 1.3.5-7.el8 1.3.5-9.el8_7 libksba: integer overflow to code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47629

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-12-20 23:15 修改: 2026-06-17 05:13

libnghttp2 CVE-2023-44487 高危 1.33.0-3.el8_2.1 1.33.0-5.el8_8 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27

libnghttp2 CVE-2026-27135 高危 1.33.0-3.el8_2.1 1.33.0-6.el8_10.2 nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-03-18 18:16 修改: 2026-07-15 02:19

libpng CVE-2025-64720 高危 2:1.6.34-5.el8 2:1.6.34-9.el8_10 libpng: LIBPNG buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

libpng CVE-2025-65018 高危 2:1.6.34-5.el8 2:1.6.34-9.el8_10 libpng: LIBPNG heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

libpng CVE-2025-66293 高危 2:1.6.34-5.el8 2:1.6.34-9.el8_10 libpng: LIBPNG out-of-bounds read in png_image_read_composite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56

libpng CVE-2026-22020 高危 2:1.6.34-5.el8 Important: java-17-openjdk security update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22020

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libpng CVE-2026-25646 高危 2:1.6.34-5.el8 2:1.6.34-10.el8_10 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-10 18:16 修改: 2026-07-15 02:18

libtiff CVE-2025-8176 高危 4.0.9-18.el8 4.0.9-36.el8_10 libtiff: LibTIFF Use-After-Free Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8176

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-26 04:16 修改: 2026-06-17 10:06

libtiff CVE-2025-9900 高危 4.0.9-18.el8 4.0.9-35.el8_10 libtiff: Libtiff Write-What-Where

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9900

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-23 17:15 修改: 2026-06-29 21:16

libtiff CVE-2026-12912 高危 4.0.9-18.el8 libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12912

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 17:16 修改: 2026-07-21 13:17

libtiff CVE-2026-4775 高危 4.0.9-18.el8 4.0.9-37.el8_10 libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4775

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-24 15:16 修改: 2026-07-15 02:22

libxml2 CVE-2024-56171 高危 2.9.7-9.el8_4.2 2.9.7-19.el8_10 libxml2: Use-After-Free in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56171

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 22:15 修改: 2026-06-17 08:11

libxml2 CVE-2025-24928 高危 2.9.7-9.el8_4.2 2.9.7-19.el8_10 libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24928

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 23:15 修改: 2026-06-17 08:59

libxml2 CVE-2025-49794 高危 2.9.7-9.el8_4.2 2.9.7-21.el8_10.1 libxml: Heap use after free (UAF) leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49794

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-16 16:15 修改: 2026-07-19 00:16

libxml2 CVE-2025-49796 高危 2.9.7-9.el8_4.2 2.9.7-21.el8_10.1 libxml: Type confusion leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49796

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-16 16:15 修改: 2026-07-19 00:16

libxml2 CVE-2025-7425 高危 2.9.7-9.el8_4.2 2.9.7-21.el8_10.2 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-10 14:15 修改: 2026-07-21 00:16

acl CVE-2026-54369 高危 2.2.53-1.el8 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16

nss CVE-2023-0767 高危 3.53.1-17.el8_3 3.79.0-11.el8_7 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-02 17:15 修改: 2026-06-17 05:26

bind-export-libs CVE-2022-38177 高危 32:9.11.26-4.el8_4 32:9.11.36-3.el8_6.1 bind: memory leak in ECDSA DNSSEC verification code

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38177

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-21 11:15 修改: 2026-06-17 04:56

nss-softokn CVE-2023-0767 高危 3.53.1-17.el8_3 3.79.0-11.el8_7 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-02 17:15 修改: 2026-06-17 05:26

bind-export-libs CVE-2022-38178 高危 32:9.11.26-4.el8_4 32:9.11.36-3.el8_6.1 bind: memory leaks in EdDSA DNSSEC verification code

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38178

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-21 11:15 修改: 2026-06-17 04:56

nss-softokn-freebl CVE-2023-0767 高危 3.53.1-17.el8_3 3.79.0-11.el8_7 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-02 17:15 修改: 2026-06-17 05:26

bind-export-libs CVE-2023-2828 高危 32:9.11.26-4.el8_4 32:9.11.36-8.el8_8.1 bind: named's configured cache size limit can be significantly exceeded

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2828

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-21 17:15 修改: 2026-06-17 05:53

nss-sysinit CVE-2023-0767 高危 3.53.1-17.el8_3 3.79.0-11.el8_7 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-02 17:15 修改: 2026-06-17 05:26

bind-export-libs CVE-2023-3341 高危 32:9.11.26-4.el8_4 32:9.11.36-8.el8_8.2 bind: stack exhaustion in control channel code may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3341

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-20 13:15 修改: 2026-06-17 06:13

nss-util CVE-2023-0767 高危 3.53.1-17.el8_3 3.79.0-11.el8_7 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-02 17:15 修改: 2026-06-17 05:26

openssl CVE-2022-0778 高危 1:1.1.1g-15.el8_3 1:1.1.1k-6.el8_5 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

openssl CVE-2023-0286 高危 1:1.1.1g-15.el8_3 1:1.1.1k-9.el8_7 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl CVE-2026-45447 高危 1:1.1.1g-15.el8_3 1:1.1.1k-16.el8_6 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-07-20 12:19

openssl-libs CVE-2022-0778 高危 1:1.1.1g-15.el8_3 1:1.1.1k-6.el8_5 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

openssl-libs CVE-2023-0286 高危 1:1.1.1g-15.el8_3 1:1.1.1k-9.el8_7 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl-libs CVE-2026-45447 高危 1:1.1.1g-15.el8_3 1:1.1.1k-16.el8_6 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-07-20 12:19

pam CVE-2024-10963 高危 1.3.1-14.el8 1.3.1-36.el8_10 pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-11-07 16:15 修改: 2026-06-17 06:56

pam CVE-2025-6020 高危 1.3.1-14.el8 1.3.1-38.el8_10 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-17 13:15 修改: 2026-07-20 11:16

pam CVE-2025-8941 高危 1.3.1-14.el8 1.3.1-38.el8_10 linux-pam: Incomplete fix for CVE-2025-6020

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8941

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-08-13 15:15 修改: 2026-06-17 10:07

platform-python CVE-2023-24329 高危 3.6.8-37.el8 3.6.8-51.el8_8.1 python: urllib.parse url blocklisting bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-17 15:15 修改: 2026-06-17 05:39

platform-python CVE-2023-40217 高危 3.6.8-37.el8 3.6.8-51.el8_8.2 python: TLS handshake bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-25 01:15 修改: 2026-06-17 06:16

platform-python CVE-2023-6597 高危 3.6.8-37.el8 3.6.8-62.el8_10 python: Path traversal on tempfile.TemporaryDirectory

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51

platform-python CVE-2024-12718 高危 3.6.8-37.el8 3.6.8-70.el8_10 cpython: python: Bypass extraction filter to modify file metadata outside extraction directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12718

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 07:00

platform-python CVE-2025-4138 高危 3.6.8-37.el8 3.6.8-70.el8_10 cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4138

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:32

platform-python CVE-2025-4517 高危 3.6.8-37.el8 3.6.8-70.el8_10 python: cpython: Arbitrary writes via tarfile realpath overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4517

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33

platform-python CVE-2026-15308 高危 3.6.8-37.el8 3.6.8-77.el8_10 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 17:16 修改: 2026-07-10 20:07

platform-python CVE-2026-4519 高危 3.6.8-37.el8 3.6.8-75.el8_10 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 15:16 修改: 2026-07-15 02:22

platform-python CVE-2026-4786 高危 3.6.8-37.el8 3.6.8-76.el8_10 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-13 22:16 修改: 2026-07-15 02:22

platform-python CVE-2026-6100 高危 3.6.8-37.el8 3.6.8-76.el8_10 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16

platform-python-setuptools CVE-2024-6345 高危 39.2.0-6.el8 39.2.0-8.el8_10 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-07-15 01:15 修改: 2026-06-17 08:17

python3-libs CVE-2023-24329 高危 3.6.8-37.el8 3.6.8-51.el8_8.1 python: urllib.parse url blocklisting bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-17 15:15 修改: 2026-06-17 05:39

python3-libs CVE-2023-40217 高危 3.6.8-37.el8 3.6.8-51.el8_8.2 python: TLS handshake bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-25 01:15 修改: 2026-06-17 06:16

python3-libs CVE-2023-6597 高危 3.6.8-37.el8 3.6.8-62.el8_10 python: Path traversal on tempfile.TemporaryDirectory

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51

python3-libs CVE-2024-12718 高危 3.6.8-37.el8 3.6.8-70.el8_10 cpython: python: Bypass extraction filter to modify file metadata outside extraction directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12718

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 07:00

python3-libs CVE-2025-4138 高危 3.6.8-37.el8 3.6.8-70.el8_10 cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4138

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:32

python3-libs CVE-2025-4517 高危 3.6.8-37.el8 3.6.8-70.el8_10 python: cpython: Arbitrary writes via tarfile realpath overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4517

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33

python3-libs CVE-2026-15308 高危 3.6.8-37.el8 3.6.8-77.el8_10 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 17:16 修改: 2026-07-10 20:07

python3-libs CVE-2026-4519 高危 3.6.8-37.el8 3.6.8-75.el8_10 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 15:16 修改: 2026-07-15 02:22

python3-libs CVE-2026-4786 高危 3.6.8-37.el8 3.6.8-76.el8_10 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-13 22:16 修改: 2026-07-15 02:22

python3-libs CVE-2026-6100 高危 3.6.8-37.el8 3.6.8-76.el8_10 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16

python3-setuptools-wheel CVE-2024-6345 高危 39.2.0-6.el8 39.2.0-8.el8_10 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-07-15 01:15 修改: 2026-06-17 08:17

python3-unbound CVE-2023-50387 高危 1.7.3-15.el8 1.16.2-5.el8_9.2 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39

python3-unbound CVE-2023-50868 高危 1.7.3-15.el8 1.16.2-5.el8_9.2 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40

python3-unbound CVE-2024-1488 高危 1.7.3-15.el8 1.16.2-5.8.el8_10 unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1488

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-15 05:15 修改: 2026-06-17 07:04

python3-unbound CVE-2025-5994 高危 1.7.3-15.el8 1.16.2-5.9.el8_10 unbound: Unbound Cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5994

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-16 15:15 修改: 2026-06-17 09:49

python3-unbound CVE-2026-41292 高危 1.7.3-15.el8 unbound: Unbound: Denial of Service via excessive EDNS options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41292

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-16 12:17

python3-unbound CVE-2026-42534 高危 1.7.3-15.el8 unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42534

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-16 12:17

python3-unbound CVE-2026-42944 高危 1.7.3-15.el8 1.16.2-5.11.el8_10 unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42944

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-15 02:21

python3-unbound CVE-2026-42959 高危 1.7.3-15.el8 1.16.2-5.11.el8_10 unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42959

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-15 02:21

python3-unbound CVE-2026-44390 高危 1.7.3-15.el8 unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44390

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-16 12:17

sqlite-libs CVE-2025-6965 高危 3.26.0-13.el8 3.26.0-20.el8_10 sqlite: Integer Truncation in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6965

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 14:15 修改: 2026-06-26 16:36

systemd CVE-2022-2526 高危 239-45.el8_4.2 239-58.el8_6.4 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-09 15:15 修改: 2026-06-17 04:42

systemd-libs CVE-2022-2526 高危 239-45.el8_4.2 239-58.el8_6.4 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-09 15:15 修改: 2026-06-17 04:42

systemd-pam CVE-2022-2526 高危 239-45.el8_4.2 239-58.el8_6.4 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-09 15:15 修改: 2026-06-17 04:42

systemd-udev CVE-2022-2526 高危 239-45.el8_4.2 239-58.el8_6.4 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-09 15:15 修改: 2026-06-17 04:42

unbound-libs CVE-2023-50387 高危 1.7.3-15.el8 1.16.2-5.el8_9.2 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39

unbound-libs CVE-2023-50868 高危 1.7.3-15.el8 1.16.2-5.el8_9.2 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40

unbound-libs CVE-2024-1488 高危 1.7.3-15.el8 1.16.2-5.8.el8_10 unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1488

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-15 05:15 修改: 2026-06-17 07:04

unbound-libs CVE-2025-5994 高危 1.7.3-15.el8 1.16.2-5.9.el8_10 unbound: Unbound Cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5994

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-16 15:15 修改: 2026-06-17 09:49

unbound-libs CVE-2026-41292 高危 1.7.3-15.el8 unbound: Unbound: Denial of Service via excessive EDNS options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41292

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-16 12:17

unbound-libs CVE-2026-42534 高危 1.7.3-15.el8 unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42534

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-16 12:17

unbound-libs CVE-2026-42944 高危 1.7.3-15.el8 1.16.2-5.11.el8_10 unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42944

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-15 02:21

unbound-libs CVE-2026-42959 高危 1.7.3-15.el8 1.16.2-5.11.el8_10 unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42959

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-15 02:21

unbound-libs CVE-2026-44390 高危 1.7.3-15.el8 unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44390

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-07-16 12:17

vim-common CVE-2026-33412 高危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.1 vim: Vim: Arbitrary code execution via command injection in glob() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33412

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-24 20:16 修改: 2026-07-15 02:20

vim-common CVE-2026-34982 高危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.3 vim: arbitrary command execution via modeline sandbox bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34982

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-06 16:16 修改: 2026-07-15 02:20

vim-common CVE-2026-47162 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary Code Execution via crafted directory names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47162

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-11 19:16 修改: 2026-07-15 02:22

vim-common CVE-2026-55895 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via Vimscript code injection in netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55895

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-common CVE-2026-57456 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57456

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-enhanced CVE-2026-33412 高危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.1 vim: Vim: Arbitrary code execution via command injection in glob() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33412

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-24 20:16 修改: 2026-07-15 02:20

vim-enhanced CVE-2026-34982 高危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.3 vim: arbitrary command execution via modeline sandbox bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34982

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-06 16:16 修改: 2026-07-15 02:20

vim-enhanced CVE-2026-47162 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary Code Execution via crafted directory names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47162

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-11 19:16 修改: 2026-07-15 02:22

vim-enhanced CVE-2026-55895 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via Vimscript code injection in netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55895

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-enhanced CVE-2026-57456 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57456

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-filesystem CVE-2026-34982 高危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.3 vim: arbitrary command execution via modeline sandbox bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34982

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-06 16:16 修改: 2026-07-15 02:20

vim-filesystem CVE-2026-47162 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary Code Execution via crafted directory names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47162

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-11 19:16 修改: 2026-07-15 02:22

vim-filesystem CVE-2026-55895 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via Vimscript code injection in netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55895

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-filesystem CVE-2026-57456 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57456

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-minimal CVE-2026-34982 高危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.3 vim: arbitrary command execution via modeline sandbox bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34982

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-06 16:16 修改: 2026-07-15 02:20

vim-minimal CVE-2026-47162 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary Code Execution via crafted directory names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47162

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-11 19:16 修改: 2026-07-15 02:22

vim-minimal CVE-2026-55895 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via Vimscript code injection in netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55895

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-minimal CVE-2026-57456 高危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57456

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

xz CVE-2022-1271 高危 5.2.4-3.el8 5.2.4-4.el8_6 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

xz-libs CVE-2022-1271 高危 5.2.4-3.el8 5.2.4-4.el8_6 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

zlib CVE-2018-25032 高危 1.2.11-17.el8 1.2.11-18.el8_5 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-25 09:15 修改: 2026-07-14 12:16

glib2 CVE-2026-1489 中危 2.56.4-10.el8_4 Glib: GLib: Memory corruption via integer overflow in Unicode case conversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1489

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 15:15 修改: 2026-06-17 10:15

glib2 CVE-2026-15588 中危 2.56.4-10.el8_4 GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-20 12:17 修改: 2026-07-21 18:31

glib2 CVE-2026-58010 中危 2.56.4-10.el8_4 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-30 13:19 修改: 2026-07-02 19:09

glib2 CVE-2026-58011 中危 2.56.4-10.el8_4 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-30 13:19 修改: 2026-07-02 19:20

glib2 CVE-2026-58012 中危 2.56.4-10.el8_4 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-30 13:19 修改: 2026-07-02 19:28

glib2 CVE-2026-58013 中危 2.56.4-10.el8_4 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-30 13:19 修改: 2026-07-02 19:29

glib2 CVE-2026-58014 中危 2.56.4-10.el8_4 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-30 13:19 修改: 2026-07-01 17:58

glib2 CVE-2026-58015 中危 2.56.4-10.el8_4 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-30 13:19 修改: 2026-07-02 02:16

binutils CVE-2021-42574 中危 2.30-93.el8 2.30-108.el8_5.1 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-01 04:15 修改: 2026-06-17 04:09

binutils CVE-2021-45078 中危 2.30-93.el8 binutils: out-of-bounds write in stab_xcoff_builtin_type() in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45078

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-15 20:15 修改: 2026-06-17 04:13

binutils CVE-2022-4285 中危 2.30-93.el8 2.30-119.el8_8.2 binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4285

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-27 18:15 修改: 2026-06-17 05:20

glibc CVE-2021-35942 中危 2.28-151.el8 2.28-164.el8 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

glibc CVE-2021-3999 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

glibc CVE-2022-23218 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

glibc CVE-2022-23219 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

glibc CVE-2023-4527 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: Stack read overflow in getaddrinfo in no-aaaa mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-18 17:15 修改: 2026-06-17 06:38

glibc CVE-2023-4806 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16

glibc CVE-2023-4813 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38

glibc CVE-2024-33600 中危 2.28-151.el8 2.28-251.el8_10.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc CVE-2025-0395 中危 2.28-151.el8 2.28-251.el8_10.16 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26

glibc CVE-2025-4802 中危 2.28-151.el8 2.28-251.el8_10.22 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34

glibc CVE-2025-8058 中危 2.28-151.el8 2.28-251.el8_10.25 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06

glibc CVE-2026-0915 中危 2.28-151.el8 2.28-251.el8_10.31 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

glibc CVE-2026-4046 中危 2.28-151.el8 2.28-251.el8_10.37 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc CVE-2026-4437 中危 2.28-151.el8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc CVE-2026-5435 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc CVE-2026-5450 中危 2.28-151.el8 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc CVE-2026-5928 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc CVE-2026-6238 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

binutils CVE-2025-11081 中危 2.30-93.el8 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-27 22:15 修改: 2026-06-17 08:29

binutils CVE-2025-11083 中危 2.30-93.el8 2.30-128.el8_10 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29

binutils CVE-2025-5245 中危 2.30-93.el8 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-27 15:15 修改: 2026-06-17 09:47

glibc-common CVE-2021-35942 中危 2.28-151.el8 2.28-164.el8 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

glibc-common CVE-2021-3999 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

glibc-common CVE-2022-23218 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

glibc-common CVE-2022-23219 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

glibc-common CVE-2023-4527 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: Stack read overflow in getaddrinfo in no-aaaa mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-18 17:15 修改: 2026-06-17 06:38

glibc-common CVE-2023-4806 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16

glibc-common CVE-2023-4813 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38

glibc-common CVE-2024-33600 中危 2.28-151.el8 2.28-251.el8_10.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-common CVE-2025-0395 中危 2.28-151.el8 2.28-251.el8_10.16 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26

glibc-common CVE-2025-4802 中危 2.28-151.el8 2.28-251.el8_10.22 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34

glibc-common CVE-2025-8058 中危 2.28-151.el8 2.28-251.el8_10.25 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06

glibc-common CVE-2026-0915 中危 2.28-151.el8 2.28-251.el8_10.31 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

glibc-common CVE-2026-4046 中危 2.28-151.el8 2.28-251.el8_10.37 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc-common CVE-2026-4437 中危 2.28-151.el8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc-common CVE-2026-5435 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-common CVE-2026-5450 中危 2.28-151.el8 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-common CVE-2026-5928 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-common CVE-2026-6238 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

binutils CVE-2025-7545 中危 2.30-93.el8 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05

binutils CVE-2026-4647 中危 2.30-93.el8 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-23 14:16 修改: 2026-07-15 09:16

binutils CVE-2026-6844 中危 2.30-93.el8 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-22 09:16 修改: 2026-06-17 11:01

glibc-langpack-en CVE-2021-35942 中危 2.28-151.el8 2.28-164.el8 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

glibc-langpack-en CVE-2021-3999 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

glibc-langpack-en CVE-2022-23218 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

glibc-langpack-en CVE-2022-23219 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

glibc-langpack-en CVE-2023-4527 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: Stack read overflow in getaddrinfo in no-aaaa mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-18 17:15 修改: 2026-06-17 06:38

glibc-langpack-en CVE-2023-4806 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16

glibc-langpack-en CVE-2023-4813 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38

glibc-langpack-en CVE-2024-33600 中危 2.28-151.el8 2.28-251.el8_10.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-langpack-en CVE-2025-0395 中危 2.28-151.el8 2.28-251.el8_10.16 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26

glibc-langpack-en CVE-2025-4802 中危 2.28-151.el8 2.28-251.el8_10.22 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34

glibc-langpack-en CVE-2025-8058 中危 2.28-151.el8 2.28-251.el8_10.25 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06

glibc-langpack-en CVE-2026-0915 中危 2.28-151.el8 2.28-251.el8_10.31 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

glibc-langpack-en CVE-2026-4046 中危 2.28-151.el8 2.28-251.el8_10.37 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc-langpack-en CVE-2026-4437 中危 2.28-151.el8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc-langpack-en CVE-2026-5435 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-langpack-en CVE-2026-5450 中危 2.28-151.el8 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-langpack-en CVE-2026-5928 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-langpack-en CVE-2026-6238 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

binutils CVE-2026-6845 中危 2.30-93.el8 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-22 09:16 修改: 2026-07-13 22:16

bzip2-libs CVE-2019-12900 中危 1.0.6-26.el8 1.0.6-28.el8_10 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15

bzip2-libs CVE-2026-42250 中危 1.0.6-26.el8 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47

glibc-minimal-langpack CVE-2021-35942 中危 2.28-151.el8 2.28-164.el8 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

glibc-minimal-langpack CVE-2021-3999 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

glibc-minimal-langpack CVE-2022-23218 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

glibc-minimal-langpack CVE-2022-23219 中危 2.28-151.el8 2.28-164.el8_5.3 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

glibc-minimal-langpack CVE-2023-4527 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: Stack read overflow in getaddrinfo in no-aaaa mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-18 17:15 修改: 2026-06-17 06:38

glibc-minimal-langpack CVE-2023-4806 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16

glibc-minimal-langpack CVE-2023-4813 中危 2.28-151.el8 2.28-225.el8_8.6 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38

glibc-minimal-langpack CVE-2024-33600 中危 2.28-151.el8 2.28-251.el8_10.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-minimal-langpack CVE-2025-0395 中危 2.28-151.el8 2.28-251.el8_10.16 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26

glibc-minimal-langpack CVE-2025-4802 中危 2.28-151.el8 2.28-251.el8_10.22 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34

glibc-minimal-langpack CVE-2025-8058 中危 2.28-151.el8 2.28-251.el8_10.25 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06

glibc-minimal-langpack CVE-2026-0915 中危 2.28-151.el8 2.28-251.el8_10.31 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

glibc-minimal-langpack CVE-2026-4046 中危 2.28-151.el8 2.28-251.el8_10.37 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc-minimal-langpack CVE-2026-4437 中危 2.28-151.el8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc-minimal-langpack CVE-2026-5435 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5450 中危 2.28-151.el8 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5928 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-6238 中危 2.28-151.el8 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

gmp CVE-2021-43618 中危 1:6.1.2-10.el8 1:6.1.2-11.el8 gmp: Integer overflow and resultant buffer overflow via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-11-15 04:15 修改: 2026-06-17 04:11

cairo CVE-2018-18064 中危 1.15.12-3.el8 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46

gnupg2 CVE-2022-34903 中危 2.2.20-2.el8 2.2.20-3.el8_6 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gnupg2 CVE-2025-68972 中危 2.2.20-2.el8 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59

cairo CVE-2019-6461 中危 1.15.12-3.el8 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6461

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-16 18:29 修改: 2026-06-17 02:39

cairo CVE-2019-6462 中危 1.15.12-3.el8 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6462

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-16 18:29 修改: 2026-06-17 02:39

cairo CVE-2020-35492 中危 1.15.12-3.el8 1.15.12-6.el8 cairo: libreoffice slideshow aborts with stack smashing in cairo's composite_boxes

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35492

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-18 19:15 修改: 2026-06-17 03:13

coreutils-single CVE-2025-5278 中危 8.30-8.el8 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-05-27 21:15 修改: 2026-07-21 05:16

gnutls CVE-2021-20231 中危 3.6.14-8.el8_3 3.6.16-4.el8 gnutls: Use after free in client key_share extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20231

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-12 19:15 修改: 2026-06-17 03:33

gnutls CVE-2021-20232 中危 3.6.14-8.el8_3 3.6.16-4.el8 gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20232

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-12 19:15 修改: 2026-06-17 03:33

gnutls CVE-2021-3580 中危 3.6.14-8.el8_3 3.6.16-4.el8 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

gnutls CVE-2022-2509 中危 3.6.14-8.el8_3 3.6.16-5.el8_6 gnutls: Double free during gnutls_pkcs7_verify

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-01 14:15 修改: 2026-06-17 04:42

gnutls CVE-2023-0361 中危 3.6.14-8.el8_3 3.6.16-6.el8_7 gnutls: timing side-channel in the TLS RSA key exchange code

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-15 18:15 修改: 2026-06-17 05:25

gnutls CVE-2023-5981 中危 3.6.14-8.el8_3 3.6.16-8.el8_9 gnutls: timing side-channel in the RSA-PSK authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-28 12:15 修改: 2026-06-17 06:49

gnutls CVE-2024-0553 中危 3.6.14-8.el8_3 3.6.16-8.el8_9.1 gnutls: incomplete fix for CVE-2023-5981

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 12:15 修改: 2026-06-17 06:53

gnutls CVE-2024-12243 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.3 gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12243

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-10 16:15 修改: 2026-06-17 06:59

gnutls CVE-2024-28834 中危 3.6.14-8.el8_3 3.6.16-8.el8_9.3 gnutls: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-21 14:15 修改: 2026-06-17 07:21

gnutls CVE-2025-14831 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.5 gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-09 15:16 修改: 2026-06-30 00:16

gnutls CVE-2025-32988 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.4 gnutls: Vulnerability in GnuTLS otherName SAN export

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32988

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-10 08:15 修改: 2026-06-30 01:16

gnutls CVE-2025-32990 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.4 gnutls: Vulnerability in GnuTLS certtool template parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32990

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-10 10:15 修改: 2026-06-30 01:16

gnutls CVE-2025-6395 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.4 gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6395

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-10 16:15 修改: 2026-06-30 02:16

gnutls CVE-2026-3833 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-30 18:16 修改: 2026-07-20 12:19

gnutls CVE-2026-42011 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-07 15:16 修改: 2026-07-20 12:19

gnutls CVE-2026-42012 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-26 22:16 修改: 2026-07-20 12:19

gnutls CVE-2026-42013 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-26 22:16 修改: 2026-07-20 12:19

gnutls CVE-2026-42014 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-16 02:16 修改: 2026-07-20 12:19

gnutls CVE-2026-42015 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-26 22:16 修改: 2026-07-20 12:19

gnutls CVE-2026-5260 中危 3.6.14-8.el8_3 3.6.16-8.el8_10.6 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-26 22:16 修改: 2026-07-20 12:19

cpio CVE-2021-38185 中危 2.12-10.el8 2.12-11.el8 cpio: integer overflow in ds_fgetstr() in dstring.c can lead to an out-of-bounds write via a crafted pattern file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38185

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-08 00:15 修改: 2026-06-17 04:01

cpio CVE-2023-7207 中危 2.12-10.el8 cpio: path traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7207

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-29 01:42 修改: 2026-06-17 06:52

grub2-common CVE-2021-3695 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3695

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-06 16:15 修改: 2026-06-17 04:05

grub2-common CVE-2021-3696 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3696

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-06 16:15 修改: 2026-06-17 04:05

grub2-common CVE-2021-3697 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Crafted JPEG image can lead to buffer underflow write in the heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3697

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-06 16:15 修改: 2026-06-17 04:05

grub2-common CVE-2022-2601 中危 1:2.02-99.el8 1:2.02-142.el8_7.1 grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2601

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-14 21:15 修改: 2026-06-17 04:42

grub2-common CVE-2022-28734 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Out-of-bound write when handling split HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28734

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-common CVE-2022-28735 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: shim_lock verifier allows non-kernel files to be loaded

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28735

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-common CVE-2022-28736 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: use-after-free in grub_cmd_chainloader()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28736

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-common CVE-2022-28737 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 shim: Buffer overflow when loading crafted EFI images

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28737

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-common CVE-2022-3775 中危 1:2.02-99.el8 1:2.02-142.el8_7.1 grub2: Heap based out-of-bounds write when redering certain unicode sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3775

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-19 20:15 修改: 2026-06-17 05:00

grub2-common CVE-2024-1048 中危 1:2.02-99.el8 1:2.02-156.el8 grub2: grub2-set-bootflag can be abused by local (pseudo-)users

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1048

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-06 18:15 修改: 2026-06-17 07:03

grub2-common CVE-2024-45774 中危 1:2.02-99.el8 grub2: reader/jpeg: Heap OOB Write during JPEG parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45774

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 19:15 修改: 2026-06-29 23:16

grub2-common CVE-2024-45775 中危 1:2.02-99.el8 grub2: commands/extcmd: Missing check for failed allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45775

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-07-20 06:16

grub2-common CVE-2024-45777 中危 1:2.02-99.el8 grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write.

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45777

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 18:15 修改: 2026-06-29 23:16

grub2-common CVE-2024-45781 中危 1:2.02-99.el8 grub2: fs/ufs: OOB write in the heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45781

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-06-29 23:16

grub2-common CVE-2024-45783 中危 1:2.02-99.el8 grub2: fs/hfs+: refcount can be decremented twice

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45783

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-06-29 23:16

grub2-common CVE-2024-56738 中危 1:2.02-99.el8 grub2: Observable Timing Discrepancy resulting side-channel attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56738

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-12-29 07:15 修改: 2026-06-17 08:12

grub2-common CVE-2025-0622 中危 1:2.02-99.el8 grub2: command/gpg: Use-after-free due to hooks not being removed on module unload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0622

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-06-30 00:16

grub2-common CVE-2025-0677 中危 1:2.02-99.el8 grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0677

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 19:15 修改: 2026-06-30 00:16

grub2-common CVE-2025-0690 中危 1:2.02-99.el8 grub2: read: Integer overflow may lead to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0690

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-24 08:15 修改: 2026-06-30 00:16

grub2-common CVE-2025-1118 中危 1:2.02-99.el8 grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1118

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 18:15 修改: 2026-06-30 00:16

grub2-common CVE-2025-4382 中危 1:2.02-99.el8 grub2: grub allow access to encrypted device through CLI once root device is unlocked via TPM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4382

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-09 12:15 修改: 2026-06-30 11:16

grub2-common CVE-2025-54770 中危 1:2.02-99.el8 grub2: Use-after-free in net_set_vlan

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54770

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-common CVE-2025-54771 中危 1:2.02-99.el8 grub2: Use-after-free in grub_file_close()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54771

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-common CVE-2025-61661 中危 1:2.02-99.el8 grub2: grub2: Out-of-bounds write via malicious USB device

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61661

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-common CVE-2025-61662 中危 1:2.02-99.el8 1:2.02-170.el8_10.1 grub2: Missing unregister call for gettext command may lead to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61662

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-common CVE-2025-61663 中危 1:2.02-99.el8 grub2: Missing unregister call for normal commands may lead to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61663

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-common CVE-2025-61664 中危 1:2.02-99.el8 grub2: Missing unregister call for normal_exit command may lead to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61664

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

cryptsetup-libs CVE-2021-4122 中危 2.3.3-4.el8 2.3.3-4.el8_5.1 cryptsetup: disable encryption via header rewrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4122

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19

avahi-libs CVE-2025-68471 中危 0.7-20.el8 avahi: Avahi: Denial of Service via unsolicited CNAME announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68471

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

grub2-tools CVE-2021-3695 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3695

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-06 16:15 修改: 2026-06-17 04:05

grub2-tools CVE-2021-3696 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3696

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-06 16:15 修改: 2026-06-17 04:05

grub2-tools CVE-2021-3697 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Crafted JPEG image can lead to buffer underflow write in the heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3697

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-06 16:15 修改: 2026-06-17 04:05

grub2-tools CVE-2022-2601 中危 1:2.02-99.el8 1:2.02-142.el8_7.1 grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2601

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-14 21:15 修改: 2026-06-17 04:42

grub2-tools CVE-2022-28734 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Out-of-bound write when handling split HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28734

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools CVE-2022-28735 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: shim_lock verifier allows non-kernel files to be loaded

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28735

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools CVE-2022-28736 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: use-after-free in grub_cmd_chainloader()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28736

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools CVE-2022-28737 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 shim: Buffer overflow when loading crafted EFI images

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28737

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools CVE-2022-3775 中危 1:2.02-99.el8 1:2.02-142.el8_7.1 grub2: Heap based out-of-bounds write when redering certain unicode sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3775

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-19 20:15 修改: 2026-06-17 05:00

grub2-tools CVE-2024-1048 中危 1:2.02-99.el8 1:2.02-156.el8 grub2: grub2-set-bootflag can be abused by local (pseudo-)users

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1048

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-06 18:15 修改: 2026-06-17 07:03

grub2-tools CVE-2024-45774 中危 1:2.02-99.el8 grub2: reader/jpeg: Heap OOB Write during JPEG parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45774

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 19:15 修改: 2026-06-29 23:16

grub2-tools CVE-2024-45775 中危 1:2.02-99.el8 grub2: commands/extcmd: Missing check for failed allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45775

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-07-20 06:16

grub2-tools CVE-2024-45777 中危 1:2.02-99.el8 grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write.

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45777

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 18:15 修改: 2026-06-29 23:16

grub2-tools CVE-2024-45781 中危 1:2.02-99.el8 grub2: fs/ufs: OOB write in the heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45781

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-06-29 23:16

grub2-tools CVE-2024-45783 中危 1:2.02-99.el8 grub2: fs/hfs+: refcount can be decremented twice

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45783

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-06-29 23:16

grub2-tools CVE-2024-56738 中危 1:2.02-99.el8 grub2: Observable Timing Discrepancy resulting side-channel attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56738

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-12-29 07:15 修改: 2026-06-17 08:12

grub2-tools CVE-2025-0622 中危 1:2.02-99.el8 grub2: command/gpg: Use-after-free due to hooks not being removed on module unload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0622

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-06-30 00:16

grub2-tools CVE-2025-0677 中危 1:2.02-99.el8 grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0677

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 19:15 修改: 2026-06-30 00:16

grub2-tools CVE-2025-0690 中危 1:2.02-99.el8 grub2: read: Integer overflow may lead to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0690

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-24 08:15 修改: 2026-06-30 00:16

grub2-tools CVE-2025-1118 中危 1:2.02-99.el8 grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1118

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 18:15 修改: 2026-06-30 00:16

grub2-tools CVE-2025-4382 中危 1:2.02-99.el8 grub2: grub allow access to encrypted device through CLI once root device is unlocked via TPM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4382

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-09 12:15 修改: 2026-06-30 11:16

grub2-tools CVE-2025-54770 中危 1:2.02-99.el8 grub2: Use-after-free in net_set_vlan

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54770

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools CVE-2025-54771 中危 1:2.02-99.el8 grub2: Use-after-free in grub_file_close()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54771

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools CVE-2025-61661 中危 1:2.02-99.el8 grub2: grub2: Out-of-bounds write via malicious USB device

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61661

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools CVE-2025-61662 中危 1:2.02-99.el8 1:2.02-170.el8_10.1 grub2: Missing unregister call for gettext command may lead to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61662

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools CVE-2025-61663 中危 1:2.02-99.el8 grub2: Missing unregister call for normal commands may lead to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61663

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools CVE-2025-61664 中危 1:2.02-99.el8 grub2: Missing unregister call for normal_exit command may lead to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61664

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

avahi-libs CVE-2026-24401 中危 0.7-20.el8 avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24401

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-24 02:15 修改: 2026-06-17 10:23

avahi-libs CVE-2026-34933 中危 0.7-20.el8 avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34933

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 23:17 修改: 2026-06-17 10:39

grub2-tools-minimal CVE-2021-3695 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3695

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-06 16:15 修改: 2026-06-17 04:05

grub2-tools-minimal CVE-2021-3696 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3696

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-06 16:15 修改: 2026-06-17 04:05

grub2-tools-minimal CVE-2021-3697 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Crafted JPEG image can lead to buffer underflow write in the heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3697

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-06 16:15 修改: 2026-06-17 04:05

grub2-tools-minimal CVE-2022-2601 中危 1:2.02-99.el8 1:2.02-142.el8_7.1 grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2601

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-14 21:15 修改: 2026-06-17 04:42

grub2-tools-minimal CVE-2022-28734 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: Out-of-bound write when handling split HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28734

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools-minimal CVE-2022-28735 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: shim_lock verifier allows non-kernel files to be loaded

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28735

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools-minimal CVE-2022-28736 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 grub2: use-after-free in grub_cmd_chainloader()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28736

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools-minimal CVE-2022-28737 中危 1:2.02-99.el8 1:2.02-123.el8_6.8 shim: Buffer overflow when loading crafted EFI images

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28737

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-20 01:15 修改: 2026-06-17 04:38

grub2-tools-minimal CVE-2022-3775 中危 1:2.02-99.el8 1:2.02-142.el8_7.1 grub2: Heap based out-of-bounds write when redering certain unicode sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3775

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-19 20:15 修改: 2026-06-17 05:00

grub2-tools-minimal CVE-2024-1048 中危 1:2.02-99.el8 1:2.02-156.el8 grub2: grub2-set-bootflag can be abused by local (pseudo-)users

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1048

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-06 18:15 修改: 2026-06-17 07:03

grub2-tools-minimal CVE-2024-45774 中危 1:2.02-99.el8 grub2: reader/jpeg: Heap OOB Write during JPEG parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45774

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 19:15 修改: 2026-06-29 23:16

grub2-tools-minimal CVE-2024-45775 中危 1:2.02-99.el8 grub2: commands/extcmd: Missing check for failed allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45775

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-07-20 06:16

grub2-tools-minimal CVE-2024-45777 中危 1:2.02-99.el8 grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write.

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45777

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 18:15 修改: 2026-06-29 23:16

grub2-tools-minimal CVE-2024-45781 中危 1:2.02-99.el8 grub2: fs/ufs: OOB write in the heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45781

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-06-29 23:16

grub2-tools-minimal CVE-2024-45783 中危 1:2.02-99.el8 grub2: fs/hfs+: refcount can be decremented twice

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45783

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-06-29 23:16

grub2-tools-minimal CVE-2024-56738 中危 1:2.02-99.el8 grub2: Observable Timing Discrepancy resulting side-channel attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56738

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-12-29 07:15 修改: 2026-06-17 08:12

grub2-tools-minimal CVE-2025-0622 中危 1:2.02-99.el8 grub2: command/gpg: Use-after-free due to hooks not being removed on module unload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0622

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 20:15 修改: 2026-06-30 00:16

grub2-tools-minimal CVE-2025-0677 中危 1:2.02-99.el8 grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0677

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 19:15 修改: 2026-06-30 00:16

grub2-tools-minimal CVE-2025-0690 中危 1:2.02-99.el8 grub2: read: Integer overflow may lead to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0690

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-24 08:15 修改: 2026-06-30 00:16

grub2-tools-minimal CVE-2025-1118 中危 1:2.02-99.el8 grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1118

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-19 18:15 修改: 2026-06-30 00:16

grub2-tools-minimal CVE-2025-4382 中危 1:2.02-99.el8 grub2: grub allow access to encrypted device through CLI once root device is unlocked via TPM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4382

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-09 12:15 修改: 2026-06-30 11:16

grub2-tools-minimal CVE-2025-54770 中危 1:2.02-99.el8 grub2: Use-after-free in net_set_vlan

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54770

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools-minimal CVE-2025-54771 中危 1:2.02-99.el8 grub2: Use-after-free in grub_file_close()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54771

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools-minimal CVE-2025-61661 中危 1:2.02-99.el8 grub2: grub2: Out-of-bounds write via malicious USB device

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61661

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools-minimal CVE-2025-61662 中危 1:2.02-99.el8 1:2.02-170.el8_10.1 grub2: Missing unregister call for gettext command may lead to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61662

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools-minimal CVE-2025-61663 中危 1:2.02-99.el8 grub2: Missing unregister call for normal commands may lead to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61663

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

grub2-tools-minimal CVE-2025-61664 中危 1:2.02-99.el8 grub2: Missing unregister call for normal_exit command may lead to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61664

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-18 19:15 修改: 2026-06-30 05:17

gtk-update-icon-cache CVE-2024-6655 中危 3.22.30-6.el8 3.22.30-12.el8_10 gtk3: gtk2: Library injection from CWD

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6655

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 15:15 修改: 2026-06-17 08:18

gtk2 CVE-2024-6655 中危 2.24.32-5.el8 gtk3: gtk2: Library injection from CWD

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6655

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 15:15 修改: 2026-06-17 08:18

cups-libs CVE-2020-10001 中危 1:2.2.6-38.el8 1:2.2.6-40.el8 cups: access to uninitialized buffer in ipp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10001

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-02 18:15 修改: 2026-06-17 02:47

gzip CVE-2026-41991 中危 1.9-12.el8 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02

harfbuzz CVE-2023-25193 中危 1.7.5-3.el8 1.7.5-4.el8 harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25193

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-04 20:15 修改: 2026-06-17 05:40

harfbuzz CVE-2026-22693 中危 1.7.5-3.el8 harfbuzz: Null Pointer Dereference in harfbuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22693

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-10 06:15 修改: 2026-06-17 10:20

iputils CVE-2025-47268 中危 20180629-7.el8 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47268

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-05 14:15 修改: 2026-06-17 09:27

iputils CVE-2025-48964 中危 20180629-7.el8 iputils: iputils integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48964

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-22 18:15 修改: 2026-06-17 09:30

jasper-libs CVE-2017-5503 中危 2.0.14-4.el8 jasper: invalid memory write in dec_clnpass()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5503

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2017-03-01 15:59 修改: 2026-06-17 01:20

jasper-libs CVE-2017-5504 中危 2.0.14-4.el8 jasper: Invalid memory read in jpc_undo_roi

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5504

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2017-03-01 15:59 修改: 2026-06-17 01:20

jasper-libs CVE-2017-5505 中危 2.0.14-4.el8 jasper: Invalid memory read in jas_matrix_asl

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5505

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2017-03-16 15:59 修改: 2026-06-17 01:20

jasper-libs CVE-2018-9055 中危 2.0.14-4.el8 jasper: reachable assertion in jpc_firstone() in jpc_math.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9055

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-03-27 04:29 修改: 2026-06-17 02:05

jasper-libs CVE-2018-9252 中危 2.0.14-4.el8 jasper: reachable assertion in jpc_abstorelstepsize() in jpc_enc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9252

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-04-04 02:29 修改: 2026-06-17 02:06

jasper-libs CVE-2020-27828 中危 2.0.14-4.el8 2.0.14-5.el8 jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27828

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-12-11 04:15 修改: 2026-06-17 03:09

jasper-libs CVE-2021-26926 中危 2.0.14-4.el8 2.0.14-5.el8 jasper: Out of bounds read in jp2_decode() in jp2_dec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-26926

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-23 18:15 修改: 2026-06-17 03:44

jasper-libs CVE-2021-26927 中危 2.0.14-4.el8 2.0.14-5.el8 jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-26927

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-23 20:15 修改: 2026-06-17 03:44

jasper-libs CVE-2021-3272 中危 2.0.14-4.el8 2.0.14-5.el8 jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3272

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-01-27 08:15 修改: 2026-06-17 04:04

jasper-libs CVE-2021-3443 中危 2.0.14-4.el8 jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3443

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-25 19:15 修改: 2026-06-17 04:05

jasper-libs CVE-2021-3467 中危 2.0.14-4.el8 jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3467

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-25 19:15 修改: 2026-06-17 04:05

jasper-libs CVE-2022-2963 中危 2.0.14-4.el8 jasper: memory leaks in function cmdopts_parse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2963

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-14 18:15 修改: 2026-06-17 04:42

cups-libs CVE-2023-32324 中危 1:2.2.6-38.el8 1:2.2.6-54.el8_9 cups: heap buffer overflow may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32324

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-01 17:15 修改: 2026-06-17 05:58

cups-libs CVE-2023-34241 中危 1:2.2.6-38.el8 1:2.2.6-54.el8_9 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34241

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03

cups-libs CVE-2023-4504 中危 1:2.2.6-38.el8 libppd: Postscript Parsing Heap Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4504

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-21 23:15 修改: 2026-06-17 06:37

cups-libs CVE-2024-35235 中危 1:2.2.6-38.el8 1:2.2.6-60.el8_10 cups: Cupsd Listen arbitrary chmod 0140777

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-11 15:16 修改: 2026-06-17 07:34

cups-libs CVE-2025-58364 中危 1:2.2.6-38.el8 1:2.2.6-64.el8_10 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58364

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-11 18:15 修改: 2026-06-17 09:44

cups-libs CVE-2025-58436 中危 1:2.2.6-38.el8 1:2.2.6-66.el8_10 cups: Slow client communication leads to a possible DoS attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58436

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-29 03:15 修改: 2026-06-17 09:44

cups-libs CVE-2025-61915 中危 1:2.2.6-38.el8 1:2.2.6-66.el8_10 CUPS: Local denial-of-service via cupsd.conf update and related issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61915

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-29 03:15 修改: 2026-06-17 09:51

cups-libs CVE-2026-27447 中危 1:2.2.6-38.el8 cups: OpenPrinting CUPS: Authorization bypass via case-insensitive username comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27447

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

cups-libs CVE-2026-34978 中危 1:2.2.6-38.el8 cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifier

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34978

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-07-20 20:10

cups-libs CVE-2026-34979 中危 1:2.2.6-38.el8 cups: OpenPrinting CUPS: Denial of Service via heap-based buffer overflow in job attribute processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34979

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:39

cups-libs CVE-2026-34990 中危 1:2.2.6-38.el8 cups: OpenPrinting CUPS: Privilege escalation via arbitrary file overwrite due to coerced authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34990

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:39

cups-libs CVE-2026-39314 中危 1:2.2.6-38.el8 cups: CUPS: Denial of Service via integer underflow in IPP attribute handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39314

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:41

cups-libs CVE-2026-39316 中危 1:2.2.6-38.el8 cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39316

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:41

acl CVE-2026-54370 中危 2.2.53-1.el8 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22

alsa-lib CVE-2026-25068 中危 1.2.4-5.el8 alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25068

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-29 20:16 修改: 2026-06-17 10:24

avahi-libs CVE-2021-3468 中危 0.7-20.el8 0.7-21.el8_9.1 avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3468

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-06-02 16:15 修改: 2026-06-17 04:05

avahi-libs CVE-2023-1981 中危 0.7-20.el8 0.7-21.el8 avahi: avahi-daemon can be crashed via DBus

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1981

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-26 18:15 修改: 2026-06-17 05:29

java-1.8.0-openjdk CVE-2021-35550 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35550

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2021-35556 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35556

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2021-35559 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35559

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2021-35561 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35561

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2021-35564 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35564

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2021-35578 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35578

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2021-35586 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35586

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2022-21248 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21248

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk CVE-2022-21282 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21282

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk CVE-2022-21283 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21283

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk CVE-2022-21293 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk CVE-2022-21294 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21294

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk CVE-2022-21296 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21296

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk CVE-2022-21299 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21299

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk CVE-2022-21305 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21305

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk CVE-2022-21340 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21340

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21341 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21341

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21360 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21360

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21365 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21365

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21426 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21426

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21434 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21434

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21443 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21443

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21496 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: URI parsing inconsistencies (JNDI, 8278972)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21496

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21540 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.342.b07-2.el8_6 OpenJDK: class compilation issue (Hotspot, 8281859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21540

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-19 22:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21541 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.342.b07-2.el8_6 OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21541

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-19 22:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21626 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21626

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-21628 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21628

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2022-40433 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.392.b08-4.el8

漏洞详情:

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk CVE-2023-21830 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.362.b09-2.el8_7 OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21830

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-18 00:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-21939 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: Swing HTML parsing issue (8296832)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21939

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-21954 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: incorrect enqueue of references in garbage collector (8298191)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21954

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-21967 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: certificate validation issue in TLS session negotiation (8298310)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21967

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-22049 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.382.b05-2.el8 OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22049

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-18 21:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-22067 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.392.b08-4.el8 OpenJDK: IOR deserialization issue in CORBA (8303384)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22067

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-22081 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.392.b08-4.el8 OpenJDK: certificate path validation issue during client authentication (8309966)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22081

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-48161 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48161

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-22 06:15 修改: 2026-06-17 06:33

java-1.8.0-openjdk CVE-2024-20919 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20919

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-17 02:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-20921 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: range check loop optimization issue (8314307)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20921

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-17 02:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-20926 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: arbitrary Java code execution in Nashorn (8314284)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20926

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-20945 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: logging of digital signature private keys (8316976)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20945

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-17 02:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21011 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: long Exception message leading to crash (8319851)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21068 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: integer overflow in C1 compiler address generation (8322122)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21068

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21085 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: Pack200 excessive memory allocation (8322114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21085

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21094 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21094

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21131 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: potential UTF8 size overflow (8314794)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21131

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21138 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Excessive symbol length can lead to infinite loop (8319859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21138

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21140 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21140

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21144 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Pack200 increase loading time due to improper header validation (8322106)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21144

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21145 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Out-of-bounds access in 2D image handling (8324559)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21145

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21208 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: HTTP client improper handling of maxHeaderSize (8328286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21208

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21210 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: Array indexing integer overflow (8328544)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21210

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21217 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: Unbounded allocation leads to out-of-memory error (8331446)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21217

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2024-21235 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: Integer conversion error leads to incorrect range check (8332644)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk CVE-2025-21587 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.452.b09-2.el8 openjdk: Better TLS connection support (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21587

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 21:15 修改: 2026-06-17 08:43

java-1.8.0-openjdk CVE-2025-28164 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04

java-1.8.0-openjdk CVE-2025-30691 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.452.b09-2.el8 openjdk: Improve compiler transformations (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30691

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk CVE-2025-30698 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.452.b09-2.el8 openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30698

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk CVE-2025-30754 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30754

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk CVE-2025-30761 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Improve scripting supports (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30761

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk CVE-2025-53057 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.472.b08-1.el8 openjdk: Enhance certificate handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53057

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

java-1.8.0-openjdk CVE-2025-53066 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.472.b08-1.el8 openjdk: Enhance Path Factories (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53066

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

java-1.8.0-openjdk CVE-2025-64505 中危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG heap buffer overflow via malformed palette index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

java-1.8.0-openjdk CVE-2025-64506 中危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

java-1.8.0-openjdk CVE-2026-21925 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 openjdk: Improve JMX connections (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21925

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

java-1.8.0-openjdk CVE-2026-21933 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21933

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

java-1.8.0-openjdk CVE-2026-22013 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk CVE-2026-22021 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk CVE-2026-22695 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

java-1.8.0-openjdk CVE-2026-22801 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

java-1.8.0-openjdk CVE-2026-23865 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

java-1.8.0-openjdk CVE-2026-33416 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

java-1.8.0-openjdk CVE-2026-33636 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

java-1.8.0-openjdk CVE-2026-34757 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39

java-1.8.0-openjdk CVE-2026-41254 中危 1:1.8.0.302.b08-0.el8_4 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46

avahi-libs CVE-2023-38469 中危 0.7-20.el8 0.7-21.el8_9.1 avahi: Reachable assertion in avahi_dns_packet_append_record

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38469

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-02 15:15 修改: 2026-06-17 06:10

avahi-libs CVE-2023-38470 中危 0.7-20.el8 0.7-21.el8_9.1 avahi: Reachable assertion in avahi_escape_label

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38470

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-02 15:15 修改: 2026-06-17 06:10

curl CVE-2021-22876 中危 7.61.1-18.el8 7.61.1-22.el8 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-01 18:15 修改: 2026-06-17 03:37

curl CVE-2021-22922 中危 7.61.1-18.el8 7.61.1-18.el8_4.1 curl: Content not matching hash in Metalink is not being discarded

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

curl CVE-2021-22923 中危 7.61.1-18.el8 7.61.1-18.el8_4.1 curl: Metalink download sends credentials

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

curl CVE-2021-22924 中危 7.61.1-18.el8 7.61.1-18.el8_4.1 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

curl CVE-2021-22946 中危 7.61.1-18.el8 7.61.1-18.el8_4.2 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

curl CVE-2021-22947 中危 7.61.1-18.el8 7.61.1-18.el8_4.2 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

curl CVE-2022-22576 中危 7.61.1-18.el8 7.61.1-22.el8_6.3 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28

curl CVE-2022-27774 中危 7.61.1-18.el8 7.61.1-22.el8_6.3 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

curl CVE-2022-27776 中危 7.61.1-18.el8 7.61.1-22.el8_6.3 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

curl CVE-2022-27782 中危 7.61.1-18.el8 7.61.1-22.el8_6.3 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

curl CVE-2022-32206 中危 7.61.1-18.el8 7.61.1-22.el8_6.4 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

curl CVE-2022-32208 中危 7.61.1-18.el8 7.61.1-22.el8_6.4 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

curl CVE-2023-23916 中危 7.61.1-18.el8 7.61.1-25.el8_7.3 curl: HTTP multi-header compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38

curl CVE-2023-27535 中危 7.61.1-18.el8 7.61.1-30.el8_8.2 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

curl CVE-2023-27536 中危 7.61.1-18.el8 7.61.1-30.el8_8.3 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

java-1.8.0-openjdk-devel CVE-2021-35550 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35550

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2021-35556 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35556

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2021-35559 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35559

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2021-35561 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35561

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2021-35564 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35564

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2021-35578 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35578

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2021-35586 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35586

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2022-21248 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21248

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-devel CVE-2022-21282 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21282

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-devel CVE-2022-21283 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21283

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-devel CVE-2022-21293 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-devel CVE-2022-21294 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21294

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-devel CVE-2022-21296 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21296

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-devel CVE-2022-21299 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21299

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-devel CVE-2022-21305 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21305

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-devel CVE-2022-21340 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21340

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21341 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21341

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21360 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21360

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21365 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21365

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21426 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21426

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21434 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21434

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21443 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21443

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21496 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: URI parsing inconsistencies (JNDI, 8278972)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21496

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21540 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.342.b07-2.el8_6 OpenJDK: class compilation issue (Hotspot, 8281859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21540

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-19 22:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21541 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.342.b07-2.el8_6 OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21541

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-19 22:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21626 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21626

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-21628 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21628

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2022-40433 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.392.b08-4.el8

漏洞详情:

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk-devel CVE-2023-21830 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.362.b09-2.el8_7 OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21830

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-18 00:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-21939 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: Swing HTML parsing issue (8296832)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21939

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-21954 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: incorrect enqueue of references in garbage collector (8298191)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21954

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-21967 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: certificate validation issue in TLS session negotiation (8298310)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21967

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-22049 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.382.b05-2.el8 OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22049

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-18 21:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-22067 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.392.b08-4.el8 OpenJDK: IOR deserialization issue in CORBA (8303384)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22067

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-22081 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.392.b08-4.el8 OpenJDK: certificate path validation issue during client authentication (8309966)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22081

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-48161 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48161

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-22 06:15 修改: 2026-06-17 06:33

java-1.8.0-openjdk-devel CVE-2024-20919 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20919

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-17 02:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-20921 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: range check loop optimization issue (8314307)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20921

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-17 02:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-20926 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: arbitrary Java code execution in Nashorn (8314284)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20926

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-20945 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: logging of digital signature private keys (8316976)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20945

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-17 02:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21011 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: long Exception message leading to crash (8319851)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21068 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: integer overflow in C1 compiler address generation (8322122)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21068

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21085 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: Pack200 excessive memory allocation (8322114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21085

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21094 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21094

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21131 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: potential UTF8 size overflow (8314794)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21131

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21138 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Excessive symbol length can lead to infinite loop (8319859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21138

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21140 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21140

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21144 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Pack200 increase loading time due to improper header validation (8322106)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21144

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21145 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Out-of-bounds access in 2D image handling (8324559)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21145

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21208 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: HTTP client improper handling of maxHeaderSize (8328286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21208

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21210 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: Array indexing integer overflow (8328544)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21210

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21217 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: Unbounded allocation leads to out-of-memory error (8331446)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21217

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2024-21235 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: Integer conversion error leads to incorrect range check (8332644)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-devel CVE-2025-21587 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.452.b09-2.el8 openjdk: Better TLS connection support (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21587

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 21:15 修改: 2026-06-17 08:43

java-1.8.0-openjdk-devel CVE-2025-28164 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04

java-1.8.0-openjdk-devel CVE-2025-30691 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.452.b09-2.el8 openjdk: Improve compiler transformations (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30691

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-devel CVE-2025-30698 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.452.b09-2.el8 openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30698

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-devel CVE-2025-30754 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30754

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-devel CVE-2025-30761 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Improve scripting supports (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30761

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-devel CVE-2025-53057 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.472.b08-1.el8 openjdk: Enhance certificate handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53057

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

java-1.8.0-openjdk-devel CVE-2025-53066 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.472.b08-1.el8 openjdk: Enhance Path Factories (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53066

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

java-1.8.0-openjdk-devel CVE-2025-64505 中危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG heap buffer overflow via malformed palette index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

java-1.8.0-openjdk-devel CVE-2025-64506 中危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

java-1.8.0-openjdk-devel CVE-2026-21925 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 openjdk: Improve JMX connections (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21925

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

java-1.8.0-openjdk-devel CVE-2026-21933 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21933

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

java-1.8.0-openjdk-devel CVE-2026-22013 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk-devel CVE-2026-22021 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk-devel CVE-2026-22695 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

java-1.8.0-openjdk-devel CVE-2026-22801 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

java-1.8.0-openjdk-devel CVE-2026-23865 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

java-1.8.0-openjdk-devel CVE-2026-33416 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

java-1.8.0-openjdk-devel CVE-2026-33636 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

java-1.8.0-openjdk-devel CVE-2026-34757 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39

java-1.8.0-openjdk-devel CVE-2026-41254 中危 1:1.8.0.302.b08-0.el8_4 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46

curl CVE-2023-28321 中危 7.61.1-18.el8 7.61.1-30.el8_8.3 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

curl CVE-2023-46218 中危 7.61.1-18.el8 7.61.1-33.el8_9.5 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30

curl CVE-2024-2398 中危 7.61.1-18.el8 7.61.1-34.el8_10.2 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24

curl CVE-2025-13034 中危 7.61.1-18.el8 curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13034

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:33

curl CVE-2025-14017 中危 7.61.1-18.el8 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35

curl CVE-2025-9086 中危 7.61.1-18.el8 7.61.1-34.el8_10.9 curl: libcurl: Curl out of bounds read for cookie path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9086

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-12 06:15 修改: 2026-06-17 10:08

curl CVE-2026-11856 中危 7.61.1-18.el8 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

curl CVE-2026-1965 中危 7.61.1-18.el8 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

curl CVE-2026-3783 中危 7.61.1-18.el8 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

curl CVE-2026-3784 中危 7.61.1-18.el8 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

curl CVE-2026-3805 中危 7.61.1-18.el8 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

curl CVE-2026-4873 中危 7.61.1-18.el8 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57

curl CVE-2026-5545 中危 7.61.1-18.el8 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

curl CVE-2026-5773 中危 7.61.1-18.el8 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

curl CVE-2026-6253 中危 7.61.1-18.el8 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-6429 中危 7.61.1-18.el8 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-7168 中危 7.61.1-18.el8 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01

java-1.8.0-openjdk-headless CVE-2021-35550 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35550

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2021-35556 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35556

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2021-35559 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35559

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2021-35561 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35561

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2021-35564 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35564

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2021-35578 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35578

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2021-35586 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35586

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2022-21248 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21248

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-headless CVE-2022-21282 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21282

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-headless CVE-2022-21283 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21283

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-headless CVE-2022-21293 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-headless CVE-2022-21294 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21294

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-headless CVE-2022-21296 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21296

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-headless CVE-2022-21299 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21299

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-headless CVE-2022-21305 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21305

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

java-1.8.0-openjdk-headless CVE-2022-21340 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21340

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21341 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21341

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21360 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21360

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21365 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.322.b06-2.el8_5 OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21365

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21426 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21426

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21434 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21434

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21443 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21443

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21496 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.332.b09-1.el8_5 OpenJDK: URI parsing inconsistencies (JNDI, 8278972)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21496

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21540 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.342.b07-2.el8_6 OpenJDK: class compilation issue (Hotspot, 8281859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21540

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-19 22:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21541 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.342.b07-2.el8_6 OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21541

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-19 22:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21626 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21626

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21628 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21628

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-40433 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.392.b08-4.el8

漏洞详情:

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk-headless CVE-2023-21830 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.362.b09-2.el8_7 OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21830

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-18 00:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-21939 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: Swing HTML parsing issue (8296832)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21939

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-21954 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: incorrect enqueue of references in garbage collector (8298191)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21954

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-21967 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: certificate validation issue in TLS session negotiation (8298310)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21967

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-22049 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.382.b05-2.el8 OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22049

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-18 21:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-22067 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.392.b08-4.el8 OpenJDK: IOR deserialization issue in CORBA (8303384)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22067

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-22081 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.392.b08-4.el8 OpenJDK: certificate path validation issue during client authentication (8309966)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22081

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-48161 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48161

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-22 06:15 修改: 2026-06-17 06:33

java-1.8.0-openjdk-headless CVE-2024-20919 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20919

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-17 02:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-20921 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: range check loop optimization issue (8314307)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20921

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-17 02:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-20926 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: arbitrary Java code execution in Nashorn (8314284)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20926

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-20945 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.402.b06-2.el8 OpenJDK: logging of digital signature private keys (8316976)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-20945

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-17 02:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21011 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: long Exception message leading to crash (8319851)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21068 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: integer overflow in C1 compiler address generation (8322122)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21068

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21085 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: Pack200 excessive memory allocation (8322114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21085

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21094 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.412.b08-2.el8 OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21094

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21131 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: potential UTF8 size overflow (8314794)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21131

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21138 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Excessive symbol length can lead to infinite loop (8319859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21138

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21140 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21140

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21144 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Pack200 increase loading time due to improper header validation (8322106)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21144

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21145 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.422.b05-2.el8 OpenJDK: Out-of-bounds access in 2D image handling (8324559)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21145

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21208 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: HTTP client improper handling of maxHeaderSize (8328286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21208

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21210 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: Array indexing integer overflow (8328544)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21210

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21217 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: Unbounded allocation leads to out-of-memory error (8331446)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21217

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2024-21235 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.432.b06-2.el8 JDK: Integer conversion error leads to incorrect range check (8332644)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

java-1.8.0-openjdk-headless CVE-2025-21587 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.452.b09-2.el8 openjdk: Better TLS connection support (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21587

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 21:15 修改: 2026-06-17 08:43

java-1.8.0-openjdk-headless CVE-2025-28164 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04

java-1.8.0-openjdk-headless CVE-2025-30691 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.452.b09-2.el8 openjdk: Improve compiler transformations (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30691

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-headless CVE-2025-30698 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.452.b09-2.el8 openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30698

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-headless CVE-2025-30754 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30754

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-headless CVE-2025-30761 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.462.b08-2.el8 openjdk: Improve scripting supports (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30761

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:09

java-1.8.0-openjdk-headless CVE-2025-53057 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.472.b08-1.el8 openjdk: Enhance certificate handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53057

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

java-1.8.0-openjdk-headless CVE-2025-53066 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.472.b08-1.el8 openjdk: Enhance Path Factories (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53066

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

java-1.8.0-openjdk-headless CVE-2025-64505 中危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG heap buffer overflow via malformed palette index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

java-1.8.0-openjdk-headless CVE-2025-64506 中危 1:1.8.0.302.b08-0.el8_4 libpng: LIBPNG heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

java-1.8.0-openjdk-headless CVE-2026-21925 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 openjdk: Improve JMX connections (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21925

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

java-1.8.0-openjdk-headless CVE-2026-21933 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.482.b08-1.el8 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21933

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

java-1.8.0-openjdk-headless CVE-2026-22013 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk-headless CVE-2026-22021 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk-headless CVE-2026-22695 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

java-1.8.0-openjdk-headless CVE-2026-22801 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

java-1.8.0-openjdk-headless CVE-2026-23865 中危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

java-1.8.0-openjdk-headless CVE-2026-33416 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

java-1.8.0-openjdk-headless CVE-2026-33636 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

java-1.8.0-openjdk-headless CVE-2026-34757 中危 1:1.8.0.302.b08-0.el8_4 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39

java-1.8.0-openjdk-headless CVE-2026-41254 中危 1:1.8.0.302.b08-0.el8_4 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46

json-c CVE-2020-12762 中危 0.13.1-0.4.el8 0.13.1-2.el8 libfastjson: integer overflow and out-of-bounds write via a large JSON file

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12762

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-05-09 18:15 修改: 2026-06-17 02:52

kpartx CVE-2022-41973 中危 0.8.4-10.el8 0.8.4-37.el8 device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41973

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-29 18:15 修改: 2026-06-17 05:04

curl CVE-2026-8924 中危 7.61.1-18.el8 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06

curl CVE-2026-8926 中危 7.61.1-18.el8 curl: curl: Information disclosure via incorrect .netrc password lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02

krb5-libs CVE-2021-36222 中危 1.18.2-8.el8 1.18.2-8.3.el8_4 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

krb5-libs CVE-2021-37750 中危 1.18.2-8.el8 1.18.2-8.3.el8_4 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

krb5-libs CVE-2024-37370 中危 1.18.2-8.el8 1.18.2-29.el8_10 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38

krb5-libs CVE-2024-37371 中危 1.18.2-8.el8 1.18.2-29.el8_10 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38

krb5-libs CVE-2025-24528 中危 1.18.2-8.el8 1.18.2-31.el8_10 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59

krb5-libs CVE-2025-3576 中危 1.18.2-8.el8 1.18.2-32.el8_10 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-15 06:15 修改: 2026-06-30 01:16

krb5-libs CVE-2026-11850 中危 1.18.2-8.el8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14

krb5-libs CVE-2026-40355 中危 1.18.2-8.el8 1.18.2-34.el8_10 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

krb5-libs CVE-2026-40356 中危 1.18.2-8.el8 1.18.2-34.el8_10 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

avahi-libs CVE-2023-38471 中危 0.7-20.el8 0.7-21.el8_9.1 avahi: Reachable assertion in dbus_set_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38471

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-02 15:15 修改: 2026-06-17 06:10

less CVE-2022-48624 中危 530-1.el8 530-3.el8_10 less: missing quoting of shell metacharacters in LESSCLOSE handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48624

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-02-19 01:15 修改: 2026-06-17 05:15

dbus CVE-2022-42010 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

libX11 CVE-2023-3138 中危 1.6.8-4.el8 1.6.8-6.el8 libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3138

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-28 21:15 修改: 2026-06-17 06:13

libX11 CVE-2023-43785 中危 1.6.8-4.el8 1.6.8-8.el8 libX11: out-of-bounds memory access in _XkbReadKeySyms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43785

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-10 13:15 修改: 2026-06-17 06:26

libX11 CVE-2023-43786 中危 1.6.8-4.el8 1.6.8-8.el8 libX11: stack exhaustion from infinite recursion in PutSubImage()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43786

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-10 13:15 修改: 2026-06-17 06:26

libX11 CVE-2023-43787 中危 1.6.8-4.el8 1.6.8-8.el8 libX11: integer overflow in XCreateImage() leading to a heap overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43787

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-10 13:15 修改: 2026-06-17 06:26

dbus CVE-2022-42011 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

libX11-common CVE-2023-3138 中危 1.6.8-4.el8 1.6.8-6.el8 libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3138

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-28 21:15 修改: 2026-06-17 06:13

libX11-common CVE-2023-43785 中危 1.6.8-4.el8 1.6.8-8.el8 libX11: out-of-bounds memory access in _XkbReadKeySyms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43785

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-10 13:15 修改: 2026-06-17 06:26

libX11-common CVE-2023-43786 中危 1.6.8-4.el8 1.6.8-8.el8 libX11: stack exhaustion from infinite recursion in PutSubImage()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43786

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-10 13:15 修改: 2026-06-17 06:26

libX11-common CVE-2023-43787 中危 1.6.8-4.el8 1.6.8-8.el8 libX11: integer overflow in XCreateImage() leading to a heap overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43787

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-10 13:15 修改: 2026-06-17 06:26

dbus CVE-2022-42012 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

libacl CVE-2026-54370 中危 2.2.53-1.el8 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22

dbus CVE-2023-34969 中危 1:1.12.8-12.el8_4.2 1:1.12.8-24.el8_8.1 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-08 03:15 修改: 2026-06-17 06:04

dbus-common CVE-2022-42010 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

libarchive CVE-2021-23177 中危 3.3.3-1.el8 3.3.3-3.el8_5 libarchive: extracting a symlink with ACLs modifies ACLs of target

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23177

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 16:15 修改: 2026-06-17 03:38

libarchive CVE-2021-31566 中危 3.3.3-1.el8 3.3.3-3.el8_5 libarchive: symbolic links incorrectly followed when changing modes, times, ACL and flags of a file while extracting an archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31566

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 16:15 修改: 2026-06-17 03:52

libarchive CVE-2024-57970 中危 3.3.3-1.el8 libarchive: heap buffer over-read in header_gnu_longlink

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57970

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-16 04:15 修改: 2026-06-17 08:14

libarchive CVE-2025-25724 中危 3.3.3-1.el8 libarchive: Buffer Overflow vulnerability in libarchive

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25724

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-03-02 02:15 修改: 2026-06-17 09:01

libarchive CVE-2025-60753 中危 3.3.3-1.el8 libarchive: bsdtar hangs and OOMs with zero-length pattern matches

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-60753

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-05 16:15 修改: 2026-06-17 09:50

libarchive CVE-2026-4426 中危 3.3.3-1.el8 libarchive: libarchive: Denial of Service via malformed ISO file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4426

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:56

libarchive CVE-2026-5121 中危 3.3.3-1.el8 3.3.3-7.el8_10 libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5121

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-30 08:16 修改: 2026-07-14 13:19

libarchive CVE-2026-5745 中危 3.3.3-1.el8 libarchive: A NULL pointer dereference vulnerability exists in the ACL parser of libarchive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5745

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 16:16 修改: 2026-06-17 10:59

libattr CVE-2026-54371 中危 2.4.48-3.el8 attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16

libblkid CVE-2025-14104 中危 2.32.1-27.el8 2.32.1-48.el8_10 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

libblkid CVE-2026-13595 中危 2.32.1-27.el8 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libblkid CVE-2026-27456 中危 2.32.1-27.el8 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

dbus-common CVE-2022-42011 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

libcap CVE-2023-2603 中危 2.26-4.el8 2.48-5.el8_8 libcap: Integer Overflow in _libcap_strdup()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2603

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-06-06 20:15 修改: 2026-06-17 05:52

libcom_err CVE-2022-1304 中危 1.45.6-1.el8 1.45.6-5.el8 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

dbus-common CVE-2022-42012 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

dbus-common CVE-2023-34969 中危 1:1.12.8-12.el8_4.2 1:1.12.8-24.el8_8.1 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-08 03:15 修改: 2026-06-17 06:04

dbus-daemon CVE-2022-42010 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

dbus-daemon CVE-2022-42011 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

dbus-daemon CVE-2022-42012 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

dbus-daemon CVE-2023-34969 中危 1:1.12.8-12.el8_4.2 1:1.12.8-24.el8_8.1 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-08 03:15 修改: 2026-06-17 06:04

libcurl-minimal CVE-2021-22876 中危 7.61.1-18.el8 7.61.1-22.el8 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-01 18:15 修改: 2026-06-17 03:37

libcurl-minimal CVE-2021-22922 中危 7.61.1-18.el8 7.61.1-18.el8_4.1 curl: Content not matching hash in Metalink is not being discarded

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

libcurl-minimal CVE-2021-22923 中危 7.61.1-18.el8 7.61.1-18.el8_4.1 curl: Metalink download sends credentials

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

libcurl-minimal CVE-2021-22924 中危 7.61.1-18.el8 7.61.1-18.el8_4.1 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

libcurl-minimal CVE-2021-22946 中危 7.61.1-18.el8 7.61.1-18.el8_4.2 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libcurl-minimal CVE-2021-22947 中危 7.61.1-18.el8 7.61.1-18.el8_4.2 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libcurl-minimal CVE-2022-22576 中危 7.61.1-18.el8 7.61.1-22.el8_6.3 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28

libcurl-minimal CVE-2022-27774 中危 7.61.1-18.el8 7.61.1-22.el8_6.3 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl-minimal CVE-2022-27776 中危 7.61.1-18.el8 7.61.1-22.el8_6.3 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl-minimal CVE-2022-27782 中危 7.61.1-18.el8 7.61.1-22.el8_6.3 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl-minimal CVE-2022-32206 中危 7.61.1-18.el8 7.61.1-22.el8_6.4 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libcurl-minimal CVE-2022-32208 中危 7.61.1-18.el8 7.61.1-22.el8_6.4 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libcurl-minimal CVE-2023-23916 中危 7.61.1-18.el8 7.61.1-25.el8_7.3 curl: HTTP multi-header compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38

libcurl-minimal CVE-2023-27535 中危 7.61.1-18.el8 7.61.1-30.el8_8.2 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl-minimal CVE-2023-27536 中危 7.61.1-18.el8 7.61.1-30.el8_8.3 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl-minimal CVE-2023-28321 中危 7.61.1-18.el8 7.61.1-30.el8_8.3 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

libcurl-minimal CVE-2023-46218 中危 7.61.1-18.el8 7.61.1-33.el8_9.5 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30

libcurl-minimal CVE-2024-2398 中危 7.61.1-18.el8 7.61.1-34.el8_10.2 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24

libcurl-minimal CVE-2025-13034 中危 7.61.1-18.el8 curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13034

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:33

libcurl-minimal CVE-2025-14017 中危 7.61.1-18.el8 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35

libcurl-minimal CVE-2025-9086 中危 7.61.1-18.el8 7.61.1-34.el8_10.9 curl: libcurl: Curl out of bounds read for cookie path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9086

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-12 06:15 修改: 2026-06-17 10:08

libcurl-minimal CVE-2026-11856 中危 7.61.1-18.el8 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

libcurl-minimal CVE-2026-1965 中危 7.61.1-18.el8 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

libcurl-minimal CVE-2026-3783 中危 7.61.1-18.el8 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

libcurl-minimal CVE-2026-3784 中危 7.61.1-18.el8 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

libcurl-minimal CVE-2026-3805 中危 7.61.1-18.el8 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

libcurl-minimal CVE-2026-4873 中危 7.61.1-18.el8 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57

libcurl-minimal CVE-2026-5545 中危 7.61.1-18.el8 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

libcurl-minimal CVE-2026-5773 中危 7.61.1-18.el8 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

libcurl-minimal CVE-2026-6253 中危 7.61.1-18.el8 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl-minimal CVE-2026-6429 中危 7.61.1-18.el8 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl-minimal CVE-2026-7168 中危 7.61.1-18.el8 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01

libcurl-minimal CVE-2026-8924 中危 7.61.1-18.el8 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06

libcurl-minimal CVE-2026-8926 中危 7.61.1-18.el8 curl: curl: Information disclosure via incorrect .netrc password lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02

libdnf CVE-2021-3445 中危 0.55.0-7.el8 0.63.0-3.el8 libdnf: Signature verification bypass via signature placed in the main RPM header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-19 14:15 修改: 2026-06-17 04:05

libfdisk CVE-2025-14104 中危 2.32.1-27.el8 2.32.1-48.el8_10 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

libfdisk CVE-2026-13595 中危 2.32.1-27.el8 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libfdisk CVE-2026-27456 中危 2.32.1-27.el8 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

libgcc CVE-2020-11023 中危 8.4.1-1.el8 8.5.0-23.el8_10 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-04-29 21:15 修改: 2026-06-17 02:48

libgcc CVE-2021-42574 中危 8.4.1-1.el8 8.5.0-4.el8_5 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-01 04:15 修改: 2026-06-17 04:09

libgcrypt CVE-2019-12904 中危 1.8.5-4.el8 Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12904

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2019-06-20 00:15 修改: 2026-06-17 02:15

libgcrypt CVE-2021-33560 中危 1.8.5-4.el8 1.8.5-6.el8 libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-06-08 11:15 修改: 2026-06-17 03:54

libgcrypt CVE-2021-40528 中危 1.8.5-4.el8 1.8.5-7.el8_6 libgcrypt: ElGamal implementation allows plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40528

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-09-06 19:15 修改: 2026-06-17 04:07

libgcrypt CVE-2024-2236 中危 1.8.5-4.el8 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24

libgcrypt CVE-2026-41989 中危 1.8.5-4.el8 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18

libgomp CVE-2020-11023 中危 8.4.1-1.el8 8.5.0-23.el8_10 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-04-29 21:15 修改: 2026-06-17 02:48

libgomp CVE-2021-42574 中危 8.4.1-1.el8 8.5.0-4.el8_5 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-01 04:15 修改: 2026-06-17 04:09

libjpeg-turbo CVE-2019-2201 中危 1.5.3-10.el8 libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress gigapixel images

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2201

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-11-13 18:15 修改: 2026-06-17 02:33

libjpeg-turbo CVE-2020-13790 中危 1.5.3-10.el8 1.5.3-14.el8_10 libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13790

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-06-03 19:15 修改: 2026-06-17 02:53

libjpeg-turbo CVE-2020-17541 中危 1.5.3-10.el8 1.5.3-12.el8 libjpeg-turbo: Stack-based buffer overflow in the "transform" component

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17541

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-06-01 15:15 修改: 2026-06-17 02:59

dbus-libs CVE-2022-42010 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

dbus-libs CVE-2022-42011 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

libmount CVE-2025-14104 中危 2.32.1-27.el8 2.32.1-48.el8_10 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

libmount CVE-2026-13595 中危 2.32.1-27.el8 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libmount CVE-2026-27456 中危 2.32.1-27.el8 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

dbus-libs CVE-2022-42012 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

dbus-libs CVE-2023-34969 中危 1:1.12.8-12.el8_4.2 1:1.12.8-24.el8_8.1 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-08 03:15 修改: 2026-06-17 06:04

libnghttp2 CVE-2024-28182 中危 1.33.0-3.el8_2.1 1.33.0-6.el8_10.1 nghttp2: CONTINUATION frames DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-04-04 15:15 修改: 2026-06-17 07:21

libnghttp2 CVE-2026-58055 中危 1.33.0-3.el8_2.1 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41

dbus-tools CVE-2022-42010 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

dbus-tools CVE-2022-42011 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

dbus-tools CVE-2022-42012 中危 1:1.12.8-12.el8_4.2 1:1.12.8-23.el8_7.1 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-10 00:15 修改: 2026-06-17 05:04

dbus-tools CVE-2023-34969 中危 1:1.12.8-12.el8_4.2 1:1.12.8-24.el8_8.1 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-08 03:15 修改: 2026-06-17 06:04

dhcp-client CVE-2022-2928 中危 12:4.3.6-44.0.1.el8 12:4.3.6-49.el8 dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2928

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-07 05:15 修改: 2026-06-17 04:42

libpng CVE-2025-28164 中危 2:1.6.34-5.el8 libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04

libpng CVE-2025-64505 中危 2:1.6.34-5.el8 libpng: LIBPNG heap buffer overflow via malformed palette index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

libpng CVE-2025-64506 中危 2:1.6.34-5.el8 libpng: LIBPNG heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

libpng CVE-2026-22695 中危 2:1.6.34-5.el8 2:1.6.34-10.el8_10 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

libpng CVE-2026-22801 中危 2:1.6.34-5.el8 2:1.6.34-10.el8_10 libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

libpng CVE-2026-33416 中危 2:1.6.34-5.el8 2:1.6.34-11.el8_10 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

libpng CVE-2026-34757 中危 2:1.6.34-5.el8 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39

libsepol CVE-2021-36084 中危 2.9-2.el8 2.9-3.el8 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol CVE-2021-36085 中危 2.9-2.el8 2.9-3.el8 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol CVE-2021-36086 中危 2.9-2.el8 2.9-3.el8 libsepol: use-after-free in cil_reset_classpermission()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol CVE-2021-36087 中危 2.9-2.el8 2.9-3.el8 libsepol: heap-based buffer overflow in ebitmap_match_any()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsmartcols CVE-2025-14104 中危 2.32.1-27.el8 2.32.1-48.el8_10 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

libsmartcols CVE-2026-13595 中危 2.32.1-27.el8 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libsmartcols CVE-2026-27456 中危 2.32.1-27.el8 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

libsolv CVE-2021-33928 中危 0.7.16-2.el8 0.7.16-3.el8_4 libsolv: heap-based buffer overflow in pool_installable() in src/repo.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33928

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-02 15:15 修改: 2026-06-17 03:55

libsolv CVE-2021-33929 中危 0.7.16-2.el8 0.7.16-3.el8_4 libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33929

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-02 15:15 修改: 2026-06-17 03:55

libsolv CVE-2021-33930 中危 0.7.16-2.el8 0.7.16-3.el8_4 libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33930

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-02 15:15 修改: 2026-06-17 03:55

libsolv CVE-2021-33938 中危 0.7.16-2.el8 0.7.16-3.el8_4 libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-02 15:15 修改: 2026-06-17 03:55

libsolv CVE-2026-48864 中危 0.7.16-2.el8 0.7.20-7.el8_10 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48864

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-26 17:16 修改: 2026-07-21 19:10

libsolv CVE-2026-9149 中危 0.7.16-2.el8 libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9149

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-21 00:16 修改: 2026-06-27 00:16

libstdc++ CVE-2020-11023 中危 8.4.1-1.el8 8.5.0-23.el8_10 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-04-29 21:15 修改: 2026-06-17 02:48

libstdc++ CVE-2021-42574 中危 8.4.1-1.el8 8.5.0-4.el8_5 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-01 04:15 修改: 2026-06-17 04:09

libtasn1 CVE-2021-46848 中危 4.13-3.el8 4.13-4.el8_7 libtasn1: Out-of-bound access in ETYPE_OK

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-10-24 14:15 修改: 2026-06-17 04:15

libtasn1 CVE-2024-12133 中危 4.13-3.el8 4.13-5.el8_10 libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-02-10 16:15 修改: 2026-06-30 03:16

dhcp-client CVE-2022-2929 中危 12:4.3.6-44.0.1.el8 12:4.3.6-49.el8 dhcp: DHCP memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2929

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-07 05:15 修改: 2026-06-17 04:42

dhcp-common CVE-2022-2928 中危 12:4.3.6-44.0.1.el8 12:4.3.6-49.el8 dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2928

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-07 05:15 修改: 2026-06-17 04:42

dhcp-common CVE-2022-2929 中危 12:4.3.6-44.0.1.el8 12:4.3.6-49.el8 dhcp: DHCP memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2929

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-07 05:15 修改: 2026-06-17 04:42

dhcp-libs CVE-2022-2928 中危 12:4.3.6-44.0.1.el8 12:4.3.6-49.el8 dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2928

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-07 05:15 修改: 2026-06-17 04:42

libtiff CVE-2017-17095 中危 4.0.9-18.el8 4.0.9-34.el8_10 libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17095

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2017-12-02 06:29 修改: 2026-06-17 01:10

libtiff CVE-2018-10801 中危 4.0.9-18.el8 libtiff: memory leak in bmp2tiff tool

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10801

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-05-08 06:29 修改: 2026-06-17 01:34

libtiff CVE-2018-15209 中危 4.0.9-18.el8 4.0.9-32.el8_10 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15209

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-08-08 04:29 修改: 2026-06-17 01:42

libtiff CVE-2018-16335 中危 4.0.9-18.el8 libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16335

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-09-02 03:29 修改: 2026-06-17 01:44

libtiff CVE-2019-6128 中危 4.0.9-18.el8 libtiff: memory leak in TIFFFdOpen function in tif_unix.c when using pal2rgb

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6128

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-11 05:29 修改: 2026-06-17 02:38

libtiff CVE-2020-19131 中危 4.0.9-18.el8 4.0.9-21.el8 libtiff: a buffer overflow via the "invertImage()" may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19131

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-07 15:15 修改: 2026-06-17 02:59

libtiff CVE-2020-35523 中危 4.0.9-18.el8 4.0.9-20.el8 libtiff: Integer overflow in tif_getimage.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35523

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-09 20:15 修改: 2026-06-17 03:13

libtiff CVE-2020-35524 中危 4.0.9-18.el8 4.0.9-20.el8 libtiff: Heap-based buffer overflow in TIFF2PDF tool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35524

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-09 20:15 修改: 2026-06-17 03:13

libtiff CVE-2022-0561 中危 4.0.9-18.el8 4.0.9-23.el8 libtiff: Denial of Service via crafted TIFF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0561

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-02-11 18:15 修改: 2026-06-17 04:20

libtiff CVE-2022-0562 中危 4.0.9-18.el8 4.0.9-23.el8 libtiff: Null source pointer lead to Denial of Service via crafted TIFF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0562

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-02-11 18:15 修改: 2026-06-17 04:20

libtiff CVE-2022-0865 中危 4.0.9-18.el8 4.0.9-23.el8 libtiff: reachable assertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0865

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-10 17:44 修改: 2026-06-17 04:21

libtiff CVE-2022-0924 中危 4.0.9-18.el8 4.0.9-23.el8 libtiff: Out-of-bounds Read error in tiffcp

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0924

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-11 18:15 修改: 2026-06-17 04:21

libtiff CVE-2022-1355 中危 4.0.9-18.el8 4.0.9-23.el8 libtiff: stack-buffer-overflow in tiffcp.c in main()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1355

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

libtiff CVE-2022-2056 中危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: division by zero issues in tiffcrop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2056

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-30 16:15 修改: 2026-06-17 04:41

libtiff CVE-2022-2057 中危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: division by zero issues in tiffcrop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2057

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-30 16:15 修改: 2026-06-17 04:41

libtiff CVE-2022-2058 中危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: division by zero issues in tiffcrop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2058

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-30 16:15 修改: 2026-06-17 04:41

libtiff CVE-2022-22844 中危 4.0.9-18.el8 4.0.9-23.el8 libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22844

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libtiff CVE-2022-2519 中危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: Double free or corruption in rotateImage() function at tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2519

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:42

libtiff CVE-2022-2867 中危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2867

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-17 22:15 修改: 2026-06-17 04:42

libtiff CVE-2022-2869 中危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2869

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-17 22:15 修改: 2026-06-17 04:42

libtiff CVE-2022-2953 中危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2953

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-29 15:15 修改: 2026-06-17 04:42

libtiff CVE-2022-3570 中危 4.0.9-18.el8 libtiff: heap Buffer overflows in tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3570

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-21 16:15 修改: 2026-06-17 04:59

libtiff CVE-2022-3598 中危 4.0.9-18.el8 libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3598

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-21 16:15 修改: 2026-06-17 04:59

libtiff CVE-2022-3599 中危 4.0.9-18.el8 libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3599

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-21 16:15 修改: 2026-06-17 04:59

libtiff CVE-2022-3627 中危 4.0.9-18.el8 4.0.9-27.el8 libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3627

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-21 16:15 修改: 2026-06-17 04:59

libtiff CVE-2022-3970 中危 4.0.9-18.el8 4.0.9-27.el8 libtiff: integer overflow in function TIFFReadRGBATileExt of the file

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3970

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-13 08:15 修改: 2026-06-17 05:00

libtiff CVE-2022-40090 中危 4.0.9-18.el8 libtiff: infinite loop via a crafted TIFF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40090

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:00

libtiff CVE-2022-4645 中危 4.0.9-18.el8 4.0.9-31.el8 libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4645

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-03 16:15 修改: 2026-06-17 05:21

libtiff CVE-2022-48281 中危 4.0.9-18.el8 4.0.9-28.el8_8 libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48281

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-23 03:15 修改: 2026-06-17 05:14

libtiff CVE-2023-0795 中危 4.0.9-18.el8 libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0795

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-0796 中危 4.0.9-18.el8 libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0796

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-0797 中危 4.0.9-18.el8 libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0797

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-0798 中危 4.0.9-18.el8 libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0798

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-0799 中危 4.0.9-18.el8 libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0799

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-0800 中危 4.0.9-18.el8 4.0.9-29.el8_8 libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0800

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-0801 中危 4.0.9-18.el8 4.0.9-29.el8_8 libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0801

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-0802 中危 4.0.9-18.el8 4.0.9-29.el8_8 libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0802

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-0803 中危 4.0.9-18.el8 4.0.9-29.el8_8 libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0803

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-0804 中危 4.0.9-18.el8 4.0.9-29.el8_8 libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0804

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-13 23:15 修改: 2026-06-17 05:26

libtiff CVE-2023-25433 中危 4.0.9-18.el8 4.0.9-32.el8_10 libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25433

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-29 20:15 修改: 2026-06-17 05:41

libtiff CVE-2023-25434 中危 4.0.9-18.el8 libtiff: heap-buffer overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25434

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-14 20:15 修改: 2026-06-17 05:41

libtiff CVE-2023-25435 中危 4.0.9-18.el8 libtiff: tiffcrop: heap-buffer-overflow in extractContigSamplesShifted8bits() in tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25435

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-21 20:15 修改: 2026-06-17 05:41

libtiff CVE-2023-26965 中危 4.0.9-18.el8 libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26965

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-14 21:15 修改: 2026-06-17 05:44

libtiff CVE-2023-26966 中危 4.0.9-18.el8 libtiff: Buffer Overflow in uv_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26966

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-29 20:15 修改: 2026-06-17 05:44

libtiff CVE-2023-30086 中危 4.0.9-18.el8 libtiff: Heap buffer overflow in tiffcp() at tiffcp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-30086

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-09 16:15 修改: 2026-07-09 01:18

libtiff CVE-2023-30774 中危 4.0.9-18.el8 libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-30774

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-19 15:15 修改: 2026-06-17 05:55

libtiff CVE-2023-30775 中危 4.0.9-18.el8 libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-30775

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-19 15:15 修改: 2026-06-17 05:55

libtiff CVE-2023-3164 中危 4.0.9-18.el8 libtiff: heap-buffer-overflow in extractImageSection()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3164

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-02 12:15 修改: 2026-06-17 06:13

libtiff CVE-2023-3316 中危 4.0.9-18.el8 libtiff: tiffcrop: null pointer dereference in TIFFClose()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3316

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-19 12:15 修改: 2026-06-17 06:13

libtiff CVE-2023-3576 中危 4.0.9-18.el8 libtiff: memory leak in tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3576

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-04 19:15 修改: 2026-06-23 18:17

libtiff CVE-2023-3618 中危 4.0.9-18.el8 libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3618

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-12 15:15 修改: 2026-06-17 06:14

libtiff CVE-2023-40745 中危 4.0.9-18.el8 libtiff: integer overflow in tiffcp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40745

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-05 19:15 修改: 2026-06-17 06:19

libtiff CVE-2023-41175 中危 4.0.9-18.el8 libtiff: potential integer overflow in raw2tiff.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41175

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-05 19:15 修改: 2026-06-17 06:20

libtiff CVE-2023-52355 中危 4.0.9-18.el8 libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52355

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-25 20:15 修改: 2026-07-20 05:16

libtiff CVE-2023-52356 中危 4.0.9-18.el8 4.0.9-32.el8_10 libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52356

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-25 20:15 修改: 2026-06-17 06:42

libtiff CVE-2023-6277 中危 4.0.9-18.el8 libtiff: Out-of-memory in TIFFOpen via a craft file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6277

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-24 19:15 修改: 2026-06-17 06:50

libtiff CVE-2024-7006 中危 4.0.9-18.el8 4.0.9-33.el8_10 libtiff: NULL pointer dereference in tif_dirinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7006

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-12 13:38 修改: 2026-06-17 08:19

libtiff CVE-2025-61143 中危 4.0.9-18.el8 libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61143

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50

libtiff CVE-2025-61144 中危 4.0.9-18.el8 libtiff: libtiff: Denial of Service via buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61144

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50

libtiff CVE-2025-61145 中危 4.0.9-18.el8 libtiff: libtiff: Denial of service via double free in tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61145

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50

libtiff CVE-2025-8851 中危 4.0.9-18.el8 libtiff: LibTIFF Stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8851

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-08-11 14:15 修改: 2026-06-17 10:07

libtirpc CVE-2021-46828 中危 1.1.4-4.el8 1.1.4-6.el8 libtirpc: DoS vulnerability with lots of connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46828

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-20 06:15 修改: 2026-06-17 04:15

libuuid CVE-2025-14104 中危 2.32.1-27.el8 2.32.1-48.el8_10 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

libuuid CVE-2026-13595 中危 2.32.1-27.el8 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

libuuid CVE-2026-27456 中危 2.32.1-27.el8 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

dhcp-libs CVE-2022-2929 中危 12:4.3.6-44.0.1.el8 12:4.3.6-49.el8 dhcp: DHCP memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2929

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-07 05:15 修改: 2026-06-17 04:42

dnf CVE-2021-3445 中危 4.4.2-11.el8 4.7.0-4.el8 libdnf: Signature verification bypass via signature placed in the main RPM header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-19 14:15 修改: 2026-06-17 04:05

dnf-data CVE-2021-3445 中危 4.4.2-11.el8 4.7.0-4.el8 libdnf: Signature verification bypass via signature placed in the main RPM header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-19 14:15 修改: 2026-06-17 04:05

avahi-libs CVE-2023-38472 中危 0.7-20.el8 0.7-21.el8_9.1 avahi: Reachable assertion in avahi_rdata_parse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38472

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-02 15:15 修改: 2026-06-17 06:10

avahi-libs CVE-2023-38473 中危 0.7-20.el8 0.7-21.el8_9.1 avahi: Reachable assertion in avahi_alternative_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38473

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-02 16:15 修改: 2026-06-17 06:10

libxml2 CVE-2016-3709 中危 2.9.7-9.el8_4.2 2.9.7-15.el8 libxml2: Incorrect server side include parsing can lead to XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3709

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-28 17:15 修改: 2026-06-17 00:46

libxml2 CVE-2022-23308 中危 2.9.7-9.el8_4.2 2.9.7-12.el8_5 libxml2: Use-after-free of ID and IDREF attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23308

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-02-26 05:15 修改: 2026-06-17 04:29

libxml2 CVE-2022-29824 中危 2.9.7-9.el8_4.2 2.9.7-13.el8_6.1 libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29824

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-03 03:15 修改: 2026-06-17 04:40

libxml2 CVE-2022-40303 中危 2.9.7-9.el8_4.2 2.9.7-15.el8_7.1 libxml2: integer overflows with XML_PARSE_HUGE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40303

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-23 00:15 修改: 2026-06-17 05:01

libxml2 CVE-2022-40304 中危 2.9.7-9.el8_4.2 2.9.7-15.el8_7.1 libxml2: dict corruption caused by entity reference cycles

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40304

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-23 18:15 修改: 2026-06-17 05:01

libxml2 CVE-2022-49043 中危 2.9.7-9.el8_4.2 2.9.7-18.el8_10.2 libxml: use-after-free in xmlXIncludeAddNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-49043

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-26 06:15 修改: 2026-06-17 05:16

libxml2 CVE-2023-28484 中危 2.9.7-9.el8_4.2 2.9.7-16.el8_8.1 libxml2: NULL dereference in xmlSchemaFixupComplexType

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28484

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-24 21:15 修改: 2026-06-17 05:47

libxml2 CVE-2023-29469 中危 2.9.7-9.el8_4.2 2.9.7-16.el8_8.1 libxml2: Hashing of empty dict strings isn't deterministic

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29469

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-24 21:15 修改: 2026-06-17 05:50

libxml2 CVE-2023-39615 中危 2.9.7-9.el8_4.2 2.9.7-18.el8_9 libxml2: crafted xml can cause global buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39615

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-29 17:15 修改: 2026-06-17 06:12

libxml2 CVE-2024-25062 中危 2.9.7-9.el8_4.2 2.9.7-18.el8_10.1 libxml2: use-after-free in XMLReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-04 16:15 修改: 2026-06-17 07:15

libxml2 CVE-2025-32414 中危 2.9.7-9.el8_4.2 2.9.7-20.el8_10 libxml2: Out-of-Bounds Read in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32414

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-08 03:15 修改: 2026-06-17 09:11

libxml2 CVE-2025-32415 中危 2.9.7-9.el8_4.2 2.9.7-21.el8_10.3 libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32415

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-17 17:15 修改: 2026-06-17 09:11

libxml2 CVE-2025-6021 中危 2.9.7-9.el8_4.2 2.9.7-21.el8_10.1 libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6021

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-12 13:15 修改: 2026-06-30 11:16

libxml2 CVE-2025-9714 中危 2.9.7-9.el8_4.2 2.9.7-21.el8_10.4 libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9714

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-10 19:15 修改: 2026-06-17 10:09

libxml2 CVE-2026-0990 中危 2.9.7-9.el8_4.2 libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0990

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-15 15:15 修改: 2026-06-30 20:18

libxml2 CVE-2026-11979 中危 2.9.7-9.el8_4.2 libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11979

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 14:16 修改: 2026-06-30 20:22

libxml2 CVE-2026-1757 中危 2.9.7-9.el8_4.2 libxml2: Memory Leak Leading to Local Denial of Service in xmllint Interactive Shell

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1757

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-02 13:15 修改: 2026-06-17 10:16

libxml2 CVE-2026-6653 中危 2.9.7-9.el8_4.2 libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6653

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-22 14:17 修改: 2026-07-14 16:00

libxml2 CVE-2026-6732 中危 2.9.7-9.el8_4.2 libxml2: libxml2: Denial of Service via crafted XSD-validated document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6732

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-23 23:16 修改: 2026-06-30 20:16

libzstd CVE-2022-4899 中危 1.4.4-1.el8 zstd: mysql: buffer overrun in util.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22

lz4-libs CVE-2019-17543 中危 1.8.3-3.el8_4 1.8.3-5.el8_10 lz4: heap-based buffer overflow in LZ4_write32

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17543

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-10-14 02:15 修改: 2026-06-17 02:24

ncurses-base CVE-2019-17594 中危 6.1-7.20180224.el8 6.1-9.20180224.el8 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

ncurses-base CVE-2019-17595 中危 6.1-7.20180224.el8 6.1-9.20180224.el8 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

ncurses-base CVE-2023-29491 中危 6.1-7.20180224.el8 6.1-9.20180224.el8_8.1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-04-14 01:15 修改: 2026-06-17 05:50

ncurses-libs CVE-2019-17594 中危 6.1-7.20180224.el8 6.1-9.20180224.el8 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

ncurses-libs CVE-2019-17595 中危 6.1-7.20180224.el8 6.1-9.20180224.el8 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

ncurses-libs CVE-2023-29491 中危 6.1-7.20180224.el8 6.1-9.20180224.el8_8.1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-04-14 01:15 修改: 2026-06-17 05:50

nettle CVE-2021-20231 中危 3.4.1-4.el8_3 3.4.1-7.el8 gnutls: Use after free in client key_share extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20231

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-12 19:15 修改: 2026-06-17 03:33

nettle CVE-2021-20232 中危 3.4.1-4.el8_3 3.4.1-7.el8 gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20232

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-12 19:15 修改: 2026-06-17 03:33

nettle CVE-2021-3580 中危 3.4.1-4.el8_3 3.4.1-7.el8 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

nmap-ncat CVE-2018-25282 中危 2:7.70-5.el8 nmap: zenmap: Nmap/ZenMap: Denial of Service via XML entity expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25282

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-26 22:17 修改: 2026-06-17 01:55

nmap-ncat CVE-2026-58058 中危 2:7.70-5.el8 nmap: Nmap: Denial of Service via crafted IPv6 response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58058

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:31

nspr CVE-2020-25648 中危 4.25.0-2.el8_2 4.32.0-1.el8_4 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-10-20 22:15 修改: 2026-06-17 03:07

avahi-libs CVE-2024-52615 中危 0.7-20.el8 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

avahi-libs CVE-2024-52616 中危 0.7-20.el8 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

nss CVE-2020-25648 中危 3.53.1-17.el8_3 3.67.0-6.el8_4 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-10-20 22:15 修改: 2026-06-17 03:07

nss CVE-2023-5388 中危 3.53.1-17.el8_3 3.90.0-4.el8_9 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-19 12:15 修改: 2026-06-17 06:48

nss CVE-2023-6135 中危 3.53.1-17.el8_3 3.90.0-6.el8_9 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-19 14:15 修改: 2026-06-17 06:50

nss CVE-2024-6602 中危 3.53.1-17.el8_3 3.101.0-7.el8_8 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18

avahi-libs CVE-2025-59529 中危 0.7-20.el8 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

avahi-libs CVE-2025-68276 中危 0.7-20.el8 avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68276

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:58

nss-softokn CVE-2020-25648 中危 3.53.1-17.el8_3 3.67.0-6.el8_4 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-10-20 22:15 修改: 2026-06-17 03:07

nss-softokn CVE-2023-5388 中危 3.53.1-17.el8_3 3.90.0-4.el8_9 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-19 12:15 修改: 2026-06-17 06:48

nss-softokn CVE-2023-6135 中危 3.53.1-17.el8_3 3.90.0-6.el8_9 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-19 14:15 修改: 2026-06-17 06:50

nss-softokn CVE-2024-6602 中危 3.53.1-17.el8_3 3.101.0-7.el8_8 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18

avahi-libs CVE-2025-68468 中危 0.7-20.el8 avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68468

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

bind-export-libs CVE-2021-25214 中危 32:9.11.26-4.el8_4 32:9.11.26-6.el8 bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25214

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-29 01:15 修改: 2026-06-17 03:41

nss-softokn-freebl CVE-2020-25648 中危 3.53.1-17.el8_3 3.67.0-6.el8_4 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-10-20 22:15 修改: 2026-06-17 03:07

nss-softokn-freebl CVE-2023-5388 中危 3.53.1-17.el8_3 3.90.0-4.el8_9 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-19 12:15 修改: 2026-06-17 06:48

nss-softokn-freebl CVE-2023-6135 中危 3.53.1-17.el8_3 3.90.0-6.el8_9 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-19 14:15 修改: 2026-06-17 06:50

nss-softokn-freebl CVE-2024-6602 中危 3.53.1-17.el8_3 3.101.0-7.el8_8 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18

bind-export-libs CVE-2021-25219 中危 32:9.11.26-4.el8_4 32:9.11.36-3.el8 bind: Lame cache can be abused to severely degrade resolver performance

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25219

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-27 21:15 修改: 2026-06-17 03:41

bind-export-libs CVE-2021-25220 中危 32:9.11.26-4.el8_4 32:9.11.36-5.el8 bind: DNS forwarders - cache poisoning vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25220

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-23 13:15 修改: 2026-06-17 03:41

nss-sysinit CVE-2020-25648 中危 3.53.1-17.el8_3 3.67.0-6.el8_4 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-10-20 22:15 修改: 2026-06-17 03:07

nss-sysinit CVE-2023-5388 中危 3.53.1-17.el8_3 3.90.0-4.el8_9 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-19 12:15 修改: 2026-06-17 06:48

nss-sysinit CVE-2023-6135 中危 3.53.1-17.el8_3 3.90.0-6.el8_9 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-19 14:15 修改: 2026-06-17 06:50

nss-sysinit CVE-2024-6602 中危 3.53.1-17.el8_3 3.101.0-7.el8_8 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18

bind-export-libs CVE-2022-2795 中危 32:9.11.26-4.el8_4 32:9.11.36-8.el8 bind: processing large delegations may severely degrade resolver performance

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2795

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-21 11:15 修改: 2026-06-17 04:42

bind-export-libs CVE-2022-3094 中危 32:9.11.26-4.el8_4 32:9.11.36-11.el8_9 bind: flooding with UPDATE requests may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3094

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-26 21:15 修改: 2026-06-17 04:58

nss-util CVE-2020-25648 中危 3.53.1-17.el8_3 3.67.0-6.el8_4 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-10-20 22:15 修改: 2026-06-17 03:07

nss-util CVE-2023-5388 中危 3.53.1-17.el8_3 3.90.0-4.el8_9 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-19 12:15 修改: 2026-06-17 06:48

nss-util CVE-2023-6135 中危 3.53.1-17.el8_3 3.90.0-6.el8_9 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-19 14:15 修改: 2026-06-17 06:50

nss-util CVE-2024-6602 中危 3.53.1-17.el8_3 3.101.0-7.el8_8 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18

openldap CVE-2026-22185 中危 2.4.46-17.el8_4 OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-07 21:16 修改: 2026-06-17 10:19

bind-export-libs CVE-2026-3592 中危 32:9.11.26-4.el8_4 bind: Amplification vulnerabilities via self-pointed glue records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3592

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 13:16 修改: 2026-06-17 10:43

bind-export-libs CVE-2026-5950 中危 32:9.11.26-4.el8_4 bind: Unbounded resend loop in BIND 9 resolver

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5950

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 13:16 修改: 2026-06-17 10:59

binutils CVE-2018-1000876 中危 2.30-93.el8 binutils: integer overflow leads to heap-based buffer overflow in objdump

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000876

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-12-20 17:29 修改: 2026-06-17 01:33

openssl CVE-2021-23840 中危 1:1.1.1g-15.el8_3 1:1.1.1k-4.el8 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl CVE-2021-23841 中危 1:1.1.1g-15.el8_3 1:1.1.1k-4.el8 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl CVE-2021-3712 中危 1:1.1.1g-15.el8_3 1:1.1.1k-5.el8_5 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

openssl CVE-2022-1292 中危 1:1.1.1g-15.el8_3 1:1.1.1k-7.el8_6 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

openssl CVE-2022-2068 中危 1:1.1.1g-15.el8_3 1:1.1.1k-7.el8_6 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-21 15:15 修改: 2026-06-17 04:41

openssl CVE-2022-2097 中危 1:1.1.1g-15.el8_3 1:1.1.1k-7.el8_6 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

openssl CVE-2022-4304 中危 1:1.1.1g-15.el8_3 1:1.1.1k-9.el8_7 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl CVE-2022-4450 中危 1:1.1.1g-15.el8_3 1:1.1.1k-9.el8_7 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl CVE-2023-0215 中危 1:1.1.1g-15.el8_3 1:1.1.1k-9.el8_7 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl CVE-2023-0466 中危 1:1.1.1g-15.el8_3 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

openssl CVE-2024-2408 中危 1:1.1.1g-15.el8_3 1:1.1.1k-12.el8_9 php: potential exposure to Marvin attack via unsafe implementation of RSA decryption API

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2408

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-09 20:15 修改: 2026-06-17 07:24

openssl CVE-2025-69419 中危 1:1.1.1g-15.el8_3 1:1.1.1k-15.el8_6 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-9230 中危 1:1.1.1g-15.el8_3 1:1.1.1k-14.el8_10 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18

openssl CVE-2026-28390 中危 1:1.1.1g-15.el8_3 1:1.1.1k-17.el8_6 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

expat CVE-2013-0340 中危 2.2.5-4.el8 2.5.0-1.el8_10 expat: internal entity expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0340

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2014-01-21 18:55 修改: 2026-04-29 01:13

expat CVE-2021-45960 中危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Large number of prefixed XML attributes on a single tag can crash libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-01 19:15 修改: 2026-06-17 04:14

expat CVE-2021-46143 中危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Integer overflow in doProlog in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-06 04:15 修改: 2026-06-17 04:14

openssl-libs CVE-2021-23840 中危 1:1.1.1g-15.el8_3 1:1.1.1k-4.el8 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl-libs CVE-2021-23841 中危 1:1.1.1g-15.el8_3 1:1.1.1k-4.el8 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl-libs CVE-2021-3712 中危 1:1.1.1g-15.el8_3 1:1.1.1k-5.el8_5 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

openssl-libs CVE-2022-1292 中危 1:1.1.1g-15.el8_3 1:1.1.1k-7.el8_6 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

openssl-libs CVE-2022-2068 中危 1:1.1.1g-15.el8_3 1:1.1.1k-7.el8_6 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-21 15:15 修改: 2026-06-17 04:41

openssl-libs CVE-2022-2097 中危 1:1.1.1g-15.el8_3 1:1.1.1k-7.el8_6 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

openssl-libs CVE-2022-4304 中危 1:1.1.1g-15.el8_3 1:1.1.1k-9.el8_7 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl-libs CVE-2022-4450 中危 1:1.1.1g-15.el8_3 1:1.1.1k-9.el8_7 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl-libs CVE-2023-0215 中危 1:1.1.1g-15.el8_3 1:1.1.1k-9.el8_7 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl-libs CVE-2023-0466 中危 1:1.1.1g-15.el8_3 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

openssl-libs CVE-2024-2408 中危 1:1.1.1g-15.el8_3 1:1.1.1k-12.el8_9 php: potential exposure to Marvin attack via unsafe implementation of RSA decryption API

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2408

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-09 20:15 修改: 2026-06-17 07:24

openssl-libs CVE-2025-69419 中危 1:1.1.1g-15.el8_3 1:1.1.1k-15.el8_6 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl-libs CVE-2025-9230 中危 1:1.1.1g-15.el8_3 1:1.1.1k-14.el8_10 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18

openssl-libs CVE-2026-28390 中危 1:1.1.1g-15.el8_3 1:1.1.1k-17.el8_6 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

p11-kit CVE-2026-13757 中危 0.23.22-1.el8 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16

p11-kit-trust CVE-2026-13757 中危 0.23.22-1.el8 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16

expat CVE-2022-22825 中危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Integer overflow in lookup in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

expat CVE-2022-22826 中危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Integer overflow in nextScaffoldPart in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

expat CVE-2022-22827 中危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Integer overflow in storeAtts in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

pam CVE-2024-10041 中危 1.3.1-14.el8 1.3.1-36.el8_10 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16

pam CVE-2024-22365 中危 1.3.1-14.el8 1.3.1-33.el8 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11

pam CVE-2026-12610 中危 1.3.1-14.el8 sssd: Use-after-free crash in SSSD' 'sssd_pam' process

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12610

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-30 10:16 修改: 2026-06-30 20:08

pam CVE-2026-54411 中危 1.3.1-14.el8 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-14 18:17 修改: 2026-06-17 10:58

pcre2 CVE-2022-1586 中危 10.32-2.el8 10.32-3.el8_6 pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1586

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-05-16 21:15 修改: 2026-06-17 04:22

pixman CVE-2022-44638 中危 0.38.4-1.el8 0.38.4-3.el8_9 pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44638

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-03 06:15 修改: 2026-06-17 05:08

expat CVE-2022-23852 中危 2.2.5-4.el8 2.2.5-4.el8_5.3 expat: Integer overflow in function XML_GetBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-24 02:15 修改: 2026-06-17 04:30

expat CVE-2022-23990 中危 2.2.5-4.el8 2.5.0-1.el8_10 expat: integer overflow in the doProlog function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-26 19:15 修改: 2026-06-17 04:31

expat CVE-2022-25313 中危 2.2.5-4.el8 2.2.5-8.el8_6.2 expat: Stack exhaustion in doctype parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

expat CVE-2022-25314 中危 2.2.5-4.el8 2.2.5-8.el8_6.2 expat: Integer overflow in copyString()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25314

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

expat CVE-2022-43680 中危 2.2.5-4.el8 2.2.5-10.el8_7.1 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-10-24 14:15 修改: 2026-06-17 05:07

expat CVE-2023-52425 中危 2.2.5-4.el8 2.2.5-11.el8_9.1 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42

expat CVE-2024-28757 中危 2.2.5-4.el8 2.5.0-1.el8_10 expat: XML Entity Expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-03-10 05:15 修改: 2026-06-17 07:21

expat CVE-2024-45490 中危 2.2.5-4.el8 2.2.5-15.el8_10 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54

expat CVE-2024-45491 中危 2.2.5-4.el8 2.2.5-15.el8_10 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54

expat CVE-2024-45492 中危 2.2.5-4.el8 2.2.5-15.el8_10 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54

platform-python CVE-2007-4559 中危 3.6.8-37.el8 3.6.8-56.el8_9 python: tarfile module directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-4559

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2007-08-28 01:17 修改: 2026-04-23 00:35

platform-python CVE-2015-20107 中危 3.6.8-37.el8 3.6.8-47.el8_6 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15

platform-python CVE-2020-10735 中危 3.6.8-37.el8 3.6.8-48.el8_7.1 python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-09 14:15 修改: 2026-06-17 02:48

platform-python CVE-2021-28861 中危 3.6.8-37.el8 3.6.8-48.el8_7.1 python: open redirection vulnerability in lib/http/server.py may lead to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 01:15 修改: 2026-06-17 03:46

platform-python CVE-2021-3426 中危 3.6.8-37.el8 3.6.8-41.el8 python: Information disclosure via pydoc

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-20 13:15 修改: 2026-06-17 04:05

platform-python CVE-2021-3733 中危 3.6.8-37.el8 3.6.8-39.el8_4 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05

platform-python CVE-2021-4189 中危 3.6.8-37.el8 3.6.8-45.el8 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19

platform-python CVE-2022-0391 中危 3.6.8-37.el8 3.6.8-47.el8_6 python: urllib.parse does not sanitize URLs containing ASCII newline and tabs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20

platform-python CVE-2022-45061 中危 3.6.8-37.el8 3.6.8-48.el8_7.1 python: CPU denial of service via inefficient IDNA decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-09 07:15 修改: 2026-06-17 05:09

platform-python CVE-2022-48560 中危 3.6.8-37.el8 3.6.8-56.el8_9.2 python: use after free in heappushpop() of heapq module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48560

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:15

platform-python CVE-2022-48564 中危 3.6.8-37.el8 3.6.8-56.el8_9.2 python: DoS when processing malformed Apple Property List files in binary format

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48564

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:15

platform-python CVE-2023-27043 中危 3.6.8-37.el8 3.6.8-56.el8_9.3 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44

platform-python CVE-2024-0450 中危 3.6.8-37.el8 3.6.8-62.el8_10 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53

platform-python CVE-2024-11168 中危 3.6.8-37.el8 3.6.8-69.el8_10 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57

platform-python CVE-2024-6232 中危 3.6.8-37.el8 3.6.8-67.el8_10 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17

platform-python CVE-2024-6923 中危 3.6.8-37.el8 3.6.8-67.el8_10 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18

platform-python CVE-2024-9287 中危 3.6.8-37.el8 3.6.8-69.el8_10 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24

platform-python CVE-2025-0938 中危 3.6.8-37.el8 3.6.8-74.el8_10 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-31 18:15 修改: 2026-06-17 08:27

platform-python CVE-2025-11468 中危 3.6.8-37.el8 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

platform-python CVE-2025-12084 中危 3.6.8-37.el8 3.6.8-72.el8_10 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

platform-python CVE-2025-12781 中危 3.6.8-37.el8 cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32

platform-python CVE-2025-13837 中危 3.6.8-37.el8 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

platform-python CVE-2025-15282 中危 3.6.8-37.el8 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

platform-python CVE-2025-15366 中危 3.6.8-37.el8 3.6.8-73.el8_10 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16

platform-python CVE-2025-15367 中危 3.6.8-37.el8 3.6.8-73.el8_10 cpython: POP3 command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

platform-python CVE-2025-4330 中危 3.6.8-37.el8 3.6.8-70.el8_10 cpython: python: Extraction filter bypass for linking outside extraction directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4330

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33

platform-python CVE-2025-4435 中危 3.6.8-37.el8 3.6.8-70.el8_10 cpython: Tarfile extracts filtered members when errorlevel=0

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4435

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33

platform-python CVE-2025-4516 中危 3.6.8-37.el8 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-15 14:15 修改: 2026-06-17 09:33

platform-python CVE-2025-6069 中危 3.6.8-37.el8 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-17 14:15 修改: 2026-06-17 10:01

platform-python CVE-2025-8194 中危 3.6.8-37.el8 3.6.8-71.el8_10 cpython: Cpython infinite loop when parsing a tarfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-28 19:15 修改: 2026-06-17 10:06

platform-python CVE-2025-8291 中危 3.6.8-37.el8 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-07 18:16 修改: 2026-06-17 10:06

platform-python CVE-2026-0672 中危 3.6.8-37.el8 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

platform-python CVE-2026-0865 中危 3.6.8-37.el8 3.6.8-73.el8_10 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

platform-python CVE-2026-11972 中危 3.6.8-37.el8 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16

platform-python CVE-2026-1299 中危 3.6.8-37.el8 3.6.8-73.el8_10 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

platform-python CVE-2026-1502 中危 3.6.8-37.el8 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16

platform-python CVE-2026-3276 中危 3.6.8-37.el8 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43

platform-python CVE-2026-3644 中危 3.6.8-37.el8 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16

platform-python CVE-2026-4224 中危 3.6.8-37.el8 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56

platform-python CVE-2026-42308 中危 3.6.8-37.el8 Pillow: python: Pillow: Denial of Service via integer overflow in font processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42308

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-09 06:16 修改: 2026-06-17 10:47

platform-python CVE-2026-5713 中危 3.6.8-37.el8 python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-14 16:16 修改: 2026-06-17 10:59

platform-python CVE-2026-6019 中危 3.6.8-37.el8 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00

platform-python CVE-2026-7210 中危 3.6.8-37.el8 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02

platform-python-pip CVE-2007-4559 中危 9.0.3-19.el8 9.0.3-23.el8 python: tarfile module directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-4559

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2007-08-28 01:17 修改: 2026-04-23 00:35

platform-python-pip CVE-2023-45803 中危 9.0.3-19.el8 urllib3: Request body not stripped after redirect from 303 status changes request method to GET

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45803

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-17 20:15 修改: 2026-06-17 06:29

platform-python-pip CVE-2025-50181 中危 9.0.3-19.el8 urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50181

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-19 01:15 修改: 2026-06-17 09:34

platform-python-pip CVE-2025-50182 中危 9.0.3-19.el8 urllib3: urllib3 does not control redirects in browsers and Node.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50182

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-19 02:15 修改: 2026-06-17 09:34

platform-python-pip CVE-2026-25645 中危 9.0.3-19.el8 requests: Requests: Security bypass due to predictable temporary file creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25

expat CVE-2024-50602 中危 2.2.5-4.el8 2.2.5-16.el8_10 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-10-27 05:15 修改: 2026-06-17 08:04

platform-python-setuptools CVE-2022-40897 中危 39.2.0-6.el8 39.2.0-6.el8_7.1 pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40897

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-12-23 00:15 修改: 2026-06-17 05:02

platform-python-setuptools CVE-2025-47273 中危 39.2.0-6.el8 39.2.0-9.el8_10 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27

python3-dnf CVE-2021-3445 中危 4.4.2-11.el8 4.7.0-4.el8 libdnf: Signature verification bypass via signature placed in the main RPM header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-19 14:15 修改: 2026-06-17 04:05

python3-hawkey CVE-2021-3445 中危 0.55.0-7.el8 0.63.0-3.el8 libdnf: Signature verification bypass via signature placed in the main RPM header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-19 14:15 修改: 2026-06-17 04:05

python3-libdnf CVE-2021-3445 中危 0.55.0-7.el8 0.63.0-3.el8 libdnf: Signature verification bypass via signature placed in the main RPM header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-19 14:15 修改: 2026-06-17 04:05

expat CVE-2024-8176 中危 2.2.5-4.el8 2.2.5-17.el8_10 libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8176

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-03-14 09:15 修改: 2026-06-30 00:16

expat CVE-2026-32776 中危 2.2.5-4.el8 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

expat CVE-2026-32777 中危 2.2.5-4.el8 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

expat CVE-2026-32778 中危 2.2.5-4.el8 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

expat CVE-2026-50219 中危 2.2.5-4.el8 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-04 06:16 修改: 2026-06-17 10:57

expat CVE-2026-56132 中危 2.2.5-4.el8 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

expat CVE-2026-56403 中危 2.2.5-4.el8 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

expat CVE-2026-56405 中危 2.2.5-4.el8 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14

expat CVE-2026-56406 中危 2.2.5-4.el8 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29

expat CVE-2026-56412 中危 2.2.5-4.el8 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31

python3-libs CVE-2007-4559 中危 3.6.8-37.el8 3.6.8-56.el8_9 python: tarfile module directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-4559

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2007-08-28 01:17 修改: 2026-04-23 00:35

python3-libs CVE-2015-20107 中危 3.6.8-37.el8 3.6.8-47.el8_6 python: mailcap: findmatch() function does not sanitize the second argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15

python3-libs CVE-2020-10735 中危 3.6.8-37.el8 3.6.8-48.el8_7.1 python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-09 14:15 修改: 2026-06-17 02:48

python3-libs CVE-2021-28861 中危 3.6.8-37.el8 3.6.8-48.el8_7.1 python: open redirection vulnerability in lib/http/server.py may lead to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 01:15 修改: 2026-06-17 03:46

python3-libs CVE-2021-3426 中危 3.6.8-37.el8 3.6.8-41.el8 python: Information disclosure via pydoc

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-20 13:15 修改: 2026-06-17 04:05

python3-libs CVE-2021-3733 中危 3.6.8-37.el8 3.6.8-39.el8_4 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05

python3-libs CVE-2021-4189 中危 3.6.8-37.el8 3.6.8-45.el8 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19

python3-libs CVE-2022-0391 中危 3.6.8-37.el8 3.6.8-47.el8_6 python: urllib.parse does not sanitize URLs containing ASCII newline and tabs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20

python3-libs CVE-2022-45061 中危 3.6.8-37.el8 3.6.8-48.el8_7.1 python: CPU denial of service via inefficient IDNA decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-09 07:15 修改: 2026-06-17 05:09

python3-libs CVE-2022-48560 中危 3.6.8-37.el8 3.6.8-56.el8_9.2 python: use after free in heappushpop() of heapq module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48560

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:15

python3-libs CVE-2022-48564 中危 3.6.8-37.el8 3.6.8-56.el8_9.2 python: DoS when processing malformed Apple Property List files in binary format

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48564

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:15

python3-libs CVE-2023-27043 中危 3.6.8-37.el8 3.6.8-56.el8_9.3 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44

python3-libs CVE-2024-0450 中危 3.6.8-37.el8 3.6.8-62.el8_10 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53

python3-libs CVE-2024-11168 中危 3.6.8-37.el8 3.6.8-69.el8_10 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57

python3-libs CVE-2024-6232 中危 3.6.8-37.el8 3.6.8-67.el8_10 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17

python3-libs CVE-2024-6923 中危 3.6.8-37.el8 3.6.8-67.el8_10 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18

python3-libs CVE-2024-9287 中危 3.6.8-37.el8 3.6.8-69.el8_10 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24

python3-libs CVE-2025-0938 中危 3.6.8-37.el8 3.6.8-74.el8_10 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-31 18:15 修改: 2026-06-17 08:27

python3-libs CVE-2025-11468 中危 3.6.8-37.el8 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

python3-libs CVE-2025-12084 中危 3.6.8-37.el8 3.6.8-72.el8_10 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

python3-libs CVE-2025-12781 中危 3.6.8-37.el8 cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32

python3-libs CVE-2025-13837 中危 3.6.8-37.el8 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

python3-libs CVE-2025-15282 中危 3.6.8-37.el8 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

python3-libs CVE-2025-15366 中危 3.6.8-37.el8 3.6.8-73.el8_10 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16

python3-libs CVE-2025-15367 中危 3.6.8-37.el8 3.6.8-73.el8_10 cpython: POP3 command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

python3-libs CVE-2025-4330 中危 3.6.8-37.el8 3.6.8-70.el8_10 cpython: python: Extraction filter bypass for linking outside extraction directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4330

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33

python3-libs CVE-2025-4435 中危 3.6.8-37.el8 3.6.8-70.el8_10 cpython: Tarfile extracts filtered members when errorlevel=0

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4435

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33

python3-libs CVE-2025-4516 中危 3.6.8-37.el8 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-15 14:15 修改: 2026-06-17 09:33

python3-libs CVE-2025-6069 中危 3.6.8-37.el8 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-17 14:15 修改: 2026-06-17 10:01

python3-libs CVE-2025-8194 中危 3.6.8-37.el8 3.6.8-71.el8_10 cpython: Cpython infinite loop when parsing a tarfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-28 19:15 修改: 2026-06-17 10:06

python3-libs CVE-2025-8291 中危 3.6.8-37.el8 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-07 18:16 修改: 2026-06-17 10:06

python3-libs CVE-2026-0672 中危 3.6.8-37.el8 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3-libs CVE-2026-0865 中危 3.6.8-37.el8 3.6.8-73.el8_10 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3-libs CVE-2026-11972 中危 3.6.8-37.el8 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16

python3-libs CVE-2026-1299 中危 3.6.8-37.el8 3.6.8-73.el8_10 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

python3-libs CVE-2026-1502 中危 3.6.8-37.el8 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16

python3-libs CVE-2026-3276 中危 3.6.8-37.el8 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43

python3-libs CVE-2026-3644 中危 3.6.8-37.el8 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16

python3-libs CVE-2026-4224 中危 3.6.8-37.el8 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56

python3-libs CVE-2026-42308 中危 3.6.8-37.el8 Pillow: python: Pillow: Denial of Service via integer overflow in font processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42308

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-09 06:16 修改: 2026-06-17 10:47

python3-libs CVE-2026-5713 中危 3.6.8-37.el8 python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-14 16:16 修改: 2026-06-17 10:59

python3-libs CVE-2026-6019 中危 3.6.8-37.el8 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00

python3-libs CVE-2026-7210 中危 3.6.8-37.el8 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02

python3-pip-wheel CVE-2007-4559 中危 9.0.3-19.el8 9.0.3-23.el8 python: tarfile module directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-4559

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2007-08-28 01:17 修改: 2026-04-23 00:35

python3-pip-wheel CVE-2023-45803 中危 9.0.3-19.el8 urllib3: Request body not stripped after redirect from 303 status changes request method to GET

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45803

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-17 20:15 修改: 2026-06-17 06:29

python3-pip-wheel CVE-2025-50181 中危 9.0.3-19.el8 urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50181

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-19 01:15 修改: 2026-06-17 09:34

python3-pip-wheel CVE-2025-50182 中危 9.0.3-19.el8 urllib3: urllib3 does not control redirects in browsers and Node.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50182

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-19 02:15 修改: 2026-06-17 09:34

python3-pip-wheel CVE-2026-25645 中危 9.0.3-19.el8 requests: Requests: Security bypass due to predictable temporary file creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25

python3-rpm CVE-2021-3521 中危 4.14.3-14.el8_4 4.14.3-19.el8_5.2 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-22 15:15 修改: 2026-06-17 04:05

python3-rpm CVE-2021-35937 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

python3-rpm CVE-2021-35938 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

python3-rpm CVE-2021-35939 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-26 16:15 修改: 2026-06-17 03:57

python3-rpm CVE-2026-44604 中危 4.14.3-14.el8_4 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-28 08:16 修改: 2026-06-23 20:16

file CVE-2019-18218 中危 5.33-16.el8_3.1 5.33-20.el8 file: heap-based buffer overflow in cdf_read_property_info in cdf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18218

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-10-21 05:15 修改: 2026-06-17 02:24

python3-setuptools-wheel CVE-2022-40897 中危 39.2.0-6.el8 39.2.0-6.el8_7.1 pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40897

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-12-23 00:15 修改: 2026-06-17 05:02

python3-setuptools-wheel CVE-2025-47273 中危 39.2.0-6.el8 39.2.0-9.el8_10 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27

file CVE-2019-8905 中危 5.33-16.el8_3.1 file: stack-based buffer over-read in do_core_note in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8905

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42

file-libs CVE-2019-18218 中危 5.33-16.el8_3.1 5.33-20.el8 file: heap-based buffer overflow in cdf_read_property_info in cdf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18218

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-10-21 05:15 修改: 2026-06-17 02:24

file-libs CVE-2019-8905 中危 5.33-16.el8_3.1 file: stack-based buffer over-read in do_core_note in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8905

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42

binutils CVE-2018-18483 中危 2.30-93.el8 binutils: Integer overflow in cplus-dem.c:get_count() allows for denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18483

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-18 21:29 修改: 2026-06-17 01:47

freetype CVE-2022-27404 中危 2.9.1-4.el8_3.1 2.9.1-9.el8 FreeType: Buffer overflow in sfnt_init_face

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27404

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-22 14:15 修改: 2026-06-17 04:36

freetype CVE-2022-27405 中危 2.9.1-4.el8_3.1 2.9.1-9.el8 FreeType: Segmentation violation via FNT_Size_Request

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27405

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

freetype CVE-2022-27406 中危 2.9.1-4.el8_3.1 2.9.1-9.el8 Freetype: Segmentation violation via FT_Request_Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27406

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

freetype CVE-2026-23865 中危 2.9.1-4.el8_3.1 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

fribidi CVE-2022-25308 中危 1.0.4-8.el8 1.0.4-9.el8 fribidi: Stack based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25308

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-06 18:15 修改: 2026-06-17 04:33

python3-unbound CVE-2019-25033 中危 1.7.3-15.el8 1.16.2-2.el8 unbound: integer overflow in the regional allocator via the ALIGN_UP macro

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25033

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-27 06:15 修改: 2026-06-17 02:31

python3-unbound CVE-2022-30698 中危 1.7.3-15.el8 1.16.2-2.el8 unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30698

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-01 15:15 修改: 2026-06-17 04:44

python3-unbound CVE-2022-30699 中危 1.7.3-15.el8 1.16.2-2.el8 unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30699

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-01 15:15 修改: 2026-06-17 04:44

python3-unbound CVE-2022-3204 中危 1.7.3-15.el8 1.16.2-5.el8 unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3204

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-26 14:15 修改: 2026-06-17 04:59

python3-unbound CVE-2024-8508 中危 1.7.3-15.el8 1.16.2-5.8.el8_10 unbound: Unbounded name compression could lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8508

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-03 17:15 修改: 2026-06-17 08:22

python3-unbound CVE-2025-11411 中危 1.7.3-15.el8 unbound: Unbound domain hijacking via promiscuous records

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11411

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-22 13:15 修改: 2026-06-17 08:30

python3-unbound CVE-2026-32792 中危 1.7.3-15.el8 unbound: Packet of death with DNSCrypt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32792

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-06-17 10:36

python3-unbound CVE-2026-42923 中危 1.7.3-15.el8 unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42923

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-06-17 10:48

python3-unbound CVE-2026-42960 中危 1.7.3-15.el8 unbound: Unbound DNS Cache Poisoning via Promiscuous Additional Section RRSet Acceptance

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42960

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-06-17 10:48

python3-unbound CVE-2026-44608 中危 1.7.3-15.el8 unbound: Unbound: Denial of Service due to locking inconsistency during RPZ XFR reload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44608

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-06-17 10:51

rpm CVE-2021-3521 中危 4.14.3-14.el8_4 4.14.3-19.el8_5.2 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-22 15:15 修改: 2026-06-17 04:05

rpm CVE-2021-35937 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

rpm CVE-2021-35938 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

rpm CVE-2021-35939 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-26 16:15 修改: 2026-06-17 03:57

rpm CVE-2026-44604 中危 4.14.3-14.el8_4 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-28 08:16 修改: 2026-06-23 20:16

rpm-build-libs CVE-2021-3521 中危 4.14.3-14.el8_4 4.14.3-19.el8_5.2 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-22 15:15 修改: 2026-06-17 04:05

rpm-build-libs CVE-2021-35937 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

rpm-build-libs CVE-2021-35938 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

rpm-build-libs CVE-2021-35939 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-26 16:15 修改: 2026-06-17 03:57

rpm-build-libs CVE-2026-44604 中危 4.14.3-14.el8_4 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-28 08:16 修改: 2026-06-23 20:16

rpm-libs CVE-2021-3521 中危 4.14.3-14.el8_4 4.14.3-19.el8_5.2 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-22 15:15 修改: 2026-06-17 04:05

rpm-libs CVE-2021-35937 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

rpm-libs CVE-2021-35938 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

rpm-libs CVE-2021-35939 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-26 16:15 修改: 2026-06-17 03:57

rpm-libs CVE-2026-44604 中危 4.14.3-14.el8_4 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-28 08:16 修改: 2026-06-23 20:16

rpm-plugin-systemd-inhibit CVE-2021-3521 中危 4.14.3-14.el8_4 4.14.3-19.el8_5.2 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-22 15:15 修改: 2026-06-17 04:05

rpm-plugin-systemd-inhibit CVE-2021-35937 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

rpm-plugin-systemd-inhibit CVE-2021-35938 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 03:57

rpm-plugin-systemd-inhibit CVE-2021-35939 中危 4.14.3-14.el8_4 4.14.3-28.el8_9 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-26 16:15 修改: 2026-06-17 03:57

rpm-plugin-systemd-inhibit CVE-2026-44604 中危 4.14.3-14.el8_4 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-28 08:16 修改: 2026-06-23 20:16

sed CVE-2026-5958 中危 4.5-2.el8 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59

fribidi CVE-2022-25309 中危 1.0.4-8.el8 1.0.4-9.el8 fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25309

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-06 18:15 修改: 2026-06-17 04:33

sqlite-libs CVE-2019-13750 中危 3.26.0-13.el8 3.26.0-15.el8 sqlite: dropping of shadow tables not restricted in defensive mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13750

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-12-10 22:15 修改: 2026-06-17 02:17

sqlite-libs CVE-2019-13751 中危 3.26.0-13.el8 3.26.0-15.el8 sqlite: fts3: improve detection of corrupted records

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13751

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-12-10 22:15 修改: 2026-06-17 02:17

sqlite-libs CVE-2019-19603 中危 3.26.0-13.el8 3.26.0-15.el8 sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19603

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-12-09 19:15 修改: 2026-06-17 02:26

sqlite-libs CVE-2019-5827 中危 3.26.0-13.el8 3.26.0-15.el8 sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5827

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-06-27 17:15 修改: 2026-06-17 02:38

sqlite-libs CVE-2020-13435 中危 3.26.0-13.el8 3.26.0-15.el8 sqlite: NULL pointer dereference in sqlite3ExprCodeTarget()

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13435

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-05-24 22:15 修改: 2026-06-17 02:53

sqlite-libs CVE-2020-24736 中危 3.26.0-13.el8 3.26.0-18.el8_8 sqlite: Crash due to misuse of window functions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24736

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-11 18:15 修改: 2026-06-17 03:06

sqlite-libs CVE-2020-35527 中危 3.26.0-13.el8 3.26.0-16.el8_6 sqlite: Out of bounds access during table rename

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35527

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-01 18:15 修改: 2026-06-17 03:13

sqlite-libs CVE-2022-35737 中危 3.26.0-13.el8 3.26.0-17.el8_7 sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-03 06:15 修改: 2026-06-17 04:52

sqlite-libs CVE-2023-7104 中危 3.26.0-13.el8 3.26.0-19.el8_9 sqlite: heap-buffer-overflow at sessionfuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-29 10:15 修改: 2026-06-17 06:52

squashfs-tools CVE-2021-40153 中危 4.3-20.el8 4.3-21.el8 squashfs-tools: unvalidated filepaths allow writing outside of destination

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40153

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-27 15:15 修改: 2026-06-17 04:06

squashfs-tools CVE-2021-41072 中危 4.3-20.el8 4.3-21.el8 squashfs-tools: possible Directory Traversal via symbolic link

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41072

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-14 01:15 修改: 2026-06-17 04:07

binutils CVE-2018-20623 中危 2.30-93.el8 binutils: Use-after-free in the error function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20623

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-12-31 19:29 修改: 2026-06-17 01:53

systemd CVE-2018-20839 中危 239-45.el8_4.2 systemd: mishandling of the current keyboard mode check leading to passwords being disclosed in cleartext to attacker

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20839

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-05-17 04:29 修改: 2026-06-17 01:53

systemd CVE-2022-3821 中危 239-45.el8_4.2 239-68.el8_7.1 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

systemd CVE-2022-4415 中危 239-45.el8_4.2 239-68.el8_7.4 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20

systemd CVE-2023-26604 中危 239-45.el8_4.2 239-74.el8_8.2 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-03 16:15 修改: 2026-06-17 05:43

systemd CVE-2023-7008 中危 239-45.el8_4.2 239-82.el8 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

systemd CVE-2025-4598 中危 239-45.el8_4.2 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-30 14:15 修改: 2026-06-30 11:16

systemd CVE-2026-29111 中危 239-45.el8_4.2 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd CVE-2026-4105 中危 239-45.el8_4.2 systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-13 19:55 修改: 2026-06-17 10:55

gdk-pixbuf2 CVE-2022-48622 中危 2.36.12-5.el8 2.36.12-6.el8_10 gnome: heap memory corruption on gdk-pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48622

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-26 09:15 修改: 2026-06-17 05:15

systemd-libs CVE-2018-20839 中危 239-45.el8_4.2 systemd: mishandling of the current keyboard mode check leading to passwords being disclosed in cleartext to attacker

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20839

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-05-17 04:29 修改: 2026-06-17 01:53

systemd-libs CVE-2022-3821 中危 239-45.el8_4.2 239-68.el8_7.1 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

systemd-libs CVE-2022-4415 中危 239-45.el8_4.2 239-68.el8_7.4 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20

systemd-libs CVE-2023-26604 中危 239-45.el8_4.2 239-74.el8_8.2 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-03 16:15 修改: 2026-06-17 05:43

systemd-libs CVE-2023-7008 中危 239-45.el8_4.2 239-82.el8 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

systemd-libs CVE-2025-4598 中危 239-45.el8_4.2 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-30 14:15 修改: 2026-06-30 11:16

systemd-libs CVE-2026-29111 中危 239-45.el8_4.2 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd-libs CVE-2026-4105 中危 239-45.el8_4.2 systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-13 19:55 修改: 2026-06-17 10:55

gdk-pixbuf2 CVE-2025-7345 中危 2.36.12-5.el8 2.36.12-7.el8_10 gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7345

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-08 14:15 修改: 2026-06-30 02:16

systemd-pam CVE-2018-20839 中危 239-45.el8_4.2 systemd: mishandling of the current keyboard mode check leading to passwords being disclosed in cleartext to attacker

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20839

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-05-17 04:29 修改: 2026-06-17 01:53

systemd-pam CVE-2022-3821 中危 239-45.el8_4.2 239-68.el8_7.1 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

systemd-pam CVE-2022-4415 中危 239-45.el8_4.2 239-68.el8_7.4 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20

systemd-pam CVE-2023-26604 中危 239-45.el8_4.2 239-74.el8_8.2 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-03 16:15 修改: 2026-06-17 05:43

systemd-pam CVE-2023-7008 中危 239-45.el8_4.2 239-82.el8 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

systemd-pam CVE-2025-4598 中危 239-45.el8_4.2 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-30 14:15 修改: 2026-06-30 11:16

systemd-pam CVE-2026-29111 中危 239-45.el8_4.2 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd-pam CVE-2026-4105 中危 239-45.el8_4.2 systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-13 19:55 修改: 2026-06-17 10:55

binutils CVE-2018-20671 中危 2.30-93.el8 binutils: Integer overflow in load_specific_debug_section function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20671

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-04 16:29 修改: 2026-06-17 01:53

systemd-udev CVE-2018-20839 中危 239-45.el8_4.2 systemd: mishandling of the current keyboard mode check leading to passwords being disclosed in cleartext to attacker

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20839

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-05-17 04:29 修改: 2026-06-17 01:53

systemd-udev CVE-2022-3821 中危 239-45.el8_4.2 239-68.el8_7.1 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

systemd-udev CVE-2022-4415 中危 239-45.el8_4.2 239-68.el8_7.4 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20

systemd-udev CVE-2023-26604 中危 239-45.el8_4.2 239-74.el8_8.2 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-03 16:15 修改: 2026-06-17 05:43

systemd-udev CVE-2023-7008 中危 239-45.el8_4.2 239-82.el8 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

systemd-udev CVE-2025-4598 中危 239-45.el8_4.2 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-30 14:15 修改: 2026-06-30 11:16

systemd-udev CVE-2026-29111 中危 239-45.el8_4.2 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd-udev CVE-2026-4105 中危 239-45.el8_4.2 systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-13 19:55 修改: 2026-06-17 10:55

tar CVE-2005-2541 中危 2:1.30-5.el8 tar: does not properly warn the user when extracting setuid or setgid files

漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27

tar CVE-2022-48303 中危 2:1.30-5.el8 2:1.30-6.el8_7.1 tar: heap buffer overflow at from_header() in list.c via specially crafted checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-01-30 04:15 修改: 2026-06-17 05:14

tar CVE-2025-45582 中危 2:1.30-5.el8 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25

tar CVE-2025-64118 中危 2:1.30-5.el8 node-tar: tar: node-tar: Information disclosure via reading a truncated tar file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64118

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-10-30 18:15 修改: 2026-06-17 09:53

tar CVE-2026-33056 中危 2:1.30-5.el8 tar-rs: tar-rs: Arbitrary directory permission modification via crafted tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33056

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-03-20 08:16 修改: 2026-06-17 10:36

tar CVE-2026-53655 中危 2:1.30-5.el8 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03

tar CVE-2026-5704 中危 2:1.30-5.el8 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59

tpm2-tss CVE-2023-22745 中危 2.3.2-3.el8 2.3.2-5.el8 tpm2-tss: Buffer Overlow in TSS2_RC_Decode

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22745

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-19 23:15 修改: 2026-06-17 05:36

gdk-pixbuf2-modules CVE-2022-48622 中危 2.36.12-5.el8 2.36.12-6.el8_10 gnome: heap memory corruption on gdk-pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48622

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-26 09:15 修改: 2026-06-17 05:15

gdk-pixbuf2-modules CVE-2025-7345 中危 2.36.12-5.el8 2.36.12-7.el8_10 gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7345

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-08 14:15 修改: 2026-06-30 02:16

binutils CVE-2019-9075 中危 2.30-93.el8 binutils: heap-based buffer overflow in function _bfd_archive_64_bit_slurp_armap in archive64.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9075

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-24 00:29 修改: 2026-06-17 02:43

binutils CVE-2019-9077 中危 2.30-93.el8 binutils: heap-based buffer overflow in function process_mips_specific in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9077

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-24 00:29 修改: 2026-06-17 02:43

giflib CVE-2023-48161 中危 5.1.4-3.el8 giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48161

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-22 06:15 修改: 2026-06-17 06:33

giflib CVE-2025-31344 中危 5.1.4-3.el8 giflib: The giflib open-source component has a buffer overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31344

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-14 08:15 修改: 2026-06-17 09:10

binutils CVE-2021-20197 中危 2.30-93.el8 2.30-108.el8 binutils: Race window allows users to own arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20197

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-26 17:15 修改: 2026-06-17 03:33

glib2 CVE-2021-27218 中危 2.56.4-10.el8_4 2.56.4-10.el8_4.1 glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27218

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:44

glib2 CVE-2021-3800 中危 2.56.4-10.el8_4 2.56.4-156.el8 glib2: Possible privilege escalation thourgh pkexec and aliases

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3800

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 16:15 修改: 2026-06-17 04:05

unbound-libs CVE-2019-25033 中危 1.7.3-15.el8 1.16.2-2.el8 unbound: integer overflow in the regional allocator via the ALIGN_UP macro

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25033

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-27 06:15 修改: 2026-06-17 02:31

unbound-libs CVE-2022-30698 中危 1.7.3-15.el8 1.16.2-2.el8 unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30698

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-01 15:15 修改: 2026-06-17 04:44

unbound-libs CVE-2022-30699 中危 1.7.3-15.el8 1.16.2-2.el8 unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30699

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-01 15:15 修改: 2026-06-17 04:44

unbound-libs CVE-2022-3204 中危 1.7.3-15.el8 1.16.2-5.el8 unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3204

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-26 14:15 修改: 2026-06-17 04:59

unbound-libs CVE-2024-8508 中危 1.7.3-15.el8 1.16.2-5.8.el8_10 unbound: Unbounded name compression could lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8508

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-03 17:15 修改: 2026-06-17 08:22

unbound-libs CVE-2025-11411 中危 1.7.3-15.el8 unbound: Unbound domain hijacking via promiscuous records

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11411

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-22 13:15 修改: 2026-06-17 08:30

unbound-libs CVE-2026-32792 中危 1.7.3-15.el8 unbound: Packet of death with DNSCrypt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32792

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-06-17 10:36

unbound-libs CVE-2026-42923 中危 1.7.3-15.el8 unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42923

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-06-17 10:48

unbound-libs CVE-2026-42960 中危 1.7.3-15.el8 unbound: Unbound DNS Cache Poisoning via Promiscuous Additional Section RRSet Acceptance

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42960

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-06-17 10:48

unbound-libs CVE-2026-44608 中危 1.7.3-15.el8 unbound: Unbound: Denial of Service due to locking inconsistency during RPZ XFR reload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44608

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-20 10:16 修改: 2026-06-17 10:51

util-linux CVE-2025-14104 中危 2.32.1-27.el8 2.32.1-48.el8_10 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16

util-linux CVE-2026-13595 中危 2.32.1-27.el8 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37

util-linux CVE-2026-27456 中危 2.32.1-27.el8 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

glib2 CVE-2022-22624 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Use-after-free leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22624

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-23 19:15 修改: 2026-06-17 04:28

glib2 CVE-2022-22628 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Use-after-free leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22628

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-23 19:15 修改: 2026-06-17 04:28

glib2 CVE-2022-22629 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Buffer overflow leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22629

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-23 20:15 修改: 2026-06-17 04:28

glib2 CVE-2022-22662 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Cookie management issue leading to sensitive user information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22662

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-26 18:15 修改: 2026-06-17 04:28

glib2 CVE-2022-26700 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Memory corruption issue leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26700

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-23 19:15 修改: 2026-06-17 04:35

vim-common CVE-2021-3778 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3778

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-15 08:15 修改: 2026-06-17 04:05

vim-common CVE-2021-3796 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8 vim: use-after-free in nv_replace() in normal.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3796

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-15 13:15 修改: 2026-06-17 04:05

vim-common CVE-2021-3872 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: heap-based buffer overflow in win_redr_status() in drawscreen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3872

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-19 13:15 修改: 2026-06-17 04:05

vim-common CVE-2021-3984 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: illegal memory access in find_start_brace() in cindent.c when C-indenting

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3984

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-01 11:15 修改: 2026-06-17 04:06

vim-common CVE-2021-4019 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: heap-based buffer overflow in find_help_tags() in help.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4019

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-01 10:15 修改: 2026-06-17 04:18

vim-common CVE-2021-4192 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: use-after-free in win_linetabsize()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4192

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-31 15:15 修改: 2026-06-17 04:19

vim-common CVE-2021-4193 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: out-of-bound read in getvcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4193

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-31 16:15 修改: 2026-06-17 04:19

vim-common CVE-2022-0261 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in block_insert() in src/ops.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0261

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:20

vim-common CVE-2022-0318 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in utf_head_off() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0318

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-21 12:15 修改: 2026-06-17 04:20

vim-common CVE-2022-0359 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in init_ccline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0359

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-26 12:15 修改: 2026-06-17 04:20

vim-common CVE-2022-0361 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Illegal memory access when copying lines in visual mode leads to heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0361

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-26 13:15 修改: 2026-06-17 04:20

vim-common CVE-2022-0392 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0392

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:20

vim-common CVE-2022-0413 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Use after free in src/ex_cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0413

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-30 15:15 修改: 2026-06-17 04:20

vim-common CVE-2022-1621 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.2 vim: heap buffer overflow in vim_strncpy

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1621

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-10 14:15 修改: 2026-06-17 04:22

vim-common CVE-2022-1629 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.2 vim: buffer over-read in function find_next_quote

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1629

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-10 14:15 修改: 2026-06-17 04:22

vim-common CVE-2022-1785 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: Out-of-bounds Write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1785

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-19 13:15 修改: 2026-06-17 04:23

vim-common CVE-2022-1897 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: out-of-bounds write in vim_regsub_both() in regexp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1897

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-27 15:15 修改: 2026-06-17 04:23

vim-common CVE-2022-1927 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: buffer over-read in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1927

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-29 14:15 修改: 2026-06-17 04:23

vim-common CVE-2025-29768 中危 2:8.0.1763-15.el8 vim: Vim vulnerable to potential data loss with zip.vim and special crafted zip files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29768

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-03-13 17:15 修改: 2026-06-17 09:05

vim-common CVE-2025-53905 中危 2:8.0.1763-15.el8 2:8.0.1763-21.el8_10 vim: Vim path traversial

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53905

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39

vim-common CVE-2025-53906 中危 2:8.0.1763-15.el8 2:8.0.1763-21.el8_10 vim: Vim path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53906

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39

vim-common CVE-2026-28417 中危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.1 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28417

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-common CVE-2026-28418 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure via heap-based buffer overflow in Emacs-style tags file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28418

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-common CVE-2026-28419 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure and denial of service via malformed tags file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28419

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-common CVE-2026-28420 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28420

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-common CVE-2026-28421 中危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.1 vim: Vim: Denial of service and information disclosure via crafted swap file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28421

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-common CVE-2026-35177 中危 2:8.0.1763-15.el8 2:8.0.1763-23.el8_10 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-06 18:16 修改: 2026-06-17 10:40

vim-common CVE-2026-39881 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via command injection in NetBeans interface

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39881

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-08 21:17 修改: 2026-06-17 10:42

vim-common CVE-2026-42307 中危 2:8.0.1763-15.el8 Vim: Vim: Arbitrary code execution via OS command injection in netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42307

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:47

vim-common CVE-2026-44656 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary command execution via :find command-line completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44656

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:51

vim-common CVE-2026-45130 中危 2:8.0.1763-15.el8 vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45130

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:51

vim-common CVE-2026-46483 中危 2:8.0.1763-15.el8 vim: command injection when decompressing .tgz archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46483

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-15 15:16 修改: 2026-06-17 10:53

vim-common CVE-2026-52859 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via out-of-bounds write in terminal handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52859

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:57

vim-common CVE-2026-55693 中危 2:8.0.1763-15.el8 vim: Vim: Out-of-bounds Write in Spell File Word Count

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55693

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 14:17

vim-common CVE-2026-55892 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via crafted spell file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55892

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 19:16

vim-common CVE-2026-57452 中危 2:8.0.1763-15.el8 vim: Vim: Out-of-bounds Read with libsodium-encrypted Files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57452

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:12

vim-common CVE-2026-57455 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57455

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:23

vim-common CVE-2026-59856 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59856

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

vim-common CVE-2026-59857 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59857

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 23:17 修改: 2026-07-10 19:23

vim-common CVE-2026-59858 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

glib2 CVE-2022-26709 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Use-after-free leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26709

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-01 20:15 修改: 2026-06-17 04:35

glib2 CVE-2022-26710 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Use-after-free leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26710

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-01 20:15 修改: 2026-06-17 04:35

glib2 CVE-2022-26716 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Memory corruption issue leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26716

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-01 20:15 修改: 2026-06-17 04:35

glib2 CVE-2022-26717 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Use-after-free leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26717

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-01 20:15 修改: 2026-06-17 04:35

glib2 CVE-2022-26719 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Memory corruption issue leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26719

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-01 20:15 修改: 2026-06-17 04:35

vim-enhanced CVE-2021-3778 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3778

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-15 08:15 修改: 2026-06-17 04:05

vim-enhanced CVE-2021-3796 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8 vim: use-after-free in nv_replace() in normal.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3796

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-15 13:15 修改: 2026-06-17 04:05

vim-enhanced CVE-2021-3872 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: heap-based buffer overflow in win_redr_status() in drawscreen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3872

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-19 13:15 修改: 2026-06-17 04:05

vim-enhanced CVE-2021-3984 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: illegal memory access in find_start_brace() in cindent.c when C-indenting

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3984

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-01 11:15 修改: 2026-06-17 04:06

vim-enhanced CVE-2021-4019 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: heap-based buffer overflow in find_help_tags() in help.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4019

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-01 10:15 修改: 2026-06-17 04:18

vim-enhanced CVE-2021-4192 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: use-after-free in win_linetabsize()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4192

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-31 15:15 修改: 2026-06-17 04:19

vim-enhanced CVE-2021-4193 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: out-of-bound read in getvcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4193

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-31 16:15 修改: 2026-06-17 04:19

vim-enhanced CVE-2022-0261 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in block_insert() in src/ops.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0261

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:20

vim-enhanced CVE-2022-0318 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in utf_head_off() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0318

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-21 12:15 修改: 2026-06-17 04:20

vim-enhanced CVE-2022-0359 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in init_ccline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0359

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-26 12:15 修改: 2026-06-17 04:20

vim-enhanced CVE-2022-0361 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Illegal memory access when copying lines in visual mode leads to heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0361

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-26 13:15 修改: 2026-06-17 04:20

vim-enhanced CVE-2022-0392 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0392

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:20

vim-enhanced CVE-2022-0413 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Use after free in src/ex_cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0413

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-30 15:15 修改: 2026-06-17 04:20

vim-enhanced CVE-2022-1621 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.2 vim: heap buffer overflow in vim_strncpy

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1621

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-10 14:15 修改: 2026-06-17 04:22

vim-enhanced CVE-2022-1629 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.2 vim: buffer over-read in function find_next_quote

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1629

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-10 14:15 修改: 2026-06-17 04:22

vim-enhanced CVE-2022-1785 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: Out-of-bounds Write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1785

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-19 13:15 修改: 2026-06-17 04:23

vim-enhanced CVE-2022-1897 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: out-of-bounds write in vim_regsub_both() in regexp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1897

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-27 15:15 修改: 2026-06-17 04:23

vim-enhanced CVE-2022-1927 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: buffer over-read in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1927

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-29 14:15 修改: 2026-06-17 04:23

vim-enhanced CVE-2025-29768 中危 2:8.0.1763-15.el8 vim: Vim vulnerable to potential data loss with zip.vim and special crafted zip files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29768

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-03-13 17:15 修改: 2026-06-17 09:05

vim-enhanced CVE-2025-53905 中危 2:8.0.1763-15.el8 2:8.0.1763-21.el8_10 vim: Vim path traversial

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53905

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39

vim-enhanced CVE-2025-53906 中危 2:8.0.1763-15.el8 2:8.0.1763-21.el8_10 vim: Vim path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53906

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39

vim-enhanced CVE-2026-25749 中危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10 vim: Vim: Arbitrary code execution via 'helpfile' option processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25749

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-06 23:15 修改: 2026-06-17 10:25

vim-enhanced CVE-2026-28417 中危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.1 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28417

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-enhanced CVE-2026-28418 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure via heap-based buffer overflow in Emacs-style tags file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28418

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-enhanced CVE-2026-28419 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure and denial of service via malformed tags file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28419

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-enhanced CVE-2026-28420 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28420

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-enhanced CVE-2026-28421 中危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10.1 vim: Vim: Denial of service and information disclosure via crafted swap file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28421

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-enhanced CVE-2026-39881 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via command injection in NetBeans interface

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39881

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-08 21:17 修改: 2026-06-17 10:42

vim-enhanced CVE-2026-41411 中危 2:8.0.1763-15.el8 2:8.0.1763-24.el8_10 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

vim-enhanced CVE-2026-42307 中危 2:8.0.1763-15.el8 Vim: Vim: Arbitrary code execution via OS command injection in netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42307

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:47

vim-enhanced CVE-2026-44656 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary command execution via :find command-line completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44656

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:51

vim-enhanced CVE-2026-45130 中危 2:8.0.1763-15.el8 vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45130

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:51

vim-enhanced CVE-2026-46483 中危 2:8.0.1763-15.el8 vim: command injection when decompressing .tgz archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46483

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-15 15:16 修改: 2026-06-17 10:53

vim-enhanced CVE-2026-52859 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via out-of-bounds write in terminal handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52859

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:57

vim-enhanced CVE-2026-55693 中危 2:8.0.1763-15.el8 vim: Vim: Out-of-bounds Write in Spell File Word Count

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55693

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 14:17

vim-enhanced CVE-2026-55892 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via crafted spell file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55892

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 19:16

vim-enhanced CVE-2026-57452 中危 2:8.0.1763-15.el8 vim: Vim: Out-of-bounds Read with libsodium-encrypted Files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57452

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:12

vim-enhanced CVE-2026-57455 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57455

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:23

vim-enhanced CVE-2026-59856 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59856

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

vim-enhanced CVE-2026-59857 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59857

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 23:17 修改: 2026-07-10 19:23

vim-enhanced CVE-2026-59858 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

glib2 CVE-2022-30293 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-06 05:15 修改: 2026-06-17 04:43

glib2 CVE-2022-32792 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32792

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-23 19:15 修改: 2026-06-17 04:47

glib2 CVE-2022-32816 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: malicious content may lead to UI spoofing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32816

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-23 19:15 修改: 2026-06-17 04:47

glib2 CVE-2022-32891 中危 2.56.4-10.el8_4 2.56.4-159.el8 webkitgtk: UI spoofing while Visiting a website that frames malicious content

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32891

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-27 20:15 修改: 2026-06-17 04:48

vim-filesystem CVE-2021-3778 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3778

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-15 08:15 修改: 2026-06-17 04:05

vim-filesystem CVE-2021-3796 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8 vim: use-after-free in nv_replace() in normal.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3796

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-09-15 13:15 修改: 2026-06-17 04:05

vim-filesystem CVE-2021-3872 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: heap-based buffer overflow in win_redr_status() in drawscreen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3872

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-19 13:15 修改: 2026-06-17 04:05

vim-filesystem CVE-2021-3984 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: illegal memory access in find_start_brace() in cindent.c when C-indenting

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3984

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-01 11:15 修改: 2026-06-17 04:06

vim-filesystem CVE-2021-4019 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: heap-based buffer overflow in find_help_tags() in help.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4019

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-01 10:15 修改: 2026-06-17 04:18

vim-filesystem CVE-2021-4192 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: use-after-free in win_linetabsize()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4192

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-31 15:15 修改: 2026-06-17 04:19

vim-filesystem CVE-2021-4193 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: out-of-bound read in getvcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4193

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-31 16:15 修改: 2026-06-17 04:19

vim-filesystem CVE-2022-0261 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in block_insert() in src/ops.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0261

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:20

vim-filesystem CVE-2022-0318 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in utf_head_off() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0318

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-21 12:15 修改: 2026-06-17 04:20

vim-filesystem CVE-2022-0359 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in init_ccline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0359

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-26 12:15 修改: 2026-06-17 04:20

vim-filesystem CVE-2022-0361 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Illegal memory access when copying lines in visual mode leads to heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0361

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-26 13:15 修改: 2026-06-17 04:20

vim-filesystem CVE-2022-0392 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0392

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:20

vim-filesystem CVE-2022-0413 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Use after free in src/ex_cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0413

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-30 15:15 修改: 2026-06-17 04:20

vim-filesystem CVE-2022-1621 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.2 vim: heap buffer overflow in vim_strncpy

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1621

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-10 14:15 修改: 2026-06-17 04:22

vim-filesystem CVE-2022-1629 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.2 vim: buffer over-read in function find_next_quote

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1629

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-10 14:15 修改: 2026-06-17 04:22

vim-filesystem CVE-2022-1785 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: Out-of-bounds Write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1785

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-19 13:15 修改: 2026-06-17 04:23

vim-filesystem CVE-2022-1897 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: out-of-bounds write in vim_regsub_both() in regexp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1897

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-27 15:15 修改: 2026-06-17 04:23

vim-filesystem CVE-2022-1927 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: buffer over-read in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1927

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-29 14:15 修改: 2026-06-17 04:23

vim-filesystem CVE-2025-29768 中危 2:8.0.1763-15.el8 vim: Vim vulnerable to potential data loss with zip.vim and special crafted zip files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29768

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-03-13 17:15 修改: 2026-06-17 09:05

vim-filesystem CVE-2025-53905 中危 2:8.0.1763-15.el8 2:8.0.1763-21.el8_10 vim: Vim path traversial

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53905

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39

vim-filesystem CVE-2025-53906 中危 2:8.0.1763-15.el8 2:8.0.1763-21.el8_10 vim: Vim path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53906

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39

vim-filesystem CVE-2026-28418 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure via heap-based buffer overflow in Emacs-style tags file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28418

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-filesystem CVE-2026-28419 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure and denial of service via malformed tags file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28419

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-filesystem CVE-2026-28420 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28420

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-filesystem CVE-2026-39881 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via command injection in NetBeans interface

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39881

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-08 21:17 修改: 2026-06-17 10:42

vim-filesystem CVE-2026-42307 中危 2:8.0.1763-15.el8 Vim: Vim: Arbitrary code execution via OS command injection in netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42307

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:47

vim-filesystem CVE-2026-44656 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary command execution via :find command-line completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44656

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:51

vim-filesystem CVE-2026-45130 中危 2:8.0.1763-15.el8 vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45130

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:51

vim-filesystem CVE-2026-46483 中危 2:8.0.1763-15.el8 vim: command injection when decompressing .tgz archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46483

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-15 15:16 修改: 2026-06-17 10:53

vim-filesystem CVE-2026-52859 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via out-of-bounds write in terminal handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52859

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:57

vim-filesystem CVE-2026-55693 中危 2:8.0.1763-15.el8 vim: Vim: Out-of-bounds Write in Spell File Word Count

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55693

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 14:17

vim-filesystem CVE-2026-55892 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via crafted spell file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55892

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 19:16

vim-filesystem CVE-2026-57452 中危 2:8.0.1763-15.el8 vim: Vim: Out-of-bounds Read with libsodium-encrypted Files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57452

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:12

vim-filesystem CVE-2026-57455 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57455

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:23

vim-filesystem CVE-2026-59856 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59856

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

vim-filesystem CVE-2026-59857 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59857

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 23:17 修改: 2026-07-10 19:23

vim-filesystem CVE-2026-59858 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

glib2 CVE-2024-34397 中危 2.56.4-10.el8_4 2.56.4-166.el8_10 glib2: Signal subscription vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34397

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-07 18:15 修改: 2026-06-17 07:33

glib2 CVE-2024-52533 中危 2.56.4-10.el8_4 2.56.4-166.el8_10 glib: buffer overflow in set_connect_msg()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52533

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-11-11 23:15 修改: 2026-06-17 08:07

glib2 CVE-2025-13601 中危 2.56.4-10.el8_4 2.56.4-168.el8_10 glib: Integer overflow in in g_escape_uri_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13601

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-11-26 15:15 修改: 2026-06-30 00:16

glib2 CVE-2025-14087 中危 2.56.4-10.el8_4 2.56.4-169.el8_10 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-10 09:15 修改: 2026-07-13 22:16

vim-minimal CVE-2021-3778 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3778

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-09-15 08:15 修改: 2026-06-17 04:05

vim-minimal CVE-2021-3796 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8 vim: use-after-free in nv_replace() in normal.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3796

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-09-15 13:15 修改: 2026-06-17 04:05

vim-minimal CVE-2021-3872 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: heap-based buffer overflow in win_redr_status() in drawscreen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3872

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-10-19 13:15 修改: 2026-06-17 04:05

vim-minimal CVE-2021-3984 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: illegal memory access in find_start_brace() in cindent.c when C-indenting

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3984

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-12-01 11:15 修改: 2026-06-17 04:06

vim-minimal CVE-2021-4019 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: heap-based buffer overflow in find_help_tags() in help.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4019

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-12-01 10:15 修改: 2026-06-17 04:18

vim-minimal CVE-2021-4192 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: use-after-free in win_linetabsize()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4192

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-12-31 15:15 修改: 2026-06-17 04:19

vim-minimal CVE-2021-4193 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.4 vim: out-of-bound read in getvcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4193

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-12-31 16:15 修改: 2026-06-17 04:19

vim-minimal CVE-2022-0261 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in block_insert() in src/ops.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0261

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:20

vim-minimal CVE-2022-0318 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in utf_head_off() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0318

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-21 12:15 修改: 2026-06-17 04:20

vim-minimal CVE-2022-0359 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in init_ccline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0359

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-26 12:15 修改: 2026-06-17 04:20

vim-minimal CVE-2022-0361 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Illegal memory access when copying lines in visual mode leads to heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0361

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-26 13:15 修改: 2026-06-17 04:20

vim-minimal CVE-2022-0392 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0392

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:20

vim-minimal CVE-2022-0413 中危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.12 vim: Use after free in src/ex_cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0413

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-30 15:15 修改: 2026-06-17 04:20

vim-minimal CVE-2022-1621 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.2 vim: heap buffer overflow in vim_strncpy

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1621

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-05-10 14:15 修改: 2026-06-17 04:22

vim-minimal CVE-2022-1629 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.2 vim: buffer over-read in function find_next_quote

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1629

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-05-10 14:15 修改: 2026-06-17 04:22

vim-minimal CVE-2022-1785 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: Out-of-bounds Write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1785

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-05-19 13:15 修改: 2026-06-17 04:23

vim-minimal CVE-2022-1897 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: out-of-bounds write in vim_regsub_both() in regexp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1897

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-05-27 15:15 修改: 2026-06-17 04:23

vim-minimal CVE-2022-1927 中危 2:8.0.1763-15.el8 2:8.0.1763-19.el8_6.4 vim: buffer over-read in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1927

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-05-29 14:15 修改: 2026-06-17 04:23

vim-minimal CVE-2025-29768 中危 2:8.0.1763-15.el8 vim: Vim vulnerable to potential data loss with zip.vim and special crafted zip files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29768

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-03-13 17:15 修改: 2026-06-17 09:05

vim-minimal CVE-2025-53905 中危 2:8.0.1763-15.el8 2:8.0.1763-21.el8_10 vim: Vim path traversial

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53905

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39

vim-minimal CVE-2025-53906 中危 2:8.0.1763-15.el8 2:8.0.1763-21.el8_10 vim: Vim path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53906

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39

vim-minimal CVE-2026-25749 中危 2:8.0.1763-15.el8 2:8.0.1763-22.el8_10 vim: Vim: Arbitrary code execution via 'helpfile' option processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25749

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-02-06 23:15 修改: 2026-06-17 10:25

vim-minimal CVE-2026-28418 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure via heap-based buffer overflow in Emacs-style tags file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28418

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-minimal CVE-2026-28419 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure and denial of service via malformed tags file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28419

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-minimal CVE-2026-28420 中危 2:8.0.1763-15.el8 vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28420

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

vim-minimal CVE-2026-39881 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via command injection in NetBeans interface

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39881

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-08 21:17 修改: 2026-06-17 10:42

vim-minimal CVE-2026-41411 中危 2:8.0.1763-15.el8 2:8.0.1763-24.el8_10 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

vim-minimal CVE-2026-42307 中危 2:8.0.1763-15.el8 Vim: Vim: Arbitrary code execution via OS command injection in netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42307

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:47

vim-minimal CVE-2026-44656 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary command execution via :find command-line completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44656

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:51

vim-minimal CVE-2026-45130 中危 2:8.0.1763-15.el8 vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45130

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-05-08 23:16 修改: 2026-06-17 10:51

vim-minimal CVE-2026-46483 中危 2:8.0.1763-15.el8 vim: command injection when decompressing .tgz archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46483

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-05-15 15:16 修改: 2026-06-17 10:53

vim-minimal CVE-2026-52859 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via out-of-bounds write in terminal handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52859

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:57

vim-minimal CVE-2026-55693 中危 2:8.0.1763-15.el8 vim: Vim: Out-of-bounds Write in Spell File Word Count

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55693

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-25 16:16 修改: 2026-06-26 14:17

vim-minimal CVE-2026-55892 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via crafted spell file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55892

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-25 16:16 修改: 2026-06-26 19:16

vim-minimal CVE-2026-57452 中危 2:8.0.1763-15.el8 vim: Vim: Out-of-bounds Read with libsodium-encrypted Files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57452

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:12

vim-minimal CVE-2026-57455 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57455

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:23

vim-minimal CVE-2026-59856 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59856

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

vim-minimal CVE-2026-59857 中危 2:8.0.1763-15.el8 vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59857

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-07-09 23:17 修改: 2026-07-10 19:23

vim-minimal CVE-2026-59858 中危 2:8.0.1763-15.el8 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

glib2 CVE-2025-14512 中危 2.56.4-10.el8_4 2.56.4-169.el8_10 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-11 07:16 修改: 2026-07-13 17:16

xz CVE-2026-34743 中危 5.2.4-3.el8 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-02 19:21 修改: 2026-07-21 23:17

glib2 CVE-2025-4373 中危 2.56.4-10.el8_4 2.56.4-166.el8_10 glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4373

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-05-06 15:16 修改: 2026-07-19 18:16

xz-libs CVE-2026-34743 中危 5.2.4-3.el8 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-02 19:21 修改: 2026-07-21 23:17

yum CVE-2021-3445 中危 4.4.2-11.el8 4.7.0-4.el8 libdnf: Signature verification bypass via signature placed in the main RPM header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3445

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-19 14:15 修改: 2026-06-17 04:05

glib2 CVE-2026-1484 中危 2.56.4-10.el8_4 Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1484

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

zlib CVE-2022-37434 中危 1.2.11-17.el8 1.2.11-19.el8_6 zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-05 07:15 修改: 2026-07-14 12:16

cpio CVE-2023-7216 低危 2.12-10.el8 CPIO: extraction allows symlinks which enables Remote Command Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7216

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-05 15:15 修改: 2026-06-17 06:52

binutils CVE-2018-18309 低危 2.30-93.el8 binutils: invalid memory address dereference in read_reloc in reloc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18309

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-15 02:29 修改: 2026-06-17 01:46

dbus-libs CVE-2020-35512 低危 1:1.12.8-12.el8_4.2 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:13

binutils CVE-2018-18484 低危 2.30-93.el8 binutils: Stack exhaustion in cp-demangle.c allows for denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18484

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-18 21:29 修改: 2026-06-17 01:47

binutils CVE-2018-18605 低危 2.30-93.el8 binutils: heap-based buffer over-read in sec_merge_hash_lookup in merge.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18605

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-23 17:29 修改: 2026-06-17 01:47

binutils CVE-2018-18606 低危 2.30-93.el8 binutils: NULL pointer dereference in _bfd_add_merge_section in merge_strings function in merge.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18606

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-23 17:29 修改: 2026-06-17 01:47

libpng CVE-2019-7317 低危 2:1.6.34-5.el8 libpng: use-after-free in png_image_free in png.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7317

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-04 08:29 修改: 2026-06-17 02:40

binutils CVE-2018-18607 低危 2.30-93.el8 binutils: NULL pointer dereference in elf_link_input_bfd in elflink.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18607

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-23 17:29 修改: 2026-06-17 01:47

dbus-tools CVE-2020-35512 低危 1:1.12.8-12.el8_4.2 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:13

binutils CVE-2018-18700 低危 2.30-93.el8 binutils: Recursive Stack Overflow within function d_name, d_encoding, and d_local_name in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18700

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-29 12:29 修改: 2026-06-17 01:47

platform-python CVE-2019-9674 低危 3.6.8-37.el8 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9674

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-02-04 15:15 修改: 2026-06-17 02:44

platform-python CVE-2021-3737 低危 3.6.8-37.el8 3.6.8-45.el8 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05

platform-python CVE-2024-0397 低危 3.6.8-37.el8 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53

platform-python CVE-2024-4032 低危 3.6.8-37.el8 3.6.8-67.el8_10 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00

platform-python CVE-2024-7592 低危 3.6.8-37.el8 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20

platform-python CVE-2025-13462 低危 3.6.8-37.el8 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34

platform-python CVE-2025-1795 低危 3.6.8-37.el8 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-28 19:15 修改: 2026-06-17 08:39

platform-python CVE-2025-6075 低危 3.6.8-37.el8 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-31 17:15 修改: 2026-06-17 10:01

platform-python CVE-2026-2297 低危 3.6.8-37.el8 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30

platform-python CVE-2026-3479 低危 3.6.8-37.el8 python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43

binutils CVE-2018-18701 低危 2.30-93.el8 binutils: infinite recursion in next_is_type_qual and cplus_demangle_type functions in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18701

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-29 12:29 修改: 2026-06-17 01:47

binutils CVE-2018-19932 低危 2.30-93.el8 binutils: Integer overflow due to the IS_CONTAINED_BY_LMA macro resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19932

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-12-07 07:29 修改: 2026-06-17 01:50

binutils CVE-2018-20002 低危 2.30-93.el8 binutils: memory leak in _bfd_generic_read_minisymbols function in syms.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20002

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-12-10 02:29 修改: 2026-06-17 01:52

binutils CVE-2018-20651 低危 2.30-93.el8 binutils: NULL pointer dereference in elf_link_add_object_symbols function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20651

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-01 16:29 修改: 2026-06-17 01:53

binutils CVE-2018-20657 低危 2.30-93.el8 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-02 14:29 修改: 2026-06-17 01:53

platform-python-pip CVE-2018-20225 低危 9.0.3-19.el8 python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible.

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20225

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-05-08 18:15 修改: 2026-06-17 01:52

platform-python-pip CVE-2021-3572 低危 9.0.3-19.el8 9.0.3-20.el8 python-pip: Incorrect handling of unicode separators in git references

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3572

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-10 18:15 修改: 2026-06-17 04:05

binutils CVE-2018-20673 低危 2.30-93.el8 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

binutils CVE-2018-6872 低危 2.30-93.el8 binutils: out of bounds read in elf_parse_notes function in elf.c file in libbfd library

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6872

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-02-09 06:29 修改: 2026-06-17 02:02

glib2 CVE-2021-28153 低危 2.56.4-10.el8_4 2.56.4-156.el8 glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28153

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-11 22:15 修改: 2026-06-17 03:45

procps-ng CVE-2018-1121 低危 3.3.15-6.el8 procps: process hiding through race condition enumerating /proc

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1121

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-06-13 20:29 修改: 2026-06-17 01:50

procps-ng CVE-2023-4016 低危 3.3.15-6.el8 3.3.15-14.el8 procps: ps buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-02 05:15 修改: 2026-06-17 06:36

glib2 CVE-2023-29499 低危 2.56.4-10.el8_4 glib: GVariant offset table entry size is not checked in is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29499

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-14 20:15 修改: 2026-06-17 05:50

glib2 CVE-2023-32611 低危 2.56.4-10.el8_4 glib: g_variant_byteswap() can take a long time with some non-normal inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32611

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-14 20:15 修改: 2026-06-23 18:17

libsolv CVE-2021-3200 低危 0.7.16-2.el8 0.7.19-1.el8 libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3200

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-18 17:15 修改: 2026-06-17 04:04

glib2 CVE-2023-32636 低危 2.56.4-10.el8_4 glib: Timeout in fuzz_variant_text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32636

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-14 20:15 修改: 2026-06-17 05:59

gnutls CVE-2021-4209 低危 3.6.14-8.el8_3 GnuTLS: Null pointer dereference in MD_UPDATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19

libstdc++ CVE-2018-20657 低危 8.4.1-1.el8 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-02 14:29 修改: 2026-06-17 01:53

libstdc++ CVE-2018-20673 低危 8.4.1-1.el8 8.5.0-3.el8 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

libstdc++ CVE-2019-14250 低危 8.4.1-1.el8 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-07-24 04:15 修改: 2026-06-17 02:18

libstdc++ CVE-2022-27943 低危 8.4.1-1.el8 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

gnutls CVE-2025-9820 低危 3.6.14-8.el8_3 3.6.16-8.el8_10.5 gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9820

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-26 20:16 修改: 2026-06-30 09:16

gnutls CVE-2026-3832 低危 3.6.14-8.el8_3 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-30 18:16 修改: 2026-07-13 17:17

libtasn1 CVE-2018-1000654 低危 4.13-3.el8 libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000654

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2018-08-20 19:31 修改: 2026-06-17 01:33

libtasn1 CVE-2025-13151 低危 4.13-3.el8 4.13-6.el8_10 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33

gnutls CVE-2026-5419 低危 3.6.14-8.el8_3 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-01 21:16 修改: 2026-07-15 15:16

glib2 CVE-2023-32665 低危 2.56.4-10.el8_4 glib: GVariant deserialisation does not match spec for non-normal data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32665

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-14 20:15 修改: 2026-06-17 05:59

glib2 CVE-2025-3360 低危 2.56.4-10.el8_4 glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3360

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-07 13:15 修改: 2026-06-30 15:16

glib2 CVE-2025-7039 低危 2.56.4-10.el8_4 glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7039

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-09-03 02:15 修改: 2026-06-17 10:04

glib2 CVE-2026-0988 低危 2.56.4-10.el8_4 glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0988

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-21 12:15 修改: 2026-06-17 10:11

glib2 CVE-2026-1485 低危 2.56.4-10.el8_4 Glib: Glib: Local denial of service via buffer underflow in content type parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1485

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

binutils CVE-2019-12972 低危 2.30-93.el8 binutils: out-of-bounds read in setup_group in bfd/elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12972

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-06-26 14:15 修改: 2026-06-17 02:15

binutils CVE-2019-14250 低危 2.30-93.el8 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-07-24 04:15 修改: 2026-06-17 02:18

binutils CVE-2019-9071 低危 2.30-93.el8 binutils: stack consumption in function d_count_templates_scopes in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9071

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-24 00:29 修改: 2026-06-17 02:43

binutils CVE-2020-35448 低危 2.30-93.el8 2.30-108.el8 binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35448

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-12-27 04:15 修改: 2026-06-17 03:13

binutils CVE-2020-35493 低危 2.30-93.el8 binutils: heap-based buffer overflow in bfd_pef_parse_function_stubs function in bfd/pef.c via crafted PEF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35493

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-01-04 15:15 修改: 2026-06-17 03:13

cups-libs CVE-2021-25317 低危 1:2.2.6-38.el8 cups: insecure permissions of /var/log/cups allows for symlink attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25317

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-05 10:15 修改: 2026-06-17 03:41

elfutils-default-yama-scope CVE-2024-25260 低危 0.182-3.el8 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-20 18:15 修改: 2026-06-17 07:15

elfutils-libelf CVE-2024-25260 低危 0.182-3.el8 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-20 18:15 修改: 2026-06-17 07:15

elfutils-libs CVE-2024-25260 低危 0.182-3.el8 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-20 18:15 修改: 2026-06-17 07:15

cups-libs CVE-2024-47175 低危 1:2.2.6-38.el8 1:2.2.6-62.el8_10 cups: libppd: remote command injection via attacker controlled data in PPD file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47175

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-09-26 22:15 修改: 2026-06-17 07:56

cups-libs CVE-2026-41079 低危 1:2.2.6-38.el8 cups: CUPS: Information disclosure via crafted SNMP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41079

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

binutils CVE-2020-35494 低危 2.30-93.el8 binutils: usage of unitialized heap in tic4x_print_cond function in opcodes/tic4x-dis.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35494

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-01-04 15:15 修改: 2026-06-17 03:13

binutils CVE-2020-35495 低危 2.30-93.el8 binutils: NULL pointer dereference in bfd_pef_parse_symbols function in bfd/pef.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35495

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-01-04 15:15 修改: 2026-06-17 03:13

binutils CVE-2020-35496 低危 2.30-93.el8 binutils: NULL pointer dereference in bfd_pef_scan_start_address function in bfd/pef.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35496

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-01-04 15:15 修改: 2026-06-17 03:13

binutils CVE-2020-35507 低危 2.30-93.el8 binutils: NULL pointer dereference in bfd_pef_parse_function_stubs function in bfd/pef.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35507

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-01-04 15:15 修改: 2026-06-17 03:13

binutils CVE-2021-20284 低危 2.30-93.el8 2.30-108.el8 binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20284

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-26 17:15 修改: 2026-06-17 03:33

binutils CVE-2021-3826 低危 2.30-93.el8 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3826

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-01 21:15 修改: 2026-06-17 04:05

binutils CVE-2022-38533 低危 2.30-93.el8 binutils: heap-based buffer overflow in bfd_getl32() when called by strip_main() in objcopy.c via a crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38533

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-26 00:15 修改: 2026-06-17 04:56

binutils CVE-2022-44840 低危 2.30-93.el8 binutils: heap-based buffer overflow in find_section_in_set() in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44840

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:08

binutils CVE-2022-47007 低危 2.30-93.el8 binutils: memory leak in stab_demangle_v3_arg() in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47007

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:12

binutils CVE-2022-47008 低危 2.30-93.el8 binutils: memory leak in make_tempdir() and make_tempname() in bucomm.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47008

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:12

glibc CVE-2021-27645 低危 2.28-151.el8 2.28-164.el8 glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-24 15:15 修改: 2026-06-17 03:45

glibc CVE-2021-33574 低危 2.28-151.el8 2.28-164.el8 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-25 22:15 修改: 2026-06-17 03:54

glibc CVE-2024-33601 低危 2.28-151.el8 2.28-251.el8_10.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

grub2-common CVE-2021-3981 低危 1:2.02-99.el8 1:2.02-123.el8 grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3981

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-10 17:43 修改: 2026-06-17 04:06

grub2-common CVE-2023-4692 低危 1:2.02-99.el8 1:2.02-156.el8 grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4692

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-25 18:17 修改: 2026-07-21 06:16

grub2-common CVE-2023-4693 低危 1:2.02-99.el8 1:2.02-156.el8 grub2: out-of-bounds read at fs/ntfs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4693

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-25 18:17 修改: 2026-07-21 06:16

glibc CVE-2024-33602 低危 2.28-151.el8 2.28-251.el8_10.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc CVE-2025-15281 低危 2.28-151.el8 2.28-251.el8_10.31 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

glibc CVE-2026-4438 低危 2.28-151.el8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

binutils CVE-2022-47010 低危 2.30-93.el8 binutils: memory leak in pr_function_type() in prdbg.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47010

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:12

binutils CVE-2022-47011 低危 2.30-93.el8 binutils: memory leak in parse_stab_struct_fields() in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47011

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:12

binutils CVE-2023-1972 低危 2.30-93.el8 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-17 22:15 修改: 2026-06-17 05:29

binutils CVE-2023-25584 低危 2.30-93.el8 binutils: Out of bounds read in parse_module function in bfd/vms-alpha.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25584

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-14 21:15 修改: 2026-06-17 05:41

binutils CVE-2023-25585 低危 2.30-93.el8 binutils: Field `file_table` of `struct module *module` is uninitialized

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25585

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-14 21:15 修改: 2026-06-17 05:41

binutils CVE-2023-25588 低危 2.30-93.el8 binutils: Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25588

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-14 21:15 修改: 2026-06-17 05:41

binutils CVE-2024-57360 低危 2.30-93.el8 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-21 21:15 修改: 2026-06-17 08:13

python3-libs CVE-2019-9674 低危 3.6.8-37.el8 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9674

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-02-04 15:15 修改: 2026-06-17 02:44

python3-libs CVE-2021-3737 低危 3.6.8-37.el8 3.6.8-45.el8 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05

python3-libs CVE-2024-0397 低危 3.6.8-37.el8 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53

python3-libs CVE-2024-4032 低危 3.6.8-37.el8 3.6.8-67.el8_10 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00

python3-libs CVE-2024-7592 低危 3.6.8-37.el8 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20

python3-libs CVE-2025-13462 低危 3.6.8-37.el8 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34

python3-libs CVE-2025-1795 低危 3.6.8-37.el8 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-28 19:15 修改: 2026-06-17 08:39

python3-libs CVE-2025-6075 低危 3.6.8-37.el8 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-31 17:15 修改: 2026-06-17 10:01

python3-libs CVE-2026-2297 低危 3.6.8-37.el8 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30

python3-libs CVE-2026-3479 低危 3.6.8-37.el8 python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43

binutils CVE-2025-11412 低危 2.30-93.el8 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

binutils CVE-2025-11413 低危 2.30-93.el8 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30

binutils CVE-2025-11414 低危 2.30-93.el8 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-07 23:15 修改: 2026-06-17 08:30

binutils CVE-2025-11494 低危 2.30-93.el8 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

binutils CVE-2025-11495 低危 2.30-93.el8 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30

python3-pip-wheel CVE-2018-20225 低危 9.0.3-19.el8 python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible.

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20225

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-05-08 18:15 修改: 2026-06-17 01:52

python3-pip-wheel CVE-2021-3572 低危 9.0.3-19.el8 9.0.3-20.el8 python-pip: Incorrect handling of unicode separators in git references

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3572

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-10 18:15 修改: 2026-06-17 04:05

binutils CVE-2025-1150 低危 2.30-93.el8 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

binutils CVE-2025-1151 低危 2.30-93.el8 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-10 17:15 修改: 2026-06-17 08:38

java-1.8.0-openjdk CVE-2021-35588 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Incomplete validation of inner class references in ClassFileParser (Hotspot, 8268071)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35588

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2021-35603 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35603

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:17 修改: 2026-06-17 03:57

java-1.8.0-openjdk CVE-2022-21619 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21619

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

python3-rpm CVE-2021-20266 低危 4.14.3-14.el8_4 4.14.3-19.el8 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-30 12:15 修改: 2026-06-17 03:33

python3-rpm CVE-2026-44605 低危 4.14.3-14.el8_4 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk CVE-2022-21624 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21624

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk CVE-2023-21843 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.362.b09-2.el8_7 OpenJDK: soundbank URL remote loading (Sound, 8293742)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21843

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-18 00:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-21937 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: missing string checks for NULL characters (8296622)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21937

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-21938 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-21968 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: missing check for slash characters in URI-to-path conversion (8298667)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21968

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2023-22045 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.382.b05-2.el8 OpenJDK: array indexing integer overflow issue (8304468)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22045

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-18 21:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk CVE-2026-22007 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk-headless CVE-2021-35588 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Incomplete validation of inner class references in ClassFileParser (Hotspot, 8268071)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35588

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2021-35603 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35603

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:17 修改: 2026-06-17 03:57

java-1.8.0-openjdk-headless CVE-2022-21619 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21619

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2022-21624 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21624

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-headless CVE-2023-21843 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.362.b09-2.el8_7 OpenJDK: soundbank URL remote loading (Sound, 8293742)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21843

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-18 00:15 修改: 2026-06-17 05:34

libtiff CVE-2018-10779 低危 4.0.9-18.el8 libtiff: heap-based buffer over-read in TIFFWriteScanline function in tif_write.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10779

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-05-07 07:29 修改: 2026-06-17 01:34

libtiff CVE-2018-17101 低危 4.0.9-18.el8 libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17101

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-09-16 21:29 修改: 2026-06-17 01:45

libtiff CVE-2018-19210 低危 4.0.9-18.el8 libtiff: NULL pointer dereference in TIFFWriteDirectorySec function in tif_dirwrite.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19210

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-11-12 19:29 修改: 2026-06-17 01:48

libtiff CVE-2018-5360 低危 4.0.9-18.el8 LibTIFF: heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5360

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-01-14 02:29 修改: 2026-06-17 02:00

libtiff CVE-2020-18768 低危 4.0.9-18.el8 libtiff: heap-based buffer overflow in _TIFFmemcpy() in tif_unix.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-18768

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-22 19:15 修改: 2026-06-17 02:59

libtiff CVE-2020-35521 低危 4.0.9-18.el8 4.0.9-20.el8 libtiff: Memory allocation failure in tiff2rgba

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35521

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-09 20:15 修改: 2026-06-17 03:13

libtiff CVE-2020-35522 低危 4.0.9-18.el8 4.0.9-20.el8 libtiff: Memory allocation failure in tiff2rgba

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35522

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-03-09 20:15 修改: 2026-06-17 03:13

libtiff CVE-2022-0891 低危 4.0.9-18.el8 4.0.9-23.el8 libtiff: heap buffer overflow in extractImageSection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0891

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-10 17:44 修改: 2026-06-17 04:21

libtiff CVE-2022-0908 低危 4.0.9-18.el8 4.0.9-23.el8 tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0908

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-11 18:15 修改: 2026-06-17 04:21

libtiff CVE-2022-0909 低危 4.0.9-18.el8 4.0.9-23.el8 tiff: Divide By Zero error in tiffcrop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0909

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-11 18:15 修改: 2026-06-17 04:21

python3-unbound CVE-2019-16866 低危 1.7.3-15.el8 unbound: uninitialized memory accesses leads to crash via a crafted NOTIFY query

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16866

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-10-03 19:15 修改: 2026-06-17 02:22

python3-unbound CVE-2024-33655 低危 1.7.3-15.el8 unbound: DNSBomb vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33655

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-06 17:15 修改: 2026-06-17 07:32

python3-unbound CVE-2024-43167 低危 1.7.3-15.el8 unbound: NULL Pointer Dereference in Unbound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43167

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-12 13:38 修改: 2026-06-17 07:50

python3-unbound CVE-2024-43168 低危 1.7.3-15.el8 unbound: Heap-Buffer-Overflow in Unbound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43168

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-12 13:38 修改: 2026-06-17 07:50

libtiff CVE-2022-1056 低危 4.0.9-18.el8 libtiff: heap-based buffer overflow in _TIFFmemcpy() in tif_unix.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1056

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-28 19:15 修改: 2026-06-17 04:21

libtiff CVE-2022-1354 低危 4.0.9-18.el8 libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1354

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

libtiff CVE-2022-2520 低危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: Assertion fail in rotateImage() function at tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2520

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:42

libtiff CVE-2022-2521 低危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2521

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:42

libtiff CVE-2022-2868 低危 4.0.9-18.el8 4.0.9-26.el8_7 libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2868

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-17 22:15 修改: 2026-06-17 04:42

rpm CVE-2021-20266 低危 4.14.3-14.el8_4 4.14.3-19.el8 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-30 12:15 修改: 2026-06-17 03:33

rpm CVE-2026-44605 低危 4.14.3-14.el8_4 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libtiff CVE-2023-1916 低危 4.0.9-18.el8 libtiff: out-of-bounds read in extractImageSection() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1916

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-10 22:15 修改: 2026-06-17 05:29

libtiff CVE-2023-6228 低危 4.0.9-18.el8 4.0.9-32.el8_10 libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6228

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-18 14:15 修改: 2026-06-17 06:50

libtiff CVE-2024-13978 低危 4.0.9-18.el8 libtiff: LibTIFF Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13978

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-08-01 22:15 修改: 2026-06-17 07:03

libtiff CVE-2025-8961 低危 4.0.9-18.el8 libtiff: LibTIFF memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8961

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-08-14 13:15 修改: 2026-06-17 10:08

libtiff CVE-2025-9165 低危 4.0.9-18.el8 libtiff: LibTIFF memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9165

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-08-19 20:15 修改: 2026-06-17 10:08

rpm-build-libs CVE-2021-20266 低危 4.14.3-14.el8_4 4.14.3-19.el8 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-30 12:15 修改: 2026-06-17 03:33

rpm-build-libs CVE-2026-44605 低危 4.14.3-14.el8_4 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk-headless CVE-2023-21937 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: missing string checks for NULL characters (8296622)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21937

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-21938 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-21968 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: missing check for slash characters in URI-to-path conversion (8298667)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21968

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2023-22045 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.382.b05-2.el8 OpenJDK: array indexing integer overflow issue (8304468)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22045

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-18 21:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-headless CVE-2026-22007 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

rpm-libs CVE-2021-20266 低危 4.14.3-14.el8_4 4.14.3-19.el8 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-30 12:15 修改: 2026-06-17 03:33

rpm-libs CVE-2026-44605 低危 4.14.3-14.el8_4 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk-headless CVE-2026-22018 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk-headless CVE-2026-27171 低危 1:1.8.0.302.b08-0.el8_4 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

java-1.8.0-openjdk-headless CVE-2026-34268 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

java-1.8.0-openjdk CVE-2026-22018 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

kexec-tools CVE-2021-20269 低危 2.0.20-46.el8_4.1 2.0.20-57.el8 kexec-tools: incorrect permissions on kdump dmesg file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20269

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-10 17:41 修改: 2026-06-17 03:33

rpm-plugin-systemd-inhibit CVE-2021-20266 低危 4.14.3-14.el8_4 4.14.3-19.el8 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-04-30 12:15 修改: 2026-06-17 03:33

rpm-plugin-systemd-inhibit CVE-2026-44605 低危 4.14.3-14.el8_4 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

java-1.8.0-openjdk CVE-2026-27171 低危 1:1.8.0.302.b08-0.el8_4 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

shadow-utils CVE-2023-4641 低危 2:4.6-12.el8 2:4.6-19.el8 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38

shadow-utils CVE-2024-56433 低危 2:4.6-12.el8 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

java-1.8.0-openjdk CVE-2026-34268 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

binutils CVE-2025-1152 低危 2.30-93.el8 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38

binutils CVE-2025-1153 低危 2.30-93.el8 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-10 19:15 修改: 2026-06-17 08:38

binutils CVE-2025-11839 低危 2.30-93.el8 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-16 14:15 修改: 2026-06-17 08:31

binutils CVE-2025-11840 低危 2.30-93.el8 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-10-16 16:15 修改: 2026-06-17 08:31

binutils CVE-2025-3198 低危 2.30-93.el8 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-04-04 02:15 修改: 2026-06-17 09:19

binutils CVE-2025-66861 低危 2.30-93.el8 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils CVE-2025-66862 低危 2.30-93.el8 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

glibc-common CVE-2021-27645 低危 2.28-151.el8 2.28-164.el8 glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-24 15:15 修改: 2026-06-17 03:45

glibc-common CVE-2021-33574 低危 2.28-151.el8 2.28-164.el8 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-25 22:15 修改: 2026-06-17 03:54

sqlite-libs CVE-2019-19244 低危 3.26.0-13.el8 sqlite: allows a crash if a sub-select uses both DISTINCT and window functions and also has certain ORDER BY usage

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19244

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-11-25 20:15 修改: 2026-06-17 02:26

sqlite-libs CVE-2019-9936 低危 3.26.0-13.el8 sqlite: heap-based buffer over-read in function fts5HashEntrySort in sqlite3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9936

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44

sqlite-libs CVE-2019-9937 低危 3.26.0-13.el8 sqlite: null-pointer dereference in function fts5ChunkIterate in sqlite3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9937

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44

sqlite-libs CVE-2020-35525 低危 3.26.0-13.el8 3.26.0-16.el8_6 sqlite: Null pointer derreference in src/select.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35525

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-01 18:15 修改: 2026-06-17 03:13

sqlite-libs CVE-2024-0232 低危 3.26.0-13.el8 sqlite: use-after-free bug in jsonParseAddNodeArray

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0232

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 14:15 修改: 2026-06-17 06:53

sqlite-libs CVE-2025-70873 低危 3.26.0-13.el8 sqlite: SQLite: Information Disclosure via Crafted ZIP File

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03

glibc-common CVE-2024-33601 低危 2.28-151.el8 2.28-251.el8_10.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

krb5-libs CVE-2024-26458 低危 1.18.2-8.el8 1.18.2-27.el8_10 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

krb5-libs CVE-2024-26461 低危 1.18.2-8.el8 1.18.2-27.el8_10 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

glibc-common CVE-2024-33602 低危 2.28-151.el8 2.28-251.el8_10.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-common CVE-2025-15281 低危 2.28-151.el8 2.28-251.el8_10.31 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

grub2-tools CVE-2021-3981 低危 1:2.02-99.el8 1:2.02-123.el8 grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3981

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-10 17:43 修改: 2026-06-17 04:06

grub2-tools CVE-2023-4692 低危 1:2.02-99.el8 1:2.02-156.el8 grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4692

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-25 18:17 修改: 2026-07-21 06:16

libxml2 CVE-2023-45322 低危 2.9.7-9.el8_4.2 libxml2: use-after-free in xmlUnlinkNode() in tree.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45322

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-06 22:15 修改: 2026-06-17 06:28

libxml2 CVE-2024-34459 低危 2.9.7-9.el8_4.2 2.9.7-21.el8_10.5 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-14 15:39 修改: 2026-06-17 07:33

libxml2 CVE-2025-27113 低危 2.9.7-9.el8_4.2 libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27113

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 23:15 修改: 2026-06-17 09:03

libxml2 CVE-2025-6170 低危 2.9.7-9.el8_4.2 2.9.7-21.el8_10.6 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-16 16:15 修改: 2026-07-14 22:16

systemd CVE-2021-3997 低危 239-45.el8_4.2 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

libxml2 CVE-2026-0989 低危 2.9.7-9.el8_4.2 libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0989

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-15 15:15 修改: 2026-06-30 20:20

libxml2 CVE-2026-0992 低危 2.9.7-9.el8_4.2 libxml2: libxml2: Denial of Service via crafted XML catalogs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0992

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-15 15:15 修改: 2026-06-30 20:17

grub2-tools CVE-2023-4693 低危 1:2.02-99.el8 1:2.02-156.el8 grub2: out-of-bounds read at fs/ntfs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4693

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-25 18:17 修改: 2026-07-21 06:16

libzstd CVE-2021-24032 低危 1.4.4-1.el8 zstd: Race condition allows attacker to access world-readable destination file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24032

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-03-04 21:15 修改: 2026-06-17 03:39

lua CVE-2020-24370 低危 5.3.4-11.el8 5.3.4-12.el8 lua: segmentation fault in getlocal and setlocal functions in ldebug.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24370

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2020-08-17 17:15 修改: 2026-06-17 03:05

lua-libs CVE-2020-24370 低危 5.3.4-11.el8 5.3.4-12.el8 lua: segmentation fault in getlocal and setlocal functions in ldebug.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24370

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2020-08-17 17:15 修改: 2026-06-17 03:05

glibc-common CVE-2026-4438 低危 2.28-151.el8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

binutils CVE-2025-66863 低危 2.30-93.el8 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils CVE-2025-66864 低危 2.30-93.el8 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

systemd-libs CVE-2021-3997 低危 239-45.el8_4.2 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

binutils CVE-2025-66865 低危 2.30-93.el8 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

ncurses-base CVE-2018-19211 低危 6.1-7.20180224.el8 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2018-11-12 19:29 修改: 2026-06-17 01:48

ncurses-base CVE-2020-19185 低危 6.1-7.20180224.el8 ncurses: Heap buffer overflow in one_one_mapping function in progs/dump_entry.c:1373

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19185

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:15 修改: 2026-06-17 02:59

ncurses-base CVE-2020-19186 低危 6.1-7.20180224.el8 ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19186

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:15 修改: 2026-06-17 02:59

ncurses-base CVE-2020-19187 低危 6.1-7.20180224.el8 ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19187

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:15 修改: 2026-06-17 02:59

ncurses-base CVE-2020-19188 低危 6.1-7.20180224.el8 ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19188

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:16 修改: 2026-06-17 02:59

ncurses-base CVE-2020-19189 低危 6.1-7.20180224.el8 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:16 修改: 2026-06-17 02:59

ncurses-base CVE-2020-19190 低危 6.1-7.20180224.el8 ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19190

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:16 修改: 2026-06-17 02:59

ncurses-base CVE-2021-39537 低危 6.1-7.20180224.el8 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-09-20 16:15 修改: 2026-06-17 04:03

systemd-pam CVE-2021-3997 低危 239-45.el8_4.2 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

ncurses-base CVE-2023-50495 低危 6.1-7.20180224.el8 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

expat CVE-2025-66382 低危 2.2.5-4.el8 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

expat CVE-2026-24515 低危 2.2.5-4.el8 libexpat: libexpat null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23

expat CVE-2026-41080 低危 2.2.5-4.el8 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18

ncurses-libs CVE-2018-19211 低危 6.1-7.20180224.el8 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2018-11-12 19:29 修改: 2026-06-17 01:48

ncurses-libs CVE-2020-19185 低危 6.1-7.20180224.el8 ncurses: Heap buffer overflow in one_one_mapping function in progs/dump_entry.c:1373

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19185

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:15 修改: 2026-06-17 02:59

ncurses-libs CVE-2020-19186 低危 6.1-7.20180224.el8 ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19186

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:15 修改: 2026-06-17 02:59

ncurses-libs CVE-2020-19187 低危 6.1-7.20180224.el8 ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19187

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:15 修改: 2026-06-17 02:59

ncurses-libs CVE-2020-19188 低危 6.1-7.20180224.el8 ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19188

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:16 修改: 2026-06-17 02:59

systemd-udev CVE-2021-3997 低危 239-45.el8_4.2 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

ncurses-libs CVE-2020-19189 低危 6.1-7.20180224.el8 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:16 修改: 2026-06-17 02:59

ncurses-libs CVE-2020-19190 低危 6.1-7.20180224.el8 ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19190

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-22 19:16 修改: 2026-06-17 02:59

ncurses-libs CVE-2021-39537 低危 6.1-7.20180224.el8 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-09-20 16:15 修改: 2026-06-17 04:03

ncurses-libs CVE-2023-50495 低危 6.1-7.20180224.el8 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

binutils CVE-2025-66866 低危 2.30-93.el8 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-29 17:15 修改: 2026-06-17 09:57

binutils CVE-2025-69644 低危 2.30-93.el8 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

file CVE-2019-8906 低危 5.33-16.el8_3.1 file: out-of-bounds read in do_core_note in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8906

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42

tar CVE-2019-9923 低危 2:1.30-5.el8 tar: null-pointer dereference in pax_decode_header in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9923

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44

tar CVE-2021-20193 低危 2:1.30-5.el8 tar: Memory leak in read_header() in list.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20193

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-03-26 17:15 修改: 2026-06-17 03:33

tar CVE-2023-39804 低危 2:1.30-5.el8 tar: Incorrectly handled extension attributes in PAX archives can lead to a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-03-27 04:15 修改: 2026-06-17 06:12

binutils CVE-2025-69645 低危 2.30-93.el8 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils CVE-2025-69646 低危 2.30-93.el8 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

file-libs CVE-2019-8906 低危 5.33-16.el8_3.1 file: out-of-bounds read in do_core_note in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8906

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-18 17:29 修改: 2026-06-17 02:42

binutils CVE-2025-69647 低危 2.30-93.el8 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

binutils CVE-2025-69648 低危 2.30-93.el8 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00

curl CVE-2021-22898 低危 7.61.1-18.el8 7.61.1-22.el8 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37

curl CVE-2021-22925 低危 7.61.1-18.el8 7.61.1-22.el8 curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

curl CVE-2022-35252 低危 7.61.1-18.el8 7.61.1-30.el8 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51

curl CVE-2022-43552 低危 7.61.1-18.el8 7.61.1-30.el8 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06

nss CVE-2020-12413 低危 3.53.1-17.el8_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51

nss CVE-2024-7531 低危 3.53.1-17.el8_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20

libarchive CVE-2018-1000879 低危 3.3.3-1.el8 libarchive: NULL pointer dereference in ACL parser resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000879

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-12-20 17:29 修改: 2026-06-17 01:33

libarchive CVE-2018-1000880 低危 3.3.3-1.el8 libarchive: Improper input validation in WARC parser resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000880

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-12-20 17:29 修改: 2026-06-17 01:33

libarchive CVE-2022-36227 低危 3.3.3-1.el8 3.3.3-5.el8 libarchive: NULL pointer dereference in archive_write.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36227

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-11-22 02:15 修改: 2026-06-17 04:53

libarchive CVE-2025-1632 低危 3.3.3-1.el8 libarchive: null pointer dereference in bsdunzip.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1632

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-24 14:15 修改: 2026-06-17 08:39

libarchive CVE-2025-5915 低危 3.3.3-1.el8 libarchive: Heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5915

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-09 20:15 修改: 2026-06-30 11:16

libarchive CVE-2025-5916 低危 3.3.3-1.el8 libarchive: Integer overflow while reading warc files at archive_read_support_format_warc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5916

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-09 20:15 修改: 2026-06-30 11:16

nss-softokn CVE-2020-12413 低危 3.53.1-17.el8_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51

nss-softokn CVE-2024-7531 低危 3.53.1-17.el8_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20

libarchive CVE-2025-5917 低危 3.3.3-1.el8 libarchive: Off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5917

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-09 20:15 修改: 2026-06-30 11:16

unbound-libs CVE-2019-16866 低危 1.7.3-15.el8 unbound: uninitialized memory accesses leads to crash via a crafted NOTIFY query

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16866

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-10-03 19:15 修改: 2026-06-17 02:22

unbound-libs CVE-2024-33655 低危 1.7.3-15.el8 unbound: DNSBomb vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33655

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-06 17:15 修改: 2026-06-17 07:32

unbound-libs CVE-2024-43167 低危 1.7.3-15.el8 unbound: NULL Pointer Dereference in Unbound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43167

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-12 13:38 修改: 2026-06-17 07:50

unbound-libs CVE-2024-43168 低危 1.7.3-15.el8 unbound: Heap-Buffer-Overflow in Unbound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43168

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-12 13:38 修改: 2026-06-17 07:50

libarchive CVE-2025-5918 低危 3.3.3-1.el8 libarchive: Reading past EOF may be triggered for piped file streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5918

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-09 20:15 修改: 2026-06-30 11:16

libarchive CVE-2026-15028 低危 3.3.3-1.el8 libarchive: heap overflow OOB read while parsing a tar archive contains a PAX extended header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15028

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-07-10 10:16 修改: 2026-07-15 10:16

curl CVE-2023-27534 低危 7.61.1-18.el8 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

fribidi CVE-2022-25310 低危 1.0.4-8.el8 1.0.4-9.el8 fribidi: SEGV in fribidi_remove_bidi_marks

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25310

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-06 18:15 修改: 2026-06-17 04:33

gawk CVE-2023-4156 低危 4.2.1-2.el8 gawk: heap out of bound read in builtin.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4156

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-25 18:15 修改: 2026-06-17 06:37

nss-softokn-freebl CVE-2020-12413 低危 3.53.1-17.el8_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51

nss-softokn-freebl CVE-2024-7531 低危 3.53.1-17.el8_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20

glibc-langpack-en CVE-2021-27645 低危 2.28-151.el8 2.28-164.el8 glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-24 15:15 修改: 2026-06-17 03:45

glibc-langpack-en CVE-2021-33574 低危 2.28-151.el8 2.28-164.el8 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-25 22:15 修改: 2026-06-17 03:54

glibc-langpack-en CVE-2024-33601 低危 2.28-151.el8 2.28-251.el8_10.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libcap CVE-2023-2602 低危 2.26-4.el8 2.48-5.el8_8 libcap: Memory Leak on pthread_create() Error

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2602

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-06-06 20:15 修改: 2026-06-17 05:52

glibc-langpack-en CVE-2024-33602 低危 2.28-151.el8 2.28-251.el8_10.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-langpack-en CVE-2025-15281 低危 2.28-151.el8 2.28-251.el8_10.31 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

nss-sysinit CVE-2020-12413 低危 3.53.1-17.el8_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51

nss-sysinit CVE-2024-7531 低危 3.53.1-17.el8_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20

glibc-langpack-en CVE-2026-4438 低危 2.28-151.el8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

curl CVE-2023-28322 低危 7.61.1-18.el8 7.61.1-33.el8_9.5 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

grub2-tools-minimal CVE-2021-3981 低危 1:2.02-99.el8 1:2.02-123.el8 grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3981

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-10 17:43 修改: 2026-06-17 04:06

grub2-tools-minimal CVE-2023-4692 低危 1:2.02-99.el8 1:2.02-156.el8 grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4692

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-25 18:17 修改: 2026-07-21 06:16

grub2-tools-minimal CVE-2023-4693 低危 1:2.02-99.el8 1:2.02-156.el8 grub2: out-of-bounds read at fs/ntfs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4693

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-25 18:17 修改: 2026-07-21 06:16

curl CVE-2023-38546 低危 7.61.1-18.el8 7.61.1-33.el8_9.5 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10

nss-util CVE-2020-12413 低危 3.53.1-17.el8_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51

nss-util CVE-2024-7531 低危 3.53.1-17.el8_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20

curl CVE-2024-11053 低危 7.61.1-18.el8 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56

openldap CVE-2023-2953 低危 2.4.46-17.el8_4 2.4.46-19.el8_10 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-30 22:15 修改: 2026-06-17 05:53

gdk-pixbuf2 CVE-2025-6199 低危 2.36.12-5.el8 gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6199

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-17 15:15 修改: 2026-06-30 11:16

curl CVE-2024-7264 低危 7.61.1-18.el8 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19

curl CVE-2025-14524 低危 7.61.1-18.el8 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36

curl CVE-2025-15079 低危 7.61.1-18.el8 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

gdk-pixbuf2-modules CVE-2025-6199 低危 2.36.12-5.el8 gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6199

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-06-17 15:15 修改: 2026-06-30 11:16

curl CVE-2025-15224 低危 7.61.1-18.el8 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

curl CVE-2026-6276 低危 7.61.1-18.el8 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

binutils CVE-2025-69649 低危 2.30-93.el8 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

binutils CVE-2025-69650 低危 2.30-93.el8 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

giflib CVE-2023-39742 低危 5.1.4-3.el8 giflib: giflib: Denial of Service via getarg.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39742

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-25 14:15 修改: 2026-06-17 06:12

binutils CVE-2025-69651 低危 2.30-93.el8 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00

binutils CVE-2025-69652 低危 2.30-93.el8 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00

avahi-libs CVE-2017-6519 低危 0.7-20.el8 avahi: Multicast DNS responds to unicast queries outside of local network

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6519

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2017-05-01 01:59 修改: 2026-06-17 01:22

dbus CVE-2020-35512 低危 1:1.12.8-12.el8_4.2 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:13

binutils CVE-2018-12641 低危 2.30-93.el8 binutils: Stack Exhaustion in the demangling functions provided by libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12641

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-06-22 12:29 修改: 2026-06-17 01:38

ca-certificates CVE-2023-37920 低危 2020.2.41-80.0.el8_2 2024.2.69_v8.0.303-80.0.el8_10 python-certifi: Removal of e-Tugra root certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37920

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-07-25 21:15 修改: 2026-06-17 06:08

binutils CVE-2018-12697 低危 2.30-93.el8 binutils: NULL pointer dereference in work_stuff_copy_to_from in cplus-dem.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12697

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-06-23 23:29 修改: 2026-06-17 01:38

openssl CVE-2023-0464 低危 1:1.1.1g-15.el8_3 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

openssl CVE-2023-0465 低危 1:1.1.1g-15.el8_3 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

openssl CVE-2023-2650 低危 1:1.1.1g-15.el8_3 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53

openssl CVE-2023-3446 低危 1:1.1.1g-15.el8_3 1:1.1.1k-12.el8_9 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14

openssl CVE-2023-3817 低危 1:1.1.1g-15.el8_3 1:1.1.1k-12.el8_9 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14

openssl CVE-2023-5678 低危 1:1.1.1g-15.el8_3 1:1.1.1k-12.el8_9 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49

vim-common CVE-2018-20786 低危 2:8.0.1763-15.el8 libvterm: NULL pointer dereference in vterm_screen_set_callbacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20786

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-24 14:29 修改: 2026-06-17 01:53

vim-common CVE-2020-20703 低危 2:8.0.1763-15.el8 vim: buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-20703

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-20 15:15 修改: 2026-06-17 03:03

vim-common CVE-2021-3236 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference in ex_buffer_all method

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3236

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-11 14:15 修改: 2026-06-17 04:04

vim-common CVE-2021-3927 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in gchar_cursor() in misc1.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3927

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-05 15:15 修改: 2026-06-17 04:06

vim-common CVE-2021-3974 低危 2:8.0.1763-15.el8 vim: Use after free in regexp_nfa.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3974

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-19 11:15 修改: 2026-06-17 04:06

vim-common CVE-2021-4166 低危 2:8.0.1763-15.el8 vim: out-of-bounds read in do_arg_all() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4166

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-25 19:15 修改: 2026-06-17 04:19

vim-common CVE-2022-0351 低危 2:8.0.1763-15.el8 vim: access of memory location before start of buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0351

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-25 18:15 修改: 2026-06-17 04:20

vim-common CVE-2022-1154 低危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.13 vim: use after free in utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1154

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-30 12:15 修改: 2026-06-17 04:21

vim-common CVE-2022-1619 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in cmdline_erase_chars of ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1619

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-08 10:15 修改: 2026-06-17 04:22

vim-common CVE-2022-1720 低危 2:8.0.1763-15.el8 vim: buffer over-read in grab_file_name() in findfile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1720

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-20 15:15 修改: 2026-06-17 04:22

vim-common CVE-2022-2124 低危 2:8.0.1763-15.el8 vim: out of bounds read in current_quote()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2124

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 10:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2125 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow in get_lisp_indent()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2125

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 12:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2126 低危 2:8.0.1763-15.el8 vim: out of bounds read in suggest_trie_walk()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2126

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 13:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2129 低危 2:8.0.1763-15.el8 vim: out of bounds write in vim_regsub_both()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2129

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 19:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2175 低危 2:8.0.1763-15.el8 vim: buffer over-read in put_on_cmdline() at ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2175

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-23 13:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2182 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow through parse_cmd_address() in function utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2182

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-23 18:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2183 低危 2:8.0.1763-15.el8 vim: out-of-bounds read through get_lisp_indent() in function get_lisp_indent

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2183

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-23 19:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2206 低危 2:8.0.1763-15.el8 vim: out-of-bound read in function msg_outtrans_attr

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2206

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-26 19:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2207 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in function ins_bs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2207

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-27 12:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2208 低危 2:8.0.1763-15.el8 vim: null pointer dereference in function diff_check

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2208

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-27 13:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2210 低危 2:8.0.1763-15.el8 vim: out-of-bound write in function ml_append_int

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2210

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-27 16:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2284 低危 2:8.0.1763-15.el8 vim: out of bounds read in utfc_ptr2len() at mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2284

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 15:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2285 低危 2:8.0.1763-15.el8 vim: integer overflow in del_typebuf() at getchar.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2285

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 16:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2286 低危 2:8.0.1763-15.el8 vim: out of bounds read in ins_bytes() at change.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2286

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 19:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2287 低危 2:8.0.1763-15.el8 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2287

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 22:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2343 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2343

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-08 18:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2344 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2344

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-08 19:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2345 低危 2:8.0.1763-15.el8 vim: use-after-free in skipwhite() in charset.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2345

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-08 22:15 修改: 2026-06-17 04:41

vim-common CVE-2022-2522 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_infercase_gettext() at src/insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2522

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-25 14:15 修改: 2026-06-17 04:42

vim-common CVE-2022-2819 低危 2:8.0.1763-15.el8 vim: heap buffer overflow in compile_lock_unlock() at src/vim9cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2819

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-15 11:21 修改: 2026-06-17 04:42

vim-common CVE-2022-2845 低危 2:8.0.1763-15.el8 vim: Buffer Under-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2845

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-17 15:15 修改: 2026-06-17 04:42

vim-common CVE-2022-2849 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in latin_ptr2len() at src/mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2849

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-17 18:15 修改: 2026-06-17 04:42

vim-common CVE-2022-2923 低危 2:8.0.1763-15.el8 vim: null pointer dereference in function sug_filltree

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2923

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-22 21:15 修改: 2026-06-17 04:42

vim-common CVE-2022-2946 低危 2:8.0.1763-15.el8 vim: use after free in function vim_vsnprintf_typval

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2946

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 17:15 修改: 2026-06-17 04:42

vim-common CVE-2022-2980 低危 2:8.0.1763-15.el8 vim: null pointer dereference in do_mouse() at src/mouse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2980

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 04:42

vim-common CVE-2022-3037 低危 2:8.0.1763-15.el8 vim: use after free in function qf_buf_add_line( )

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3037

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-30 21:15 修改: 2026-06-17 04:58

vim-common CVE-2022-3153 低危 2:8.0.1763-15.el8 vim: null pointer dereference in vim_regcomp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3153

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-08 15:15 修改: 2026-06-17 04:58

vim-common CVE-2022-3234 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3234

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-17 22:15 修改: 2026-06-17 04:59

vim-common CVE-2022-3235 低危 2:8.0.1763-15.el8 vim: Use After Free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-18 20:15 修改: 2026-06-17 04:59

vim-common CVE-2022-3256 低危 2:8.0.1763-15.el8 vim: use-after-free in movemark() at mark.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3256

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-22 13:15 修改: 2026-06-17 04:59

vim-common CVE-2022-3296 低危 2:8.0.1763-15.el8 vim: stack buffer overflow in ex_finally() in ex_eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3296

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-25 17:15 修改: 2026-06-17 04:59

vim-common CVE-2022-3352 低危 2:8.0.1763-15.el8 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3352

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-29 12:15 修改: 2026-06-17 04:59

vim-common CVE-2022-3705 低危 2:8.0.1763-15.el8 vim: a use after free in the function qf_update_buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3705

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-26 20:15 修改: 2026-06-17 05:00

vim-common CVE-2022-4292 低危 2:8.0.1763-15.el8 vim: use-after-free in did_set_spelllang() in src/spell.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4292

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-05 19:15 修改: 2026-06-17 05:20

vim-common CVE-2022-4293 低危 2:8.0.1763-15.el8 vim: floating point exception in num_divide() in src/eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-05 19:15 修改: 2026-06-17 05:20

vim-common CVE-2023-0049 低危 2:8.0.1763-15.el8 vim: out-of-bounds read in function build_stl_str_hl

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0049

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-04 16:15 修改: 2026-06-17 05:24

vim-common CVE-2023-0054 低危 2:8.0.1763-15.el8 vim: out-of-bounds write in do_string_sub() in eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0054

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-04 19:15 修改: 2026-06-17 05:24

vim-common CVE-2023-0288 低危 2:8.0.1763-15.el8 vim: a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0288

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-13 16:15 修改: 2026-06-17 05:25

vim-common CVE-2023-0433 低危 2:8.0.1763-15.el8 vim: reading past the end of a line when formatting text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0433

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-21 15:15 修改: 2026-06-17 05:25

vim-common CVE-2023-0512 低危 2:8.0.1763-15.el8 vim: divide by zero in adjust_skipcol() at move.ca

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0512

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-30 16:15 修改: 2026-06-17 05:25

vim-common CVE-2023-1127 低危 2:8.0.1763-15.el8 vim: Divide By Zero in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1127

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-01 19:15 修改: 2026-06-17 05:27

vim-common CVE-2023-1170 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1170

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-03 23:15 修改: 2026-06-17 05:27

vim-common CVE-2023-1175 低危 2:8.0.1763-15.el8 vim: Incorrect Calculation of Buffer Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1175

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-04 16:15 修改: 2026-06-17 05:27

vim-common CVE-2023-1264 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference issue in utfc_ptr2len

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1264

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-07 22:15 修改: 2026-06-17 05:27

vim-common CVE-2023-2609 低危 2:8.0.1763-15.el8 vim: NULL Pointer Dereference in get_register() at register.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2609

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-09 18:15 修改: 2026-06-23 18:17

vim-common CVE-2023-2610 低危 2:8.0.1763-15.el8 vim: integer overflow vulnerability in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2610

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-09 22:15 修改: 2026-06-23 18:17

vim-common CVE-2023-46246 低危 2:8.0.1763-15.el8 vim: Integer Overflow in :history command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46246

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-27 19:15 修改: 2026-06-23 18:17

vim-common CVE-2023-4733 低危 2:8.0.1763-15.el8 vim: use-after-free in function buflist_altfpos

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4733

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-04 14:15 修改: 2026-06-23 18:17

vim-common CVE-2023-4734 低危 2:8.0.1763-15.el8 vim: segmentation fault in function f_fullcommand in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4734

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-02 18:15 修改: 2026-06-23 18:17

vim-common CVE-2023-4735 低危 2:8.0.1763-15.el8 vim: OOB Write ops.c in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4735

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-02 18:15 修改: 2026-06-23 18:17

vim-common CVE-2023-4738 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in vim_regsub_both in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4738

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-02 20:15 修改: 2026-06-17 06:38

vim-common CVE-2023-4750 低危 2:8.0.1763-15.el8 vim: use-after-free in function bt_quickfix

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4750

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-04 14:15 修改: 2026-06-23 18:17

vim-common CVE-2023-4751 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in function utfc_ptr2len in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4751

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-03 19:15 修改: 2026-06-17 06:38

vim-common CVE-2023-4752 低危 2:8.0.1763-15.el8 vim: use-after-free in function ins_compl_get_exp in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4752

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-04 14:15 修改: 2026-06-17 06:38

vim-common CVE-2023-4781 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in function vim_regsub_both in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4781

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-05 19:15 修改: 2026-06-23 18:17

vim-common CVE-2023-48231 低危 2:8.0.1763-15.el8 vim: use after free in win_close()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48231

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-common CVE-2023-48232 低危 2:8.0.1763-15.el8 vim: floating point exception in adjust_plines_for_skipcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48232

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-common CVE-2023-48233 低危 2:8.0.1763-15.el8 vim: overflow with count for :s command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48233

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-common CVE-2023-48234 低危 2:8.0.1763-15.el8 vim: overflow in nv_z_get_count

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48234

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-common CVE-2023-48235 低危 2:8.0.1763-15.el8 vim: overflow in ex address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-common CVE-2023-48236 低危 2:8.0.1763-15.el8 vim: overflow in get_number

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48236

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-common CVE-2023-48237 低危 2:8.0.1763-15.el8 vim: buffer overflow in shift_line

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48237

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-common CVE-2023-48706 低危 2:8.0.1763-15.el8 vim: use-after-free in ex_substitute in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48706

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-22 22:15 修改: 2026-06-23 18:17

vim-common CVE-2023-5344 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow in trunc_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5344

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-02 20:15 修改: 2026-06-17 06:48

vim-common CVE-2023-5441 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference in screen_line() in src/screen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5441

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-05 21:15 修改: 2026-06-17 06:48

vim-common CVE-2023-5535 低危 2:8.0.1763-15.el8 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5535

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-11 20:15 修改: 2026-06-17 06:48

vim-common CVE-2024-22667 低危 2:8.0.1763-15.el8 vim: Stack buffer over flow in did_set_langmap function in map.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22667

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-05 08:15 修改: 2026-06-17 07:11

vim-common CVE-2024-41965 低危 2:8.0.1763-15.el8 vim: Double-Free Vulnerability in Vim Could Cause Application Crashes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41965

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-01 22:15 修改: 2026-06-17 07:48

vim-common CVE-2024-43374 低危 2:8.0.1763-15.el8 vim: use-after-free in alist_add() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43374

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-16 02:15 修改: 2026-06-17 07:50

vim-common CVE-2024-43802 低危 2:8.0.1763-15.el8 vim: Heap Buffer Overflow in Vim's Typeahead Buffer Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43802

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-26 19:15 修改: 2026-06-17 07:51

vim-common CVE-2024-45306 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45306

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-09-02 18:15 修改: 2026-06-17 07:53

vim-common CVE-2024-47814 低危 2:8.0.1763-15.el8 vim: use-after-free when closing buffers in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47814

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-07 22:15 修改: 2026-06-17 07:57

vim-common CVE-2025-1215 低危 2:8.0.1763-15.el8 vim: vim main.c memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1215

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-12 19:15 修改: 2026-06-17 08:38

vim-common CVE-2025-22134 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow with visual mode in Vim < 9.1.1003

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22134

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-13 21:15 修改: 2026-06-17 08:45

vim-common CVE-2025-24014 低危 2:8.0.1763-15.el8 vim: segmentation fault in win_line() in Vim < 9.1.1043

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24014

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-20 23:15 修改: 2026-06-17 08:57

vim-common CVE-2025-26603 低危 2:8.0.1763-15.el8 vim: heap-use-after-free in function str_to_reg in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26603

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 19:15 修改: 2026-06-17 09:02

vim-common CVE-2026-26269 低危 2:8.0.1763-15.el8 vim: Netbeans specialKeys stack buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26269

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-13 20:17 修改: 2026-06-17 10:26

vim-common CVE-2026-28422 低危 2:8.0.1763-15.el8 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28422

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

openssl CVE-2024-0727 低危 1:1.1.1g-15.el8_3 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54

openssl CVE-2024-13176 低危 1:1.1.1g-15.el8_3 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01

openssl CVE-2024-2511 低危 1:1.1.1g-15.el8_3 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

openssl CVE-2024-41996 低危 1:1.1.1g-15.el8_3 openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41996

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-26 06:15 修改: 2026-06-17 07:48

openssl CVE-2024-4741 低危 1:1.1.1g-15.el8_3 1:1.1.1k-16.el8_6 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

openssl CVE-2024-5535 低危 1:1.1.1g-15.el8_3 1:1.1.1k-14.el8_6 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16

openssl CVE-2025-15468 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

openssl CVE-2025-15469 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

openssl CVE-2025-68160 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

openssl CVE-2025-69418 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69420 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69421 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2026-22795 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl CVE-2026-22796 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl CVE-2026-28387 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl CVE-2026-28388 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl CVE-2026-28389 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl CVE-2026-31789 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34

openssl CVE-2026-34180 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38

openssl CVE-2026-42766 低危 1:1.1.1g-15.el8_3 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl CVE-2026-42768 低危 1:1.1.1g-15.el8_3 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl CVE-2026-42769 低危 1:1.1.1g-15.el8_3 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl CVE-2026-42770 低危 1:1.1.1g-15.el8_3 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-07-20 17:17

openssl CVE-2026-42771 低危 1:1.1.1g-15.el8_3 openssl: Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42771

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl CVE-2026-45446 低危 1:1.1.1g-15.el8_3 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52

openssl CVE-2026-7383 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02

openssl CVE-2026-9076 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04

binutils CVE-2018-12698 低危 2.30-93.el8 binutils: excessive memory consumption in demangle_template in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12698

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-06-23 23:29 修改: 2026-06-17 01:38

jasper-libs CVE-2017-13745 低危 2.0.14-4.el8 jasper: reachable abort in jpc_dec_process_sot()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13745

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2017-08-29 06:29 修改: 2026-06-17 01:05

jasper-libs CVE-2017-5499 低危 2.0.14-4.el8 jasper: Signed integer overflow in jpc_dequantize() in jpc_dec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5499

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2017-03-01 15:59 修改: 2026-06-17 01:20

jasper-libs CVE-2017-9782 低危 2.0.14-4.el8 jasper: cdef.ents[] heap-based buffer over-read in jp2_decode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9782

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2017-06-21 20:29 修改: 2026-06-17 01:28

jasper-libs CVE-2018-18873 低危 2.0.14-4.el8 jasper: NULL pointer dereference in ras_putdatastd() in ras_enc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18873

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-31 16:29 修改: 2026-06-17 01:48

jasper-libs CVE-2018-19139 低危 2.0.14-4.el8 jasper: memory leak of data allocated in jpc_unk_getparms() after abort in jpc_dec_process_sot()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19139

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-11-09 21:29 修改: 2026-06-17 01:48

jasper-libs CVE-2018-19539 低危 2.0.14-4.el8 jasper: access violation in jas_image_readcmpt() in jas_image.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19539

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-11-26 03:29 修改: 2026-06-17 01:49

jasper-libs CVE-2018-19540 低危 2.0.14-4.el8 jasper: heap-based buffer overflow of size 1 in jas_icctxtdesc_input in libjasper/base/jas_icc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19540

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-11-26 03:29 修改: 2026-06-17 01:49

jasper-libs CVE-2018-19541 低危 2.0.14-4.el8 jasper: heap-based buffer over-read of size 8 in jas_image_depalettize in libjasper/base/jas_image.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19541

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-11-26 03:29 修改: 2026-06-17 01:49

jasper-libs CVE-2018-19542 低危 2.0.14-4.el8 jasper: invalid access in jp2_decode in libjasper/jp2/jp2_dec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19542

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-11-26 03:29 修改: 2026-06-17 01:49

jasper-libs CVE-2018-19543 低危 2.0.14-4.el8 jasper: heap-based buffer over-read in jp2_decode() in jp2_dec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19543

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-11-26 03:29 修改: 2026-06-17 01:49

jasper-libs CVE-2018-20570 低危 2.0.14-4.el8 jasper: heap-based buffer over-read in jp2_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20570

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-12-28 16:29 修改: 2026-06-17 01:53

jasper-libs CVE-2018-20622 低危 2.0.14-4.el8 jasper: memory leak in jpc_dec_decodepkt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20622

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-12-31 19:29 修改: 2026-06-17 01:53

jasper-libs CVE-2022-40755 低危 2.0.14-4.el8 jasper: Reachable assertion in inttobits, jas_image.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40755

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-16 22:15 修改: 2026-06-17 05:01

jasper-libs CVE-2023-51257 低危 2.0.14-4.el8 jasper: Invalid memory write

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51257

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-16 02:15 修改: 2026-06-17 06:40

libcurl-minimal CVE-2021-22898 低危 7.61.1-18.el8 7.61.1-22.el8 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37

libcurl-minimal CVE-2021-22925 低危 7.61.1-18.el8 7.61.1-22.el8 curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

openssl-libs CVE-2023-0464 低危 1:1.1.1g-15.el8_3 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

openssl-libs CVE-2023-0465 低危 1:1.1.1g-15.el8_3 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

vim-enhanced CVE-2018-20786 低危 2:8.0.1763-15.el8 libvterm: NULL pointer dereference in vterm_screen_set_callbacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20786

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-24 14:29 修改: 2026-06-17 01:53

vim-enhanced CVE-2020-20703 低危 2:8.0.1763-15.el8 vim: buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-20703

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-20 15:15 修改: 2026-06-17 03:03

vim-enhanced CVE-2021-3236 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference in ex_buffer_all method

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3236

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-11 14:15 修改: 2026-06-17 04:04

vim-enhanced CVE-2021-3927 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in gchar_cursor() in misc1.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3927

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-05 15:15 修改: 2026-06-17 04:06

vim-enhanced CVE-2021-3974 低危 2:8.0.1763-15.el8 vim: Use after free in regexp_nfa.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3974

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-19 11:15 修改: 2026-06-17 04:06

vim-enhanced CVE-2021-4166 低危 2:8.0.1763-15.el8 vim: out-of-bounds read in do_arg_all() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4166

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-25 19:15 修改: 2026-06-17 04:19

vim-enhanced CVE-2022-0351 低危 2:8.0.1763-15.el8 vim: access of memory location before start of buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0351

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-25 18:15 修改: 2026-06-17 04:20

vim-enhanced CVE-2022-1154 低危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.13 vim: use after free in utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1154

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-30 12:15 修改: 2026-06-17 04:21

vim-enhanced CVE-2022-1619 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in cmdline_erase_chars of ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1619

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-08 10:15 修改: 2026-06-17 04:22

vim-enhanced CVE-2022-1720 低危 2:8.0.1763-15.el8 vim: buffer over-read in grab_file_name() in findfile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1720

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-20 15:15 修改: 2026-06-17 04:22

vim-enhanced CVE-2022-2124 低危 2:8.0.1763-15.el8 vim: out of bounds read in current_quote()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2124

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 10:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2125 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow in get_lisp_indent()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2125

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 12:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2126 低危 2:8.0.1763-15.el8 vim: out of bounds read in suggest_trie_walk()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2126

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 13:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2129 低危 2:8.0.1763-15.el8 vim: out of bounds write in vim_regsub_both()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2129

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 19:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2175 低危 2:8.0.1763-15.el8 vim: buffer over-read in put_on_cmdline() at ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2175

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-23 13:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2182 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow through parse_cmd_address() in function utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2182

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-23 18:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2183 低危 2:8.0.1763-15.el8 vim: out-of-bounds read through get_lisp_indent() in function get_lisp_indent

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2183

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-23 19:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2206 低危 2:8.0.1763-15.el8 vim: out-of-bound read in function msg_outtrans_attr

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2206

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-26 19:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2207 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in function ins_bs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2207

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-27 12:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2208 低危 2:8.0.1763-15.el8 vim: null pointer dereference in function diff_check

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2208

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-27 13:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2210 低危 2:8.0.1763-15.el8 vim: out-of-bound write in function ml_append_int

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2210

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-27 16:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2284 低危 2:8.0.1763-15.el8 vim: out of bounds read in utfc_ptr2len() at mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2284

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 15:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2285 低危 2:8.0.1763-15.el8 vim: integer overflow in del_typebuf() at getchar.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2285

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 16:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2286 低危 2:8.0.1763-15.el8 vim: out of bounds read in ins_bytes() at change.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2286

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 19:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2287 低危 2:8.0.1763-15.el8 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2287

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 22:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2343 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2343

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-08 18:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2344 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2344

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-08 19:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2345 低危 2:8.0.1763-15.el8 vim: use-after-free in skipwhite() in charset.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2345

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-08 22:15 修改: 2026-06-17 04:41

vim-enhanced CVE-2022-2522 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_infercase_gettext() at src/insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2522

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-25 14:15 修改: 2026-06-17 04:42

vim-enhanced CVE-2022-2819 低危 2:8.0.1763-15.el8 vim: heap buffer overflow in compile_lock_unlock() at src/vim9cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2819

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-15 11:21 修改: 2026-06-17 04:42

vim-enhanced CVE-2022-2845 低危 2:8.0.1763-15.el8 vim: Buffer Under-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2845

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-17 15:15 修改: 2026-06-17 04:42

vim-enhanced CVE-2022-2849 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in latin_ptr2len() at src/mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2849

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-17 18:15 修改: 2026-06-17 04:42

vim-enhanced CVE-2022-2923 低危 2:8.0.1763-15.el8 vim: null pointer dereference in function sug_filltree

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2923

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-22 21:15 修改: 2026-06-17 04:42

vim-enhanced CVE-2022-2946 低危 2:8.0.1763-15.el8 vim: use after free in function vim_vsnprintf_typval

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2946

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 17:15 修改: 2026-06-17 04:42

vim-enhanced CVE-2022-2980 低危 2:8.0.1763-15.el8 vim: null pointer dereference in do_mouse() at src/mouse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2980

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 04:42

vim-enhanced CVE-2022-3037 低危 2:8.0.1763-15.el8 vim: use after free in function qf_buf_add_line( )

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3037

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-30 21:15 修改: 2026-06-17 04:58

vim-enhanced CVE-2022-3153 低危 2:8.0.1763-15.el8 vim: null pointer dereference in vim_regcomp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3153

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-08 15:15 修改: 2026-06-17 04:58

vim-enhanced CVE-2022-3234 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3234

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-17 22:15 修改: 2026-06-17 04:59

vim-enhanced CVE-2022-3235 低危 2:8.0.1763-15.el8 vim: Use After Free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-18 20:15 修改: 2026-06-17 04:59

vim-enhanced CVE-2022-3256 低危 2:8.0.1763-15.el8 vim: use-after-free in movemark() at mark.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3256

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-22 13:15 修改: 2026-06-17 04:59

vim-enhanced CVE-2022-3296 低危 2:8.0.1763-15.el8 vim: stack buffer overflow in ex_finally() in ex_eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3296

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-25 17:15 修改: 2026-06-17 04:59

vim-enhanced CVE-2022-3352 低危 2:8.0.1763-15.el8 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3352

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-29 12:15 修改: 2026-06-17 04:59

vim-enhanced CVE-2022-3705 低危 2:8.0.1763-15.el8 vim: a use after free in the function qf_update_buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3705

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-26 20:15 修改: 2026-06-17 05:00

vim-enhanced CVE-2022-4292 低危 2:8.0.1763-15.el8 vim: use-after-free in did_set_spelllang() in src/spell.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4292

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-05 19:15 修改: 2026-06-17 05:20

vim-enhanced CVE-2022-4293 低危 2:8.0.1763-15.el8 vim: floating point exception in num_divide() in src/eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-05 19:15 修改: 2026-06-17 05:20

vim-enhanced CVE-2023-0049 低危 2:8.0.1763-15.el8 vim: out-of-bounds read in function build_stl_str_hl

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0049

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-04 16:15 修改: 2026-06-17 05:24

vim-enhanced CVE-2023-0054 低危 2:8.0.1763-15.el8 vim: out-of-bounds write in do_string_sub() in eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0054

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-04 19:15 修改: 2026-06-17 05:24

vim-enhanced CVE-2023-0288 低危 2:8.0.1763-15.el8 vim: a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0288

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-13 16:15 修改: 2026-06-17 05:25

vim-enhanced CVE-2023-0433 低危 2:8.0.1763-15.el8 vim: reading past the end of a line when formatting text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0433

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-21 15:15 修改: 2026-06-17 05:25

vim-enhanced CVE-2023-0512 低危 2:8.0.1763-15.el8 vim: divide by zero in adjust_skipcol() at move.ca

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0512

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-30 16:15 修改: 2026-06-17 05:25

vim-enhanced CVE-2023-1127 低危 2:8.0.1763-15.el8 vim: Divide By Zero in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1127

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-01 19:15 修改: 2026-06-17 05:27

vim-enhanced CVE-2023-1170 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1170

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-03 23:15 修改: 2026-06-17 05:27

vim-enhanced CVE-2023-1175 低危 2:8.0.1763-15.el8 vim: Incorrect Calculation of Buffer Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1175

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-04 16:15 修改: 2026-06-17 05:27

vim-enhanced CVE-2023-1264 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference issue in utfc_ptr2len

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1264

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-07 22:15 修改: 2026-06-17 05:27

vim-enhanced CVE-2023-2609 低危 2:8.0.1763-15.el8 vim: NULL Pointer Dereference in get_register() at register.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2609

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-09 18:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-2610 低危 2:8.0.1763-15.el8 vim: integer overflow vulnerability in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2610

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-09 22:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-46246 低危 2:8.0.1763-15.el8 vim: Integer Overflow in :history command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46246

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-27 19:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-4733 低危 2:8.0.1763-15.el8 vim: use-after-free in function buflist_altfpos

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4733

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-04 14:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-4734 低危 2:8.0.1763-15.el8 vim: segmentation fault in function f_fullcommand in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4734

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-02 18:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-4735 低危 2:8.0.1763-15.el8 vim: OOB Write ops.c in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4735

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-02 18:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-4738 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in vim_regsub_both in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4738

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-02 20:15 修改: 2026-06-17 06:38

vim-enhanced CVE-2023-4750 低危 2:8.0.1763-15.el8 vim: use-after-free in function bt_quickfix

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4750

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-04 14:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-4751 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in function utfc_ptr2len in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4751

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-03 19:15 修改: 2026-06-17 06:38

vim-enhanced CVE-2023-4752 低危 2:8.0.1763-15.el8 vim: use-after-free in function ins_compl_get_exp in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4752

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-04 14:15 修改: 2026-06-17 06:38

vim-enhanced CVE-2023-4781 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in function vim_regsub_both in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4781

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-05 19:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-48231 低危 2:8.0.1763-15.el8 vim: use after free in win_close()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48231

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-48232 低危 2:8.0.1763-15.el8 vim: floating point exception in adjust_plines_for_skipcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48232

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-48233 低危 2:8.0.1763-15.el8 vim: overflow with count for :s command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48233

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-48234 低危 2:8.0.1763-15.el8 vim: overflow in nv_z_get_count

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48234

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-48235 低危 2:8.0.1763-15.el8 vim: overflow in ex address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-48236 低危 2:8.0.1763-15.el8 vim: overflow in get_number

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48236

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-48237 低危 2:8.0.1763-15.el8 vim: buffer overflow in shift_line

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48237

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-48706 低危 2:8.0.1763-15.el8 vim: use-after-free in ex_substitute in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48706

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-22 22:15 修改: 2026-06-23 18:17

vim-enhanced CVE-2023-5344 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow in trunc_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5344

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-02 20:15 修改: 2026-06-17 06:48

vim-enhanced CVE-2023-5441 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference in screen_line() in src/screen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5441

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-05 21:15 修改: 2026-06-17 06:48

vim-enhanced CVE-2023-5535 低危 2:8.0.1763-15.el8 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5535

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-11 20:15 修改: 2026-06-17 06:48

vim-enhanced CVE-2024-22667 低危 2:8.0.1763-15.el8 vim: Stack buffer over flow in did_set_langmap function in map.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22667

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-05 08:15 修改: 2026-06-17 07:11

vim-enhanced CVE-2024-41965 低危 2:8.0.1763-15.el8 vim: Double-Free Vulnerability in Vim Could Cause Application Crashes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41965

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-01 22:15 修改: 2026-06-17 07:48

vim-enhanced CVE-2024-43374 低危 2:8.0.1763-15.el8 vim: use-after-free in alist_add() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43374

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-16 02:15 修改: 2026-06-17 07:50

vim-enhanced CVE-2024-43802 低危 2:8.0.1763-15.el8 vim: Heap Buffer Overflow in Vim's Typeahead Buffer Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43802

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-26 19:15 修改: 2026-06-17 07:51

vim-enhanced CVE-2024-45306 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45306

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-09-02 18:15 修改: 2026-06-17 07:53

vim-enhanced CVE-2024-47814 低危 2:8.0.1763-15.el8 vim: use-after-free when closing buffers in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47814

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-07 22:15 修改: 2026-06-17 07:57

vim-enhanced CVE-2025-1215 低危 2:8.0.1763-15.el8 vim: vim main.c memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1215

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-12 19:15 修改: 2026-06-17 08:38

vim-enhanced CVE-2025-22134 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow with visual mode in Vim < 9.1.1003

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22134

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-13 21:15 修改: 2026-06-17 08:45

vim-enhanced CVE-2025-24014 低危 2:8.0.1763-15.el8 vim: segmentation fault in win_line() in Vim < 9.1.1043

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24014

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-20 23:15 修改: 2026-06-17 08:57

vim-enhanced CVE-2025-26603 低危 2:8.0.1763-15.el8 vim: heap-use-after-free in function str_to_reg in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26603

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 19:15 修改: 2026-06-17 09:02

vim-enhanced CVE-2026-26269 低危 2:8.0.1763-15.el8 vim: Netbeans specialKeys stack buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26269

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-13 20:17 修改: 2026-06-17 10:26

vim-enhanced CVE-2026-28422 低危 2:8.0.1763-15.el8 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28422

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

openssl-libs CVE-2023-2650 低危 1:1.1.1g-15.el8_3 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53

openssl-libs CVE-2023-3446 低危 1:1.1.1g-15.el8_3 1:1.1.1k-12.el8_9 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14

openssl-libs CVE-2023-3817 低危 1:1.1.1g-15.el8_3 1:1.1.1k-12.el8_9 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14

openssl-libs CVE-2023-5678 低危 1:1.1.1g-15.el8_3 1:1.1.1k-12.el8_9 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49

openssl-libs CVE-2024-0727 低危 1:1.1.1g-15.el8_3 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54

openssl-libs CVE-2024-13176 低危 1:1.1.1g-15.el8_3 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01

openssl-libs CVE-2024-2511 低危 1:1.1.1g-15.el8_3 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

openssl-libs CVE-2024-41996 低危 1:1.1.1g-15.el8_3 openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41996

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-26 06:15 修改: 2026-06-17 07:48

openssl-libs CVE-2024-4741 低危 1:1.1.1g-15.el8_3 1:1.1.1k-16.el8_6 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

openssl-libs CVE-2024-5535 低危 1:1.1.1g-15.el8_3 1:1.1.1k-14.el8_6 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16

openssl-libs CVE-2025-15468 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

openssl-libs CVE-2025-15469 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

openssl-libs CVE-2025-68160 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

openssl-libs CVE-2025-69418 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl-libs CVE-2025-69420 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl-libs CVE-2025-69421 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl-libs CVE-2026-22795 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl-libs CVE-2026-22796 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl-libs CVE-2026-28387 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl-libs CVE-2026-28388 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl-libs CVE-2026-28389 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28

openssl-libs CVE-2026-31789 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34

openssl-libs CVE-2026-34180 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38

openssl-libs CVE-2026-42766 低危 1:1.1.1g-15.el8_3 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl-libs CVE-2026-42768 低危 1:1.1.1g-15.el8_3 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl-libs CVE-2026-42769 低危 1:1.1.1g-15.el8_3 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl-libs CVE-2026-42770 低危 1:1.1.1g-15.el8_3 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-07-20 17:17

openssl-libs CVE-2026-42771 低危 1:1.1.1g-15.el8_3 openssl: Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42771

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48

openssl-libs CVE-2026-45446 低危 1:1.1.1g-15.el8_3 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52

openssl-libs CVE-2026-7383 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02

openssl-libs CVE-2026-9076 低危 1:1.1.1g-15.el8_3 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04

libcurl-minimal CVE-2022-35252 低危 7.61.1-18.el8 7.61.1-30.el8 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51

libcurl-minimal CVE-2022-43552 低危 7.61.1-18.el8 7.61.1-30.el8 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06

libcurl-minimal CVE-2023-27534 低危 7.61.1-18.el8 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl-minimal CVE-2023-28322 低危 7.61.1-18.el8 7.61.1-33.el8_9.5 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

libcurl-minimal CVE-2023-38546 低危 7.61.1-18.el8 7.61.1-33.el8_9.5 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10

libcurl-minimal CVE-2024-11053 低危 7.61.1-18.el8 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56

libcurl-minimal CVE-2024-7264 低危 7.61.1-18.el8 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19

libcurl-minimal CVE-2025-14524 低危 7.61.1-18.el8 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36

libcurl-minimal CVE-2025-15079 低危 7.61.1-18.el8 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

pcre CVE-2019-20838 低危 8.42-4.el8 8.42-6.el8 pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20838

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:31

vim-filesystem CVE-2018-20786 低危 2:8.0.1763-15.el8 libvterm: NULL pointer dereference in vterm_screen_set_callbacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20786

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-02-24 14:29 修改: 2026-06-17 01:53

vim-filesystem CVE-2020-20703 低危 2:8.0.1763-15.el8 vim: buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-20703

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-06-20 15:15 修改: 2026-06-17 03:03

vim-filesystem CVE-2021-3236 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference in ex_buffer_all method

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3236

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-08-11 14:15 修改: 2026-06-17 04:04

vim-filesystem CVE-2021-3927 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in gchar_cursor() in misc1.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3927

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-05 15:15 修改: 2026-06-17 04:06

vim-filesystem CVE-2021-3974 低危 2:8.0.1763-15.el8 vim: Use after free in regexp_nfa.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3974

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-11-19 11:15 修改: 2026-06-17 04:06

vim-filesystem CVE-2021-4166 低危 2:8.0.1763-15.el8 vim: out-of-bounds read in do_arg_all() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4166

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-12-25 19:15 修改: 2026-06-17 04:19

vim-filesystem CVE-2022-0351 低危 2:8.0.1763-15.el8 vim: access of memory location before start of buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0351

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-01-25 18:15 修改: 2026-06-17 04:20

vim-filesystem CVE-2022-1154 低危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.13 vim: use after free in utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1154

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-30 12:15 修改: 2026-06-17 04:21

vim-filesystem CVE-2022-1619 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in cmdline_erase_chars of ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1619

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-05-08 10:15 修改: 2026-06-17 04:22

vim-filesystem CVE-2022-1720 低危 2:8.0.1763-15.el8 vim: buffer over-read in grab_file_name() in findfile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1720

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-20 15:15 修改: 2026-06-17 04:22

vim-filesystem CVE-2022-2124 低危 2:8.0.1763-15.el8 vim: out of bounds read in current_quote()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2124

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 10:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2125 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow in get_lisp_indent()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2125

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 12:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2126 低危 2:8.0.1763-15.el8 vim: out of bounds read in suggest_trie_walk()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2126

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 13:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2129 低危 2:8.0.1763-15.el8 vim: out of bounds write in vim_regsub_both()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2129

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-19 19:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2175 低危 2:8.0.1763-15.el8 vim: buffer over-read in put_on_cmdline() at ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2175

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-23 13:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2182 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow through parse_cmd_address() in function utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2182

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-23 18:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2183 低危 2:8.0.1763-15.el8 vim: out-of-bounds read through get_lisp_indent() in function get_lisp_indent

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2183

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-23 19:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2206 低危 2:8.0.1763-15.el8 vim: out-of-bound read in function msg_outtrans_attr

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2206

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-26 19:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2207 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in function ins_bs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2207

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-27 12:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2208 低危 2:8.0.1763-15.el8 vim: null pointer dereference in function diff_check

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2208

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-27 13:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2210 低危 2:8.0.1763-15.el8 vim: out-of-bound write in function ml_append_int

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2210

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-06-27 16:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2284 低危 2:8.0.1763-15.el8 vim: out of bounds read in utfc_ptr2len() at mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2284

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 15:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2285 低危 2:8.0.1763-15.el8 vim: integer overflow in del_typebuf() at getchar.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2285

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 16:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2286 低危 2:8.0.1763-15.el8 vim: out of bounds read in ins_bytes() at change.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2286

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 19:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2287 低危 2:8.0.1763-15.el8 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2287

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-02 22:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2343 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2343

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-08 18:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2344 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2344

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-08 19:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2345 低危 2:8.0.1763-15.el8 vim: use-after-free in skipwhite() in charset.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2345

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-08 22:15 修改: 2026-06-17 04:41

vim-filesystem CVE-2022-2522 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_infercase_gettext() at src/insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2522

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-07-25 14:15 修改: 2026-06-17 04:42

vim-filesystem CVE-2022-2819 低危 2:8.0.1763-15.el8 vim: heap buffer overflow in compile_lock_unlock() at src/vim9cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2819

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-15 11:21 修改: 2026-06-17 04:42

vim-filesystem CVE-2022-2845 低危 2:8.0.1763-15.el8 vim: Buffer Under-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2845

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-17 15:15 修改: 2026-06-17 04:42

vim-filesystem CVE-2022-2849 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in latin_ptr2len() at src/mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2849

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-17 18:15 修改: 2026-06-17 04:42

vim-filesystem CVE-2022-2923 低危 2:8.0.1763-15.el8 vim: null pointer dereference in function sug_filltree

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2923

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-22 21:15 修改: 2026-06-17 04:42

vim-filesystem CVE-2022-2946 低危 2:8.0.1763-15.el8 vim: use after free in function vim_vsnprintf_typval

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2946

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-23 17:15 修改: 2026-06-17 04:42

vim-filesystem CVE-2022-2980 低危 2:8.0.1763-15.el8 vim: null pointer dereference in do_mouse() at src/mouse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2980

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-25 20:15 修改: 2026-06-17 04:42

vim-filesystem CVE-2022-3037 低危 2:8.0.1763-15.el8 vim: use after free in function qf_buf_add_line( )

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3037

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-30 21:15 修改: 2026-06-17 04:58

vim-filesystem CVE-2022-3153 低危 2:8.0.1763-15.el8 vim: null pointer dereference in vim_regcomp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3153

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-08 15:15 修改: 2026-06-17 04:58

vim-filesystem CVE-2022-3234 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3234

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-17 22:15 修改: 2026-06-17 04:59

vim-filesystem CVE-2022-3235 低危 2:8.0.1763-15.el8 vim: Use After Free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-18 20:15 修改: 2026-06-17 04:59

vim-filesystem CVE-2022-3256 低危 2:8.0.1763-15.el8 vim: use-after-free in movemark() at mark.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3256

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-22 13:15 修改: 2026-06-17 04:59

vim-filesystem CVE-2022-3296 低危 2:8.0.1763-15.el8 vim: stack buffer overflow in ex_finally() in ex_eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3296

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-25 17:15 修改: 2026-06-17 04:59

vim-filesystem CVE-2022-3352 低危 2:8.0.1763-15.el8 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3352

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-09-29 12:15 修改: 2026-06-17 04:59

vim-filesystem CVE-2022-3705 低危 2:8.0.1763-15.el8 vim: a use after free in the function qf_update_buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3705

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-26 20:15 修改: 2026-06-17 05:00

vim-filesystem CVE-2022-4292 低危 2:8.0.1763-15.el8 vim: use-after-free in did_set_spelllang() in src/spell.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4292

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-05 19:15 修改: 2026-06-17 05:20

vim-filesystem CVE-2022-4293 低危 2:8.0.1763-15.el8 vim: floating point exception in num_divide() in src/eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4293

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-12-05 19:15 修改: 2026-06-17 05:20

vim-filesystem CVE-2023-0049 低危 2:8.0.1763-15.el8 vim: out-of-bounds read in function build_stl_str_hl

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0049

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-04 16:15 修改: 2026-06-17 05:24

vim-filesystem CVE-2023-0054 低危 2:8.0.1763-15.el8 vim: out-of-bounds write in do_string_sub() in eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0054

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-04 19:15 修改: 2026-06-17 05:24

vim-filesystem CVE-2023-0288 低危 2:8.0.1763-15.el8 vim: a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0288

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-13 16:15 修改: 2026-06-17 05:25

vim-filesystem CVE-2023-0433 低危 2:8.0.1763-15.el8 vim: reading past the end of a line when formatting text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0433

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-21 15:15 修改: 2026-06-17 05:25

vim-filesystem CVE-2023-0512 低危 2:8.0.1763-15.el8 vim: divide by zero in adjust_skipcol() at move.ca

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0512

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-30 16:15 修改: 2026-06-17 05:25

vim-filesystem CVE-2023-1127 低危 2:8.0.1763-15.el8 vim: Divide By Zero in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1127

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-01 19:15 修改: 2026-06-17 05:27

vim-filesystem CVE-2023-1170 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1170

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-03 23:15 修改: 2026-06-17 05:27

vim-filesystem CVE-2023-1175 低危 2:8.0.1763-15.el8 vim: Incorrect Calculation of Buffer Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1175

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-04 16:15 修改: 2026-06-17 05:27

vim-filesystem CVE-2023-1264 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference issue in utfc_ptr2len

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1264

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-03-07 22:15 修改: 2026-06-17 05:27

vim-filesystem CVE-2023-2609 低危 2:8.0.1763-15.el8 vim: NULL Pointer Dereference in get_register() at register.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2609

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-09 18:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-2610 低危 2:8.0.1763-15.el8 vim: integer overflow vulnerability in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2610

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-05-09 22:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-46246 低危 2:8.0.1763-15.el8 vim: Integer Overflow in :history command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46246

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-27 19:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-4733 低危 2:8.0.1763-15.el8 vim: use-after-free in function buflist_altfpos

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4733

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-04 14:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-4734 低危 2:8.0.1763-15.el8 vim: segmentation fault in function f_fullcommand in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4734

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-02 18:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-4735 低危 2:8.0.1763-15.el8 vim: OOB Write ops.c in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4735

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-02 18:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-4738 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in vim_regsub_both in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4738

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-02 20:15 修改: 2026-06-17 06:38

vim-filesystem CVE-2023-4750 低危 2:8.0.1763-15.el8 vim: use-after-free in function bt_quickfix

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4750

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-04 14:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-4751 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in function utfc_ptr2len in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4751

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-03 19:15 修改: 2026-06-17 06:38

vim-filesystem CVE-2023-4752 低危 2:8.0.1763-15.el8 vim: use-after-free in function ins_compl_get_exp in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4752

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-04 14:15 修改: 2026-06-17 06:38

vim-filesystem CVE-2023-4781 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in function vim_regsub_both in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4781

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-09-05 19:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-48231 低危 2:8.0.1763-15.el8 vim: use after free in win_close()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48231

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-48232 低危 2:8.0.1763-15.el8 vim: floating point exception in adjust_plines_for_skipcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48232

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-48233 低危 2:8.0.1763-15.el8 vim: overflow with count for :s command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48233

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-48234 低危 2:8.0.1763-15.el8 vim: overflow in nv_z_get_count

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48234

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-48235 低危 2:8.0.1763-15.el8 vim: overflow in ex address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48235

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-48236 低危 2:8.0.1763-15.el8 vim: overflow in get_number

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48236

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-48237 低危 2:8.0.1763-15.el8 vim: buffer overflow in shift_line

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48237

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-48706 低危 2:8.0.1763-15.el8 vim: use-after-free in ex_substitute in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48706

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-11-22 22:15 修改: 2026-06-23 18:17

vim-filesystem CVE-2023-5344 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow in trunc_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5344

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-02 20:15 修改: 2026-06-17 06:48

vim-filesystem CVE-2023-5441 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference in screen_line() in src/screen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5441

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-05 21:15 修改: 2026-06-17 06:48

vim-filesystem CVE-2023-5535 低危 2:8.0.1763-15.el8 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5535

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-10-11 20:15 修改: 2026-06-17 06:48

vim-filesystem CVE-2024-22667 低危 2:8.0.1763-15.el8 vim: Stack buffer over flow in did_set_langmap function in map.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22667

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-02-05 08:15 修改: 2026-06-17 07:11

vim-filesystem CVE-2024-41965 低危 2:8.0.1763-15.el8 vim: Double-Free Vulnerability in Vim Could Cause Application Crashes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41965

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-01 22:15 修改: 2026-06-17 07:48

vim-filesystem CVE-2024-43374 低危 2:8.0.1763-15.el8 vim: use-after-free in alist_add() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43374

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-16 02:15 修改: 2026-06-17 07:50

vim-filesystem CVE-2024-43802 低危 2:8.0.1763-15.el8 vim: Heap Buffer Overflow in Vim's Typeahead Buffer Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43802

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-08-26 19:15 修改: 2026-06-17 07:51

vim-filesystem CVE-2024-45306 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45306

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-09-02 18:15 修改: 2026-06-17 07:53

vim-filesystem CVE-2024-47814 低危 2:8.0.1763-15.el8 vim: use-after-free when closing buffers in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47814

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-10-07 22:15 修改: 2026-06-17 07:57

vim-filesystem CVE-2025-1215 低危 2:8.0.1763-15.el8 vim: vim main.c memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1215

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-12 19:15 修改: 2026-06-17 08:38

vim-filesystem CVE-2025-22134 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow with visual mode in Vim < 9.1.1003

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22134

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-13 21:15 修改: 2026-06-17 08:45

vim-filesystem CVE-2025-24014 低危 2:8.0.1763-15.el8 vim: segmentation fault in win_line() in Vim < 9.1.1043

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24014

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-01-20 23:15 修改: 2026-06-17 08:57

vim-filesystem CVE-2025-26603 低危 2:8.0.1763-15.el8 vim: heap-use-after-free in function str_to_reg in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26603

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-02-18 19:15 修改: 2026-06-17 09:02

vim-filesystem CVE-2026-26269 低危 2:8.0.1763-15.el8 vim: Netbeans specialKeys stack buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26269

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-13 20:17 修改: 2026-06-17 10:26

vim-filesystem CVE-2026-28422 低危 2:8.0.1763-15.el8 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28422

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

pcre CVE-2020-14155 低危 8.42-4.el8 8.42-6.el8 pcre: Integer overflow when parsing callout numeric arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:54

libcurl-minimal CVE-2025-15224 低危 7.61.1-18.el8 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

pcre2 CVE-2022-41409 低危 10.32-2.el8 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03

libcurl-minimal CVE-2026-6276 低危 7.61.1-18.el8 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

pkgconf CVE-2023-24056 低危 1.4.2-1.el8 pkgconf: unbounded string expansion due to incorrect checks may result in buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24056

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-22 04:15 修改: 2026-06-17 05:38

pkgconf-m4 CVE-2023-24056 低危 1.4.2-1.el8 pkgconf: unbounded string expansion due to incorrect checks may result in buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24056

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-22 04:15 修改: 2026-06-17 05:38

pkgconf-pkg-config CVE-2023-24056 低危 1.4.2-1.el8 pkgconf: unbounded string expansion due to incorrect checks may result in buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24056

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-22 04:15 修改: 2026-06-17 05:38

glibc-minimal-langpack CVE-2021-27645 低危 2.28-151.el8 2.28-164.el8 glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-24 15:15 修改: 2026-06-17 03:45

glibc-minimal-langpack CVE-2021-33574 低危 2.28-151.el8 2.28-164.el8 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-05-25 22:15 修改: 2026-06-17 03:54

glibc-minimal-langpack CVE-2024-33601 低危 2.28-151.el8 2.28-251.el8_10.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-minimal-langpack CVE-2024-33602 低危 2.28-151.el8 2.28-251.el8_10.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

glibc-minimal-langpack CVE-2025-15281 低危 2.28-151.el8 2.28-251.el8_10.31 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

glibc-minimal-langpack CVE-2026-4438 低危 2.28-151.el8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

libgcc CVE-2018-20657 低危 8.4.1-1.el8 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-02 14:29 修改: 2026-06-17 01:53

libgcc CVE-2018-20673 低危 8.4.1-1.el8 8.5.0-3.el8 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

libgcc CVE-2019-14250 低危 8.4.1-1.el8 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-07-24 04:15 修改: 2026-06-17 02:18

libgcc CVE-2022-27943 低危 8.4.1-1.el8 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

dbus-common CVE-2020-35512 低危 1:1.12.8-12.el8_4.2 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:13

binutils CVE-2018-12699 低危 2.30-93.el8 2.30-125.el8_10 binutils: heap-based buffer overflow in finish_stab in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12699

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-06-23 23:29 修改: 2026-06-17 01:38

binutils CVE-2018-12934 低危 2.30-93.el8 binutils: Uncontrolled Resource Consumption in remember_Ktype in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12934

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-06-28 14:29 修改: 2026-06-17 01:38

cairo CVE-2018-19876 低危 1.15.12-3.el8 cairo: Invalid free in cairo_ft_apply_variations() resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19876

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-12-05 20:29 修改: 2026-06-17 01:50

java-1.8.0-openjdk-devel CVE-2021-35588 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Incomplete validation of inner class references in ClassFileParser (Hotspot, 8268071)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35588

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

libgcrypt CVE-2026-41990 低危 1.8.5-4.el8 Libgcrypt: Libgcrypt: Denial of Service or data integrity issues from missing bounds check during Dilithium signing.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41990

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-04-23 05:16 修改: 2026-06-17 10:47

java-1.8.0-openjdk-devel CVE-2021-35603 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.312.b07-1.el8_4 OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35603

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-10-20 11:17 修改: 2026-06-17 03:57

java-1.8.0-openjdk-devel CVE-2022-21619 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21619

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

libgomp CVE-2018-20657 低危 8.4.1-1.el8 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-02 14:29 修改: 2026-06-17 01:53

libgomp CVE-2018-20673 低危 8.4.1-1.el8 8.5.0-3.el8 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-01-04 18:29 修改: 2026-06-17 01:53

libgomp CVE-2019-14250 低危 8.4.1-1.el8 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2019-07-24 04:15 修改: 2026-06-17 02:18

libgomp CVE-2022-27943 低危 8.4.1-1.el8 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

java-1.8.0-openjdk-devel CVE-2022-21624 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.352.b08-2.el8_6 OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21624

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-10-18 21:15 修改: 2026-06-17 04:26

java-1.8.0-openjdk-devel CVE-2023-21843 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.362.b09-2.el8_7 OpenJDK: soundbank URL remote loading (Sound, 8293742)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21843

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-18 00:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-21937 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: missing string checks for NULL characters (8296622)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21937

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

libjpeg-turbo CVE-2020-35538 低危 1.5.3-10.el8 libjpeg-turbo: Null pointer dereference in jcopy_sample_rows() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35538

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2022-08-31 16:15 修改: 2026-06-17 03:13

java-1.8.0-openjdk-devel CVE-2023-21938 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21938

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-21968 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.372.b07-1.el8_7 OpenJDK: missing check for slash characters in URI-to-path conversion (8298667)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-21968

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-04-18 20:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2023-22045 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.382.b05-2.el8 OpenJDK: array indexing integer overflow issue (8304468)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22045

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-07-18 21:15 修改: 2026-06-17 05:34

java-1.8.0-openjdk-devel CVE-2026-22007 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk-devel CVE-2026-22018 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

java-1.8.0-openjdk-devel CVE-2026-27171 低危 1:1.8.0.302.b08-0.el8_4 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

java-1.8.0-openjdk-devel CVE-2026-34268 低危 1:1.8.0.302.b08-0.el8_4 1:1.8.0.492.b09-1.el8 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

gnupg2 CVE-2022-3219 低危 2.2.20-2.el8 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59

gnupg2 CVE-2025-30258 低危 2.2.20-2.el8 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

libpcap CVE-2025-11961 低危 14:1.9.1-5.el8 libpcap: libpcap: Memory corruption via malformed MAC-48 address input

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11961

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2025-12-31 01:15 修改: 2026-06-17 08:31

vim-minimal CVE-2018-20786 低危 2:8.0.1763-15.el8 libvterm: NULL pointer dereference in vterm_screen_set_callbacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20786

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2019-02-24 14:29 修改: 2026-06-17 01:53

vim-minimal CVE-2020-20703 低危 2:8.0.1763-15.el8 vim: buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-20703

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-06-20 15:15 修改: 2026-06-17 03:03

vim-minimal CVE-2021-3236 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference in ex_buffer_all method

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3236

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-08-11 14:15 修改: 2026-06-17 04:04

vim-minimal CVE-2021-3927 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in gchar_cursor() in misc1.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3927

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-11-05 15:15 修改: 2026-06-17 04:06

vim-minimal CVE-2021-3974 低危 2:8.0.1763-15.el8 vim: Use after free in regexp_nfa.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3974

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-11-19 11:15 修改: 2026-06-17 04:06

vim-minimal CVE-2021-4166 低危 2:8.0.1763-15.el8 vim: out-of-bounds read in do_arg_all() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4166

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2021-12-25 19:15 修改: 2026-06-17 04:19

vim-minimal CVE-2022-0351 低危 2:8.0.1763-15.el8 vim: access of memory location before start of buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0351

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-01-25 18:15 修改: 2026-06-17 04:20

vim-minimal CVE-2022-1154 低危 2:8.0.1763-15.el8 2:8.0.1763-16.el8_5.13 vim: use after free in utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1154

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-03-30 12:15 修改: 2026-06-17 04:21

vim-minimal CVE-2022-1619 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in cmdline_erase_chars of ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1619

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-05-08 10:15 修改: 2026-06-17 04:22

vim-minimal CVE-2022-1720 低危 2:8.0.1763-15.el8 vim: buffer over-read in grab_file_name() in findfile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1720

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-20 15:15 修改: 2026-06-17 04:22

vim-minimal CVE-2022-2124 低危 2:8.0.1763-15.el8 vim: out of bounds read in current_quote()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2124

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-19 10:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2125 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow in get_lisp_indent()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2125

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-19 12:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2126 低危 2:8.0.1763-15.el8 vim: out of bounds read in suggest_trie_walk()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2126

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-19 13:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2129 低危 2:8.0.1763-15.el8 vim: out of bounds write in vim_regsub_both()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2129

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-19 19:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2175 低危 2:8.0.1763-15.el8 vim: buffer over-read in put_on_cmdline() at ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2175

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-23 13:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2182 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow through parse_cmd_address() in function utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2182

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-23 18:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2183 低危 2:8.0.1763-15.el8 vim: out-of-bounds read through get_lisp_indent() in function get_lisp_indent

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2183

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-23 19:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2206 低危 2:8.0.1763-15.el8 vim: out-of-bound read in function msg_outtrans_attr

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2206

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-26 19:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2207 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in function ins_bs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2207

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-27 12:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2208 低危 2:8.0.1763-15.el8 vim: null pointer dereference in function diff_check

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2208

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-27 13:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2210 低危 2:8.0.1763-15.el8 vim: out-of-bound write in function ml_append_int

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2210

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-06-27 16:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2284 低危 2:8.0.1763-15.el8 vim: out of bounds read in utfc_ptr2len() at mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2284

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-02 15:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2285 低危 2:8.0.1763-15.el8 vim: integer overflow in del_typebuf() at getchar.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2285

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-02 16:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2286 低危 2:8.0.1763-15.el8 vim: out of bounds read in ins_bytes() at change.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2286

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-02 19:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2287 低危 2:8.0.1763-15.el8 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2287

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-02 22:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2343 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2343

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-08 18:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2344 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2344

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-08 19:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2345 低危 2:8.0.1763-15.el8 vim: use-after-free in skipwhite() in charset.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2345

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-08 22:15 修改: 2026-06-17 04:41

vim-minimal CVE-2022-2522 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in ins_compl_infercase_gettext() at src/insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2522

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-07-25 14:15 修改: 2026-06-17 04:42

vim-minimal CVE-2022-2819 低危 2:8.0.1763-15.el8 vim: heap buffer overflow in compile_lock_unlock() at src/vim9cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2819

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-08-15 11:21 修改: 2026-06-17 04:42

vim-minimal CVE-2022-2845 低危 2:8.0.1763-15.el8 vim: Buffer Under-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2845

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-08-17 15:15 修改: 2026-06-17 04:42

vim-minimal CVE-2022-2849 低危 2:8.0.1763-15.el8 vim: heap-based buffer overflow in latin_ptr2len() at src/mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2849

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-08-17 18:15 修改: 2026-06-17 04:42

vim-minimal CVE-2022-2923 低危 2:8.0.1763-15.el8 vim: null pointer dereference in function sug_filltree

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2923

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-08-22 21:15 修改: 2026-06-17 04:42

vim-minimal CVE-2022-2946 低危 2:8.0.1763-15.el8 vim: use after free in function vim_vsnprintf_typval

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2946

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-08-23 17:15 修改: 2026-06-17 04:42

vim-minimal CVE-2022-2980 低危 2:8.0.1763-15.el8 vim: null pointer dereference in do_mouse() at src/mouse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2980

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-08-25 20:15 修改: 2026-06-17 04:42

vim-minimal CVE-2022-3037 低危 2:8.0.1763-15.el8 vim: use after free in function qf_buf_add_line( )

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3037

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-08-30 21:15 修改: 2026-06-17 04:58

vim-minimal CVE-2022-3153 低危 2:8.0.1763-15.el8 vim: null pointer dereference in vim_regcomp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3153

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-09-08 15:15 修改: 2026-06-17 04:58

vim-minimal CVE-2022-3234 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3234

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-09-17 22:15 修改: 2026-06-17 04:59

vim-minimal CVE-2022-3235 低危 2:8.0.1763-15.el8 vim: Use After Free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3235

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-09-18 20:15 修改: 2026-06-17 04:59

vim-minimal CVE-2022-3256 低危 2:8.0.1763-15.el8 vim: use-after-free in movemark() at mark.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3256

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-09-22 13:15 修改: 2026-06-17 04:59

vim-minimal CVE-2022-3296 低危 2:8.0.1763-15.el8 vim: stack buffer overflow in ex_finally() in ex_eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3296

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-09-25 17:15 修改: 2026-06-17 04:59

vim-minimal CVE-2022-3352 低危 2:8.0.1763-15.el8 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3352

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-09-29 12:15 修改: 2026-06-17 04:59

vim-minimal CVE-2022-3705 低危 2:8.0.1763-15.el8 vim: a use after free in the function qf_update_buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3705

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-10-26 20:15 修改: 2026-06-17 05:00

vim-minimal CVE-2022-4292 低危 2:8.0.1763-15.el8 vim: use-after-free in did_set_spelllang() in src/spell.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4292

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-12-05 19:15 修改: 2026-06-17 05:20

vim-minimal CVE-2022-4293 低危 2:8.0.1763-15.el8 vim: floating point exception in num_divide() in src/eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4293

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2022-12-05 19:15 修改: 2026-06-17 05:20

vim-minimal CVE-2023-0049 低危 2:8.0.1763-15.el8 vim: out-of-bounds read in function build_stl_str_hl

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0049

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-01-04 16:15 修改: 2026-06-17 05:24

vim-minimal CVE-2023-0054 低危 2:8.0.1763-15.el8 vim: out-of-bounds write in do_string_sub() in eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0054

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-01-04 19:15 修改: 2026-06-17 05:24

vim-minimal CVE-2023-0288 低危 2:8.0.1763-15.el8 vim: a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0288

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-01-13 16:15 修改: 2026-06-17 05:25

vim-minimal CVE-2023-0433 低危 2:8.0.1763-15.el8 vim: reading past the end of a line when formatting text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0433

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-01-21 15:15 修改: 2026-06-17 05:25

vim-minimal CVE-2023-0512 低危 2:8.0.1763-15.el8 vim: divide by zero in adjust_skipcol() at move.ca

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0512

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-01-30 16:15 修改: 2026-06-17 05:25

vim-minimal CVE-2023-1127 低危 2:8.0.1763-15.el8 vim: Divide By Zero in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1127

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-03-01 19:15 修改: 2026-06-17 05:27

vim-minimal CVE-2023-1170 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1170

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-03-03 23:15 修改: 2026-06-17 05:27

vim-minimal CVE-2023-1175 低危 2:8.0.1763-15.el8 vim: Incorrect Calculation of Buffer Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1175

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-03-04 16:15 修改: 2026-06-17 05:27

vim-minimal CVE-2023-1264 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference issue in utfc_ptr2len

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1264

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-03-07 22:15 修改: 2026-06-17 05:27

vim-minimal CVE-2023-2609 低危 2:8.0.1763-15.el8 vim: NULL Pointer Dereference in get_register() at register.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2609

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-05-09 18:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-2610 低危 2:8.0.1763-15.el8 vim: integer overflow vulnerability in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2610

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-05-09 22:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-46246 低危 2:8.0.1763-15.el8 vim: Integer Overflow in :history command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46246

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-10-27 19:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-4733 低危 2:8.0.1763-15.el8 vim: use-after-free in function buflist_altfpos

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4733

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-09-04 14:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-4734 低危 2:8.0.1763-15.el8 vim: segmentation fault in function f_fullcommand in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4734

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-09-02 18:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-4735 低危 2:8.0.1763-15.el8 vim: OOB Write ops.c in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4735

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-09-02 18:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-4738 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in vim_regsub_both in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4738

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-09-02 20:15 修改: 2026-06-17 06:38

vim-minimal CVE-2023-4750 低危 2:8.0.1763-15.el8 vim: use-after-free in function bt_quickfix

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4750

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-09-04 14:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-4751 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in function utfc_ptr2len in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4751

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-09-03 19:15 修改: 2026-06-17 06:38

vim-minimal CVE-2023-4752 低危 2:8.0.1763-15.el8 vim: use-after-free in function ins_compl_get_exp in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4752

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-09-04 14:15 修改: 2026-06-17 06:38

vim-minimal CVE-2023-4781 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in function vim_regsub_both in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4781

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-09-05 19:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-48231 低危 2:8.0.1763-15.el8 vim: use after free in win_close()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48231

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-48232 低危 2:8.0.1763-15.el8 vim: floating point exception in adjust_plines_for_skipcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48232

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-48233 低危 2:8.0.1763-15.el8 vim: overflow with count for :s command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48233

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-48234 低危 2:8.0.1763-15.el8 vim: overflow in nv_z_get_count

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48234

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-48235 低危 2:8.0.1763-15.el8 vim: overflow in ex address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48235

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-48236 低危 2:8.0.1763-15.el8 vim: overflow in get_number

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48236

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-48237 低危 2:8.0.1763-15.el8 vim: buffer overflow in shift_line

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48237

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-11-16 23:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-48706 低危 2:8.0.1763-15.el8 vim: use-after-free in ex_substitute in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48706

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-11-22 22:15 修改: 2026-06-23 18:17

vim-minimal CVE-2023-5344 低危 2:8.0.1763-15.el8 vim: Heap-based Buffer Overflow in trunc_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5344

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-10-02 20:15 修改: 2026-06-17 06:48

vim-minimal CVE-2023-5441 低危 2:8.0.1763-15.el8 vim: NULL pointer dereference in screen_line() in src/screen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5441

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-10-05 21:15 修改: 2026-06-17 06:48

vim-minimal CVE-2023-5535 低危 2:8.0.1763-15.el8 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5535

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2023-10-11 20:15 修改: 2026-06-17 06:48

vim-minimal CVE-2024-22667 低危 2:8.0.1763-15.el8 vim: Stack buffer over flow in did_set_langmap function in map.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22667

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-02-05 08:15 修改: 2026-06-17 07:11

vim-minimal CVE-2024-41965 低危 2:8.0.1763-15.el8 vim: Double-Free Vulnerability in Vim Could Cause Application Crashes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41965

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-08-01 22:15 修改: 2026-06-17 07:48

vim-minimal CVE-2024-43374 低危 2:8.0.1763-15.el8 vim: use-after-free in alist_add() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43374

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-08-16 02:15 修改: 2026-06-17 07:50

vim-minimal CVE-2024-43802 低危 2:8.0.1763-15.el8 vim: Heap Buffer Overflow in Vim's Typeahead Buffer Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43802

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-08-26 19:15 修改: 2026-06-17 07:51

vim-minimal CVE-2024-45306 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45306

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-09-02 18:15 修改: 2026-06-17 07:53

vim-minimal CVE-2024-47814 低危 2:8.0.1763-15.el8 vim: use-after-free when closing buffers in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47814

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2024-10-07 22:15 修改: 2026-06-17 07:57

vim-minimal CVE-2025-1215 低危 2:8.0.1763-15.el8 vim: vim main.c memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1215

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-02-12 19:15 修改: 2026-06-17 08:38

vim-minimal CVE-2025-22134 低危 2:8.0.1763-15.el8 vim: heap-buffer-overflow with visual mode in Vim < 9.1.1003

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22134

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-01-13 21:15 修改: 2026-06-17 08:45

vim-minimal CVE-2025-24014 低危 2:8.0.1763-15.el8 vim: segmentation fault in win_line() in Vim < 9.1.1043

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24014

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-01-20 23:15 修改: 2026-06-17 08:57

vim-minimal CVE-2025-26603 低危 2:8.0.1763-15.el8 vim: heap-use-after-free in function str_to_reg in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26603

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2025-02-18 19:15 修改: 2026-06-17 09:02

vim-minimal CVE-2026-26269 低危 2:8.0.1763-15.el8 vim: Netbeans specialKeys stack buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26269

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-02-13 20:17 修改: 2026-06-17 10:26

vim-minimal CVE-2026-28422 低危 2:8.0.1763-15.el8 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28422

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28

libpkgconf CVE-2023-24056 低危 1.4.2-1.el8 pkgconf: unbounded string expansion due to incorrect checks may result in buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24056

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2023-01-22 04:15 修改: 2026-06-17 05:38

gnupg2 CVE-2026-24883 低危 2.2.20-2.el8 GnuPG: GnuPG: Denial of service due to specially crafted signature packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24883

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-01-27 19:16 修改: 2026-06-17 10:23

gnupg2 CVE-2026-57062 低危 2.2.20-2.el8 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:16764cdd1bc476620e90917137529491698856d33294e38e7e11b0444715eb24

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

binutils CVE-2018-17360 低危 2.30-93.el8 binutils: heap-based buffer over-read in bfd_getl32 in libbfd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17360

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-09-23 18:29 修改: 2026-06-17 01:45

dbus-daemon CVE-2020-35512 低危 1:1.12.8-12.el8_4.2 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:13

binutils CVE-2018-17794 低危 2.30-93.el8 binutils: NULL pointer dereference in libiberty/cplus-dem.c:work_stuff_copy_to_from() via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17794

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-09-30 20:29 修改: 2026-06-17 01:46

binutils CVE-2018-17985 低危 2.30-93.el8 binutils: Stack consumption problem caused by the cplus_demangle_type

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17985

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2018-10-04 23:29 修改: 2026-06-17 01:46

zlib CVE-2026-27171 低危 1.2.11-17.el8 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

binutils CVE-2021-3487 未知 2.30-93.el8 2.30-108.el8

漏洞详情:

镜像层: sha256:2340beac72ad6ba0b8105a250e4df572aed9ec2484a7de15a80049b7d304f40d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Java (jar)
低危漏洞:15 中危漏洞:92 高危漏洞:89 严重漏洞:18
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-codec-http CVE-2019-20444 严重 4.1.38.Final 4.1.44 netty: HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30

io.netty:netty-codec-http CVE-2019-20444 严重 4.1.38.Final 4.1.44 netty: HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30

org.apache.derby:derby CVE-2022-46337 严重 10.14.2.0 10.14.2.1, 10.16.1.2, 10.15.2.1 A cleverly devised username might bypass LDAP authentication checks. I ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46337

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-11-20 09:15 修改: 2026-06-17 05:11

org.apache.mina:mina-core CVE-2024-52046 严重 2.0.0-RC1 2.2.4, 2.1.10, 2.0.27 mina-core: Apache MINA: applications using unbounded deserialization may allow RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52046

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-12-25 10:15 修改: 2026-06-17 08:06

org.apache.mina:mina-core CVE-2026-47065 严重 2.0.0-RC1 2.2.8, 2.1.13, 2.0.29 ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter By ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47065

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-03 11:16 修改: 2026-06-30 19:02

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-24813 严重 9.0.38 11.0.3, 10.1.35, 9.0.99 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41293 严重 9.0.38 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43512 严重 9.0.38 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43515 严重 9.0.38 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.springframework.boot:spring-boot-actuator-autoconfigure CVE-2023-20873 严重 2.1.17.RELEASE 3.0.6, 2.7.11, 2.6.15, 2.5.15 spring-boot: Security Bypass With Wildcard Pattern Matching on Cloud Foundry

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20873

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-04-20 21:15 修改: 2026-06-17 05:31

org.springframework.boot:spring-boot-starter-web CVE-2022-22965 严重 2.1.17.RELEASE 2.5.12, 2.6.6 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework.security:spring-security-core CVE-2022-22978 严重 5.1.12.RELEASE 5.5.7, 5.6.4, 5.4.11 springframework: Authorization Bypass in RegexRequestMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22978

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-05-19 15:15 修改: 2026-06-17 04:29

org.springframework.security:spring-security-web CVE-2022-22978 严重 5.1.12.RELEASE 5.5.7, 5.6.4, 5.4.11 springframework: Authorization Bypass in RegexRequestMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22978

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-05-19 15:15 修改: 2026-06-17 04:29

org.springframework.security:spring-security-web CVE-2024-38821 严重 5.1.12.RELEASE 5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4 Spring-WebFlux: Authorization Bypass of Static Resources in WebFlux Applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38821

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-10-28 07:15 修改: 2026-06-17 07:41

org.springframework.security:spring-security-web CVE-2026-22732 严重 5.1.12.RELEASE 6.5.9, 7.0.4 Spring Security: Spring Security: Security policy bypass and information disclosure due to unwritten HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22732

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-03-19 23:16 修改: 2026-06-17 10:20

org.springframework:spring-beans CVE-2022-22965 严重 5.1.18.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-web CVE-2016-1000027 严重 5.1.18.RELEASE 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42

org.springframework:spring-webmvc CVE-2022-22965 严重 5.1.18.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

com.google.protobuf:protobuf-java CVE-2022-3510 高危 3.8.0 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Message-Type Extensions parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

com.google.protobuf:protobuf-java CVE-2022-3510 高危 3.8.0 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Message-Type Extensions parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

com.google.protobuf:protobuf-java CVE-2024-7254 高危 3.8.0 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19

com.google.protobuf:protobuf-java CVE-2024-7254 高危 3.8.0 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19

commons-io:commons-io CVE-2024-47554 高危 2.7 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57

io.grpc:grpc-netty-shaded CVE-2025-55163 高危 1.24.0 1.75.0 netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41

io.netty:netty-codec CVE-2021-37136 高危 4.1.38.Final 4.1.68.Final netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00

io.netty:netty-codec CVE-2021-37136 高危 4.1.38.Final 4.1.68.Final netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00

io.netty:netty-codec CVE-2021-37137 高危 4.1.38.Final 4.1.68.Final netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00

io.netty:netty-codec CVE-2021-37137 高危 4.1.38.Final 4.1.68.Final netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00

io.netty:netty-codec CVE-2026-42583 高危 4.1.38.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec CVE-2026-42583 高危 4.1.38.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

io.netty:netty-codec-http CVE-2026-33870 高危 4.1.38.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20

io.netty:netty-codec-http CVE-2026-33870 高危 4.1.38.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20

io.netty:netty-codec-http CVE-2026-42584 高危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

io.netty:netty-codec-http CVE-2026-42584 高危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

io.netty:netty-codec-http CVE-2026-42587 高危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

io.netty:netty-codec-http CVE-2026-42587 高危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.38.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41

io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.38.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41

io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.38.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20

io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.38.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20

io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

io.netty:netty-codec-http2 GHSA-xpw8-rcwv-8f8p 高危 4.1.38.Final 4.1.100.Final io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08

io.netty:netty-codec-http2 GHSA-xpw8-rcwv-8f8p 高危 4.1.38.Final 4.1.100.Final io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08

io.netty:netty-handler CVE-2020-11612 高危 4.1.38.Final 4.1.46 netty: compression/decompression codecs don't enforce limits on buffer allocation sizes

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11612

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-04-07 18:15 修改: 2026-06-17 02:50

io.netty:netty-handler CVE-2020-11612 高危 4.1.38.Final 4.1.46 netty: compression/decompression codecs don't enforce limits on buffer allocation sizes

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11612

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-04-07 18:15 修改: 2026-06-17 02:50

io.netty:netty-handler CVE-2026-44249 高危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-11 22:16 修改: 2026-07-21 12:18

io.netty:netty-handler CVE-2026-44249 高危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-11 22:16 修改: 2026-07-21 12:18

io.netty:netty-handler CVE-2026-45416 高危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 15:16 修改: 2026-07-21 12:18

io.netty:netty-handler CVE-2026-45416 高危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 15:16 修改: 2026-07-21 12:18

io.netty:netty-handler CVE-2026-50010 高危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18

io.netty:netty-handler CVE-2026-50010 高危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18

mysql:mysql-connector-java CVE-2023-22102 高危 8.0.21 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

com.alibaba.nacos:nacos-client CVE-2021-43116 高危 2.0.3 Use of Hard-coded Credentials in Nacos

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43116

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-07-05 14:15 修改: 2026-06-17 04:10

com.alipay.sofa:hessian CVE-2024-46983 高危 3.3.6 3.5.5 SOFA Hessian Remote Command Execution (RCE) Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46983

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-09-19 23:15 修改: 2026-06-17 07:56

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.12.2 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

org.apache.mina:mina-core CVE-2019-0231 高危 2.0.0-RC1 2.0.21, 2.1.1 mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0231

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2019-10-01 20:15 修改: 2026-06-17 02:08

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.12.2 2.18.8, 2.21.4, 2.22.1 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58

com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.12.2 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15

com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 高危 2.12.2 2.12.6, 2.13.1 jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-03-18 22:15 修改: 2026-06-17 04:15

com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.12.2 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-25122 高危 9.0.38 10.0.2, 9.0.43, 8.5.63 tomcat: Request mix-up with h2c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25122

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-25329 高危 9.0.38 10.0.2, 9.0.41, 8.5.61, 7.0.108 tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25329

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2022-42252 高危 9.0.38 8.5.83, 9.0.68, 10.0.27, 10.1.1 tomcat: request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-11-01 09:15 修改: 2026-06-17 05:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-24998 高危 9.0.38 10.1.5, 11.0.0-M5, 8.5.88, 9.0.71 FileUpload: FileUpload DoS with excessive parts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-46589 高危 9.0.38 11.0.0-M11, 10.1.16, 9.0.83, 8.5.96 tomcat: HTTP request smuggling via malformed trailer headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-34750 高危 9.0.38 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Improper Handling of Exceptional Conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-38286 高危 9.0.38 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Denial of Service in Tomcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38286

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-11-07 08:15 修改: 2026-06-17 07:39

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-50379 高危 9.0.38 11.0.2, 10.1.34, 9.0.98 tomcat: RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-56337 高危 9.0.38 11.0.2, 10.1.34, 9.0.98 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-12-20 16:15 修改: 2026-06-17 08:12

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48988 高危 9.0.38 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat DoS in multipart upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48989 高危 9.0.38 11.0.10, 10.1.44, 9.0.108 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52520 高危 9.0.38 11.0.9, 10.1.43, 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-53506 高危 9.0.38 9.0.107, 10.1.43, 11.0.9 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55752 高危 9.0.38 11.0.11, 10.1.45, 9.0.109 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-24880 高危 9.0.38 9.0.116, 10.1.52, 11.0.20 Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41284 高危 9.0.38 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-42498 高危 9.0.38 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43513 高危 9.0.38 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.springframework.boot:spring-boot CVE-2022-27772 高危 2.1.17.RELEASE 2.2.11.RELEASE Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27772

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-03-30 18:15 修改: 2026-06-17 04:37

org.springframework.boot:spring-boot CVE-2025-22235 高危 2.1.17.RELEASE 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45

org.springframework.boot:spring-boot CVE-2026-40973 高危 2.1.17.RELEASE 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-04-28 00:16 修改: 2026-06-17 10:45

com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.12.2 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

org.springframework.boot:spring-boot-autoconfigure CVE-2023-20883 高危 2.1.17.RELEASE 3.0.7, 2.7.12, 2.6.15, 2.5.15 spring-boot: Spring Boot Welcome Page DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31

org.springframework.boot:spring-boot-starter-actuator CVE-2026-22733 高危 2.1.17.RELEASE 4.0.4, 3.5.12 Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22733

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.12.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.12.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-23 21:17 修改: 2026-07-21 12:18

org.springframework.security:spring-security-core CVE-2024-22257 高危 5.1.12.RELEASE 5.7.12, 5.8.11, 6.1.8, 6.2.3 spring-security: Broken Access Control With Direct Use of AuthenticatedVoter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22257

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-03-18 15:15 修改: 2026-06-30 13:16

com.google.code.gson:gson CVE-2022-25647 高危 2.8.6 2.8.9 com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33

com.google.code.gson:gson CVE-2022-25647 高危 2.8.6 2.8.9 com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33

com.google.protobuf:protobuf-java CVE-2021-22569 高危 3.8.0 3.16.1, 3.18.2, 3.19.2 protobuf-java: potential DoS in the parsing procedure for binary data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37

org.springframework.security:spring-security-web CVE-2021-22112 高危 5.1.12.RELEASE 5.4.4, 5.3.8, 5.2.9 jenkins: Privilege escalation vulnerability in bundled Spring Security library

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22112

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-02-23 19:15 修改: 2026-06-17 03:36

com.google.protobuf:protobuf-java CVE-2021-22569 高危 3.8.0 3.16.1, 3.18.2, 3.19.2 protobuf-java: potential DoS in the parsing procedure for binary data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37

org.springframework:spring-beans CVE-2022-22970 高危 5.1.18.RELEASE 5.2.22.RELEASE, 5.3.20 springframework: DoS via data binding to multipartFile or servlet part

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29

org.springframework:spring-context CVE-2022-22968 高危 5.1.18.RELEASE 5.3.19, 5.2.21.RELEASE Framework: Data Binding Rules Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29

org.springframework:spring-expression CVE-2023-20863 高危 5.1.18.RELEASE 6.0.8, 5.3.27, 5.2.24.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31

com.google.protobuf:protobuf-java CVE-2022-3509 高危 3.8.0 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Textformat parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

org.springframework:spring-web CVE-2024-22243 高危 5.1.18.RELEASE 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22259 高危 5.1.18.RELEASE 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22262 高危 5.1.18.RELEASE 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11

com.google.protobuf:protobuf-java CVE-2022-3509 高危 3.8.0 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Textformat parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

org.springframework:spring-webmvc CVE-2024-38819 高危 5.1.18.RELEASE 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41

org.yaml:snakeyaml CVE-2017-18640 高危 1.23 1.26 snakeyaml: Billion laughs attack via alias feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13

org.yaml:snakeyaml CVE-2022-1471 高危 1.23 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22

org.yaml:snakeyaml CVE-2022-25857 高危 1.23 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34

io.netty:netty-handler CVE-2023-34462 中危 4.1.38.Final 4.1.94.Final netty: SniHandler 16MB allocation leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03

io.netty:netty-handler CVE-2023-34462 中危 4.1.38.Final 4.1.94.Final netty: SniHandler 16MB allocation leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03

io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

mysql:mysql-connector-java CVE-2021-2471 中危 8.0.21 8.0.27 mysql-connector-java: unauthorized access to critical

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2471

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:49

mysql:mysql-connector-java CVE-2022-21363 中危 8.0.21 8.0.28 mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

io.netty:netty-codec-http CVE-2021-21290 中危 4.1.38.Final 4.1.59.Final netty: Information disclosure via the local system temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35

org.apache.httpcomponents:httpclient CVE-2020-13956 中危 4.5.12 4.5.13, 5.0.3 apache-httpclient: incorrect handling of malformed authority component in request URIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53

io.netty:netty-codec-http CVE-2021-21290 中危 4.1.38.Final 4.1.59.Final netty: Information disclosure via the local system temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35

io.netty:netty-codec-http CVE-2021-43797 中危 4.1.38.Final 4.1.71.Final netty: control chars in header names may lead to HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11

io.netty:netty-codec-http CVE-2021-43797 中危 4.1.38.Final 4.1.71.Final netty: control chars in header names may lead to HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11

org.apache.mina:mina-core CVE-2021-41973 中危 2.0.0-RC1 2.1.5, 2.0.22 mina-core: infinite loop may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41973

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-11-01 09:15 修改: 2026-06-17 04:09

io.netty:netty-codec-http CVE-2022-24823 中危 4.1.38.Final 4.1.77.Final netty: world readable temporary file containing sensitive data

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32

io.netty:netty-codec-http CVE-2022-24823 中危 4.1.38.Final 4.1.77.Final netty: world readable temporary file containing sensitive data

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32

io.netty:netty-codec-http CVE-2024-29025 中危 4.1.38.Final 4.1.108.Final netty-codec-http: Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22

io.netty:netty-codec-http CVE-2024-29025 中危 4.1.38.Final 4.1.108.Final netty-codec-http: Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22

io.netty:netty-codec-http CVE-2025-67735 中危 4.1.38.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58

io.netty:netty-codec-http CVE-2025-67735 中危 4.1.38.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58

io.netty:netty-codec-http CVE-2026-41417 中危 4.1.38.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46

io.netty:netty-codec-http CVE-2026-41417 中危 4.1.38.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46

io.netty:netty-codec-http CVE-2026-42580 中危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42580 中危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42581 中危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

io.netty:netty-codec-http CVE-2026-42581 中危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

io.netty:netty-codec-http CVE-2026-42585 中危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42585 中危 4.1.38.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-50020 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-codec-http CVE-2026-50020 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

com.alibaba.nacos:nacos-common CVE-2021-44667 中危 2.0.3 2.1.0-BETA, 1.4.5 Cross-site Scripting in Nacos

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44667

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-03-11 19:15 修改: 2026-06-17 04:12

com.google.guava:guava CVE-2023-2976 中危 30.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53

com.google.guava:guava CVE-2023-2976 中危 30.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53

com.alibaba.nacos:nacos-common CVE-2021-44667 中危 2.0.3 2.1.0-BETA, 1.4.5 Cross-site Scripting in Nacos

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44667

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-03-11 19:15 修改: 2026-06-17 04:12

ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.3 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00

ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.3 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-24122 中危 9.0.38 10.0.0-M10, 9.0.40, 8.5.60, 7.0.107 tomcat: Information disclosure when using NTFS file system

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24122

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-01-14 15:15 修改: 2026-06-17 03:39

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-41080 中危 9.0.38 8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 tomcat: Open Redirect vulnerability in FORM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-42795 中危 9.0.38 10.1.14, 9.0.81, 8.5.94, 11.0.0-M12 tomcat: improper cleaning of recycled objects could lead to information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-44487 中危 9.0.38 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-45648 中危 9.0.38 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 tomcat: incorrectly parsed http trailer headers can cause request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-21733 中危 9.0.38 8.5.64, 9.0.44 tomcat: Leaking of unrelated request bodies in default error page

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21733

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-01-19 11:15 修改: 2026-06-17 07:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-24549 中危 9.0.38 8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 Tomcat: HTTP/2 header handling DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49124 中危 9.0.38 11.0.8, 10.1.42, 9.0.106 Apache Tomcat installer for Windows has an untrusted search path vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49125 中危 9.0.38 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52434 中危 9.0.38 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55668 中危 9.0.38 11.0.8, 10.1.42, 9.0.106 org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-66614 中危 9.0.38 11.0.15, 10.1.50, 9.0.113 tomcat: Client certificate verification bypass due to virtual host mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-25854 中危 9.0.38 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25

org.apache.tomcat.embed:tomcat-embed-websocket CVE-2024-23672 中危 9.0.38 11.0.0-M17, 10.1.19, 9.0.86, 8.5.99 Tomcat: WebSocket DoS with incomplete closing handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13

org.hibernate.validator:hibernate-validator CVE-2023-1932 中危 6.0.20.Final 6.2.0.Final hibernate-validator: rendering of invalid html with SafeHTML leads to HTML injection and XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1932

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-11-07 10:15 修改: 2026-06-17 05:29

org.hibernate.validator:hibernate-validator CVE-2025-35036 中危 6.0.20.Final 6.2.0.CR1, 7.0.0.CR1 hibernate-validator: Hibernate Validator Expression Language Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-35036

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-06-03 20:15 修改: 2026-06-17 09:14

ch.qos.logback:logback-core CVE-2021-42550 中危 1.2.3 1.2.9 logback: remote code execution through JNDI call from within its configuration file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-12-16 19:15 修改: 2026-06-17 04:09

io.netty:netty-codec CVE-2025-58057 中危 4.1.38.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43

io.netty:netty-codec-http2 CVE-2021-21295 中危 4.1.38.Final 4.1.60.Final netty: possible request smuggling in HTTP/2 due missing validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35

org.springframework.boot:spring-boot-actuator CVE-2023-34055 中危 2.1.17.RELEASE 2.7.18, 3.0.13, 3.1.6 spring-boot: org.springframework.boot: spring-boot-actuator class vulnerable to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34055

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-11-28 09:15 修改: 2026-06-17 06:02

io.netty:netty-codec-http2 CVE-2021-21295 中危 4.1.38.Final 4.1.60.Final netty: possible request smuggling in HTTP/2 due missing validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35

io.netty:netty-codec-http2 CVE-2021-21409 中危 4.1.38.Final 4.1.61.Final netty: Request smuggling via content-length header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35

io.netty:netty-codec-http2 CVE-2021-21409 中危 4.1.38.Final 4.1.61.Final netty: Request smuggling via content-length header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35

io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54

io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54

io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.38.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18

org.springframework.security:spring-security-core CVE-2024-38827 中危 5.1.12.RELEASE 5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 spring-security: authorization bypass for case sensitive comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-12-02 15:15 修改: 2026-06-17 07:41

io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.38.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18

io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.38.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-common CVE-2024-47535 中危 4.1.38.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57

org.springframework.security:spring-security-web CVE-2026-47838 中危 5.1.12.RELEASE 6.5.11 Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47838

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-10 00:16 修改: 2026-06-30 22:16

io.netty:netty-common CVE-2024-47535 中危 4.1.38.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57

io.netty:netty-common CVE-2025-25193 中危 4.1.38.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00

io.netty:netty-common CVE-2025-25193 中危 4.1.38.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00

org.springframework:spring-context CVE-2024-38820 中危 5.1.18.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

io.netty:netty-codec CVE-2025-58057 中危 4.1.38.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43

org.springframework:spring-expression CVE-2022-22950 中危 5.1.18.RELEASE 5.3.17, 5.2.20.RELEASE spring-expression: Denial of service via specially crafted SpEL expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-expression CVE-2023-20861 中危 5.1.18.RELEASE 6.0.7, 5.3.26, 5.2.23.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2024-38808 中危 5.1.18.RELEASE 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41

com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.12.2 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30

com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.12.2 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.12.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.12.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

org.springframework:spring-web CVE-2024-38809 中危 5.1.18.RELEASE 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41

org.springframework:spring-web CVE-2024-38820 中危 5.1.18.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

com.google.protobuf:protobuf-java CVE-2022-3171 中危 3.8.0 3.21.7, 3.20.3, 3.19.6, 3.16.3 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58

com.google.protobuf:protobuf-java CVE-2022-3171 中危 3.8.0 3.21.7, 3.20.3, 3.19.6, 3.16.3 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58

org.springframework:spring-webmvc CVE-2026-22745 中危 5.1.18.RELEASE 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.12.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30

io.netty:netty-handler CVE-2019-20445 中危 4.1.38.Final 4.1.45 netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30

io.netty:netty-handler CVE-2019-20445 中危 4.1.38.Final 4.1.45 netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30

org.yaml:snakeyaml CVE-2022-38749 中危 1.23 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38750 中危 1.23 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38751 中危 1.23 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38752 中危 1.23 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-41854 中危 1.23 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03

ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.3 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00

com.google.guava:guava CVE-2020-8908 低危 30.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27

com.google.guava:guava CVE-2020-8908 低危 30.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27

ch.qos.logback:logback-core CVE-2026-10532 低危 1.2.3 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-06-01 13:16 修改: 2026-06-17 10:12

io.netty:netty-codec-http CVE-2025-58056 低危 4.1.38.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43

io.netty:netty-codec-http CVE-2025-58056 低危 4.1.38.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43

org.springframework:spring-webmvc CVE-2026-22741 低危 5.1.18.RELEASE 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

org.springframework:spring-context CVE-2025-22233 低危 5.1.18.RELEASE 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-46701 低危 9.0.38 9.0.105, 10.1.41, 11.0.7 tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-61795 低危 9.0.38 11.0.12, 10.1.47, 9.0.110 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43514 低危 9.0.38 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.3 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

ch.qos.logback:logback-core CVE-2026-9828 低危 1.2.3 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.38.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.38.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:36f807233ebf4041a908363a16d78a9ddef8f1e05861d579d697ec63f07a2cc1

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×