ghcr.io/fluent/fluent-operator/fluent-bit:5.0.6 linux/amd64

ghcr.io/fluent/fluent-operator/fluent-bit:5.0.6 - Trivy安全扫描结果 扫描时间: 2026-09-14 11:34
全部漏洞信息
低危漏洞:64 中危漏洞:69 高危漏洞:54 严重漏洞:0

系统OS: debian 13.5 扫描引擎: Trivy 扫描时间: 2026-09-14 11:34

ghcr.io/fluent/fluent-operator/fluent-bit:5.0.6 (debian 13.5) (debian)
低危漏洞:64 中危漏洞:64 高危漏洞:38 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcurl4t64 CVE-2026-12064 高危 8.14.1-2+deb13u3 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64 CVE-2026-5773 高危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl4t64 CVE-2026-6276 高危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl4t64 CVE-2026-8286 高危 8.14.1-2+deb13u3 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl4t64 CVE-2026-8458 高危 8.14.1-2+deb13u3 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libcurl4t64 CVE-2026-8927 高危 8.14.1-2+deb13u3 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libgssapi-krb5-2 CVE-2026-40355 高危 1.21.3-5 1.21.3-5+deb13u1 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libgssapi-krb5-2 CVE-2026-40356 高危 1.21.3-5 1.21.3-5+deb13u1 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libk5crypto3 CVE-2026-40355 高危 1.21.3-5 1.21.3-5+deb13u1 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libk5crypto3 CVE-2026-40356 高危 1.21.3-5 1.21.3-5+deb13u1 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5-3 CVE-2026-40355 高危 1.21.3-5 1.21.3-5+deb13u1 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5-3 CVE-2026-40356 高危 1.21.3-5 1.21.3-5+deb13u1 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5support0 CVE-2026-40355 高危 1.21.3-5 1.21.3-5+deb13u1 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5support0 CVE-2026-40356 高危 1.21.3-5 1.21.3-5+deb13u1 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libpq5 CVE-2026-14662 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14662

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14664 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14664

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14668 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14668

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14669 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14669

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14670 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14670

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14671 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14671

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14677 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14677

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14679 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14679

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14680 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14680

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-15741 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15741

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-15742 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15742

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-16239 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16239

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-18408 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18408

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-19385 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19385

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-6464 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6464

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:19 修改: 2026-08-29 23:17
libpq5 CVE-2026-6471 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6471

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:19 修改: 2026-08-29 23:17
libpq5 CVE-2026-6473 高危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6473

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-05-14 14:16 修改: 2026-08-25 13:19
libssh2-1t64 CVE-2026-55199 高危 1.11.1-1 1.11.1-1+deb13u1 libssh2: libssh2: Denial of Service via crafted SSH_MSG_EXT_INFO message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55199

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-17 20:17 修改: 2026-07-14 22:17
libssh2-1t64 CVE-2026-55200 高危 1.11.1-1 1.11.1-1+deb13u1 libssh2: libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55200

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-17 20:17 修改: 2026-07-14 22:17
libssh2-1t64 CVE-2026-58050 高危 1.11.1-1 1.11.1-1+deb13u2 libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58050

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-28 02:16 修改: 2026-06-30 20:27
libssh2-1t64 CVE-2026-7598 高危 1.11.1-1 1.11.1-1+deb13u1 libssh2: integer overflow via large username or password arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7598

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-05-01 22:16 修改: 2026-09-01 13:19
libssl3t64 CVE-2026-14456 高危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-45447 高危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-09-11 13:18
libsystemd0 CVE-2026-16742 高危 257.13-1~deb13u1 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libcurl4t64 CVE-2026-8932 中危 8.14.1-2+deb13u3 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
libcurl4t64 CVE-2026-9079 中危 8.14.1-2+deb13u3 libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl4t64 CVE-2026-9080 中危 8.14.1-2+deb13u3 libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl4t64 CVE-2026-9545 中危 8.14.1-2+deb13u3 libcurl: libcurl: Information disclosure via cached SSL session and early data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
libgcrypt20 CVE-2026-41989 中危 1.11.0-7 1.11.0-7+deb13u1 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18
libc6 CVE-2026-6238 中危 2.41-12+deb13u3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6 CVE-2026-6368 中危 2.41-12+deb13u3 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-6791 中危 2.41-12+deb13u3 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-77117 中危 2.41-12+deb13u3 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2026-80489 中危 2.41-12+deb13u3 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2026-89092 中危 2.41-12+deb13u3 glibc: glibc: nscd stack overflow leads to degraded DNS resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-89092

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-09-11 02:18 修改: 2026-09-11 18:17
libc6 CVE-2026-18374 中危 2.41-12+deb13u3 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-19499 中危 2.41-12+deb13u3 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
liblzma5 CVE-2026-34743 中危 5.8.1-1 5.8.1-1+deb13u1 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10
libnghttp2-14 CVE-2026-58055 中危 1.64.0-1.1+deb13u1 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
libp11-kit0 CVE-2026-13757 中危 0.25.5-3 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
libp11-kit0 CVE-2026-18938 中危 0.25.5-3 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
libc6 CVE-2026-19542 中危 2.41-12+deb13u3 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2026-5435 中危 2.41-12+deb13u3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6 CVE-2026-5450 中危 2.41-12+deb13u3 2.41-12+deb13u4 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6 CVE-2026-5928 中危 2.41-12+deb13u3 2.41-12+deb13u4 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libcurl4t64 CVE-2026-10536 中危 8.14.1-2+deb13u3 libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libcurl4t64 CVE-2026-11856 中危 8.14.1-2+deb13u3 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64 CVE-2026-13608 中危 8.14.1-2+deb13u3 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
libcurl4t64 CVE-2026-18924 中危 8.14.1-2+deb13u3 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl4t64 CVE-2026-1965 中危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libcurl4t64 CVE-2026-19931 中危 8.14.1-2+deb13u3 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl4t64 CVE-2026-3783 中危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl4t64 CVE-2026-3784 中危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl4t64 CVE-2026-3805 中危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl4t64 CVE-2026-4873 中危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
libcurl4t64 CVE-2026-5545 中危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl4t64 CVE-2026-6253 中危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl4t64 CVE-2026-6429 中危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libpq5 CVE-2026-14663 中危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14663

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14666 中危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14666

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14672 中危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: User existence oracle in SCRAM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14672

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14678 中危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14678

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-14681 中危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14681

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-18024 中危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18024

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-6470 中危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6470

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:19 修改: 2026-08-29 23:17
libcurl4t64 CVE-2026-7168 中危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libcurl4t64 CVE-2026-80229 中危 8.14.1-2+deb13u3 When performing transfers via libcurl\u2019s multi interface, pooled T ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:06
libcurl4t64 CVE-2026-80230 中危 8.14.1-2+deb13u3 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
libcurl4t64 CVE-2026-80255 中危 8.14.1-2+deb13u3 A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
libssh2-1t64 CVE-2025-15661 中危 1.11.1-1 1.11.1-1+deb13u1 libssh2: libssh2: Information disclosure and denial of service via crafted SFTP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15661

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-18 21:16 修改: 2026-07-14 23:17
libssh2-1t64 CVE-2026-58051 中危 1.11.1-1 1.11.1-1+deb13u2 libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58051

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:42
libssh2-1t64 CVE-2026-66032 中危 1.11.1-1 1.11.1-1+deb13u2 libssh2: libssh2: Arbitrary code execution via double-free in SFTP session

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66032

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-24 17:17 修改: 2026-08-07 01:07
libssh2-1t64 CVE-2026-66033 中危 1.11.1-1 1.11.1-1+deb13u2 libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66033

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44
libssh2-1t64 CVE-2026-66034 中危 1.11.1-1 1.11.1-1+deb13u2 libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66034

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44
libssh2-1t64 CVE-2026-66035 中危 1.11.1-1 1.11.1-1+deb13u2 libssh2: libssh2: Arbitrary code execution via heap buffer overflow during SSH negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66035

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:41
libcurl4t64 CVE-2026-82209 中危 8.14.1-2+deb13u3 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl4t64 CVE-2026-8924 中危 8.14.1-2+deb13u3 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
libssl3t64 CVE-2026-18798 中危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-34182 中危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-34183 中危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-42764 中危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-45445 中危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-63072 中危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3t64 CVE-2026-63076 中危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcurl4t64 CVE-2026-8926 中危 8.14.1-2+deb13u3 curl: curl: Information disclosure via incorrect .netrc password lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
libsystemd0 CVE-2026-15059 中危 257.13-1~deb13u1 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
zlib1g CVE-2026-27171 中危 1:1.3.dfsg+really1.3.1-1+b1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
zlib1g CVE-2026-85091 中危 1:1.3.dfsg+really1.3.1-1+b1 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
libgssapi-krb5-2 CVE-2018-5709 低危 1.21.3-5 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libgssapi-krb5-2 CVE-2024-26458 低危 1.21.3-5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libgssapi-krb5-2 CVE-2024-26461 低危 1.21.3-5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libgssapi-krb5-2 CVE-2026-11850 低危 1.21.3-5 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libc6 CVE-2019-1010025 低危 2.41-12+deb13u3 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6 CVE-2019-9192 低危 2.41-12+deb13u3 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
libk5crypto3 CVE-2018-5709 低危 1.21.3-5 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libk5crypto3 CVE-2024-26458 低危 1.21.3-5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3 CVE-2024-26461 低危 1.21.3-5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3 CVE-2026-11850 低危 1.21.3-5 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libc6 CVE-2010-4756 低危 2.41-12+deb13u3 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6 CVE-2018-20796 低危 2.41-12+deb13u3 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libkrb5-3 CVE-2018-5709 低危 1.21.3-5 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5-3 CVE-2024-26458 低危 1.21.3-5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5-3 CVE-2024-26461 低危 1.21.3-5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5-3 CVE-2026-11850 低危 1.21.3-5 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libpq5 CVE-2026-14673 低危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14673

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-16241 低危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL ECPG: Denial of Service via integer underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16241

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq5 CVE-2026-6469 低危 17.10-0+deb13u1 17.11-0+deb13u1 postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6469

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-08-13 13:19 修改: 2026-08-29 23:17
libcurl4t64 CVE-2025-10966 低危 8.14.1-2+deb13u3 curl: Curl missing SFTP host verification with wolfSSH backend

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29
libcurl4t64 CVE-2025-14017 低危 8.14.1-2+deb13u3 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libkrb5support0 CVE-2018-5709 低危 1.21.3-5 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5support0 CVE-2024-26458 低危 1.21.3-5 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0 CVE-2024-26461 低危 1.21.3-5 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0 CVE-2026-11850 低危 1.21.3-5 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libldap2 CVE-2015-3276 低危 2.6.10+dfsg-1 openldap: incorrect multi-keyword mode cipherstring parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2015-12-07 20:59 修改: 2026-05-06 22:30
libldap2 CVE-2017-14159 低危 2.6.10+dfsg-1 openldap: Privilege escalation via PID file manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2017-09-05 18:29 修改: 2026-06-17 01:05
libldap2 CVE-2017-17740 低危 2.6.10+dfsg-1 openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2017-12-18 06:29 修改: 2026-06-17 01:11
libldap2 CVE-2020-15719 低危 2.6.10+dfsg-1 openldap: Certificate validation incorrectly matches name against CN-ID

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2020-07-14 14:15 修改: 2026-06-17 02:57
libldap2 CVE-2026-22185 低危 2.6.10+dfsg-1 OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-01-07 21:16 修改: 2026-06-17 10:19
libcurl4t64 CVE-2025-14524 低危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcurl4t64 CVE-2025-14819 低危 8.14.1-2+deb13u3 8.14.1-2+deb13u4 curl: libcurl: Improper certificate validation due to cached TLS settings reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcurl4t64 CVE-2025-15079 低危 8.14.1-2+deb13u3 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl4t64 CVE-2025-15224 低危 8.14.1-2+deb13u3 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl4t64 CVE-2026-82208 低危 8.14.1-2+deb13u3 With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
libcurl4t64 CVE-2026-9547 低危 8.14.1-2+deb13u3 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libc6 CVE-2019-1010022 低危 2.41-12+deb13u3 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libgcrypt20 CVE-2018-6829 低危 1.11.0-7 libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2018-02-07 23:29 修改: 2026-06-17 02:02
libssl3t64 CVE-2026-14457 低危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
libssl3t64 CVE-2026-34180 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-34181 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-42766 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-42767 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-42768 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-42769 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-42770 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-45446 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-54874 低危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3t64 CVE-2026-63073 低危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3t64 CVE-2026-63074 低危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3t64 CVE-2026-63075 低危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libssl3t64 CVE-2026-7383 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64 CVE-2026-75803 低危 3.5.6-1~deb13u1 3.5.7-1~deb13u2 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libssl3t64 CVE-2026-9076 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libgcrypt20 CVE-2024-2236 低危 1.11.0-7 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
libgnutls30t64 CVE-2011-3389 低危 3.8.9-3+deb13u4 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2011-09-06 19:55 修改: 2026-04-29 01:13
libsystemd0 CVE-2013-4392 低危 257.13-1~deb13u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libsystemd0 CVE-2023-31437 低危 257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0 CVE-2023-31438 低危 257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0 CVE-2023-31439 低危 257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0 CVE-2026-40228 低危 257.13-1~deb13u1 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libtasn1-6 CVE-2025-13151 低危 4.20.0-2 4.20.0-2+deb13u1 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
libc6 CVE-2019-1010023 低危 2.41-12+deb13u3 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6 CVE-2019-1010024 低危 2.41-12+deb13u3 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
liblzma5 TEMP-1147318-639065 未知 5.8.1-1 [GHSA-5qpq-xqfv-j9pg: Invalid write if a decoder is reinitialized after allocation failure]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-1147318-639065

镜像层: sha256:2e951ee82e8a586e7373e61ab3c740f4b74cfa95bb2c7ecdb1ba7091836cbb56

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
fluent-bit/bin/fluent-bit-watcher (gobinary)
低危漏洞:0 中危漏洞:5 高危漏洞:16 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-27145 高危 v1.26.2 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-06-02 23:16 修改: 2026-09-11 13:17
stdlib CVE-2026-33811 高危 v1.26.2 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-07 20:16 修改: 2026-09-11 13:17
stdlib CVE-2026-33814 高危 v1.26.2 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-07 20:16 修改: 2026-09-10 13:18
stdlib CVE-2026-33818 高危 v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-39820 高危 v1.26.2 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-07 20:16 修改: 2026-09-11 13:17
stdlib CVE-2026-39821 高危 v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-22 16:16 修改: 2026-09-11 13:17
stdlib CVE-2026-39822 高危 v1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib CVE-2026-39836 高危 v1.26.2 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-42499 高危 v1.26.2 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-07 20:16 修改: 2026-09-11 13:17
stdlib CVE-2026-42504 高危 v1.26.2 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib CVE-2026-46600 高危 v1.26.2 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56858 高危 v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56859 高危 v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56860 高危 v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-56862 高危 v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib CVE-2026-39823 中危 v1.26.2 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-39825 中危 v1.26.2 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-39826 中危 v1.26.2 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-42505 中危 v1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib CVE-2026-42507 中危 v1.26.2 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/sys CVE-2026-39824 未知 v0.43.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:a86e5aa7d63b963e27c592b67e62e2efaf2f92303a70cc550949efbbc402eb8c

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×