| libc-bin |
CVE-2026-18374 |
中危 |
2.39-0ubuntu8.8 |
|
glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
|
| libc6 |
CVE-2026-18374 |
中危 |
2.39-0ubuntu8.8 |
|
glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
|
| libexpat1 |
CVE-2025-59375 |
中危 |
2.6.1-2ubuntu0.4 |
|
firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46
|
| libexpat1 |
CVE-2025-66382 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Denial of service via crafted file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
|
| libexpat1 |
CVE-2026-32776 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Denial of Service due to NULL pointer dereference
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
|
| libexpat1 |
CVE-2026-32777 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
|
| libexpat1 |
CVE-2026-32778 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
|
| libexpat1 |
CVE-2026-41080 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
|
| libexpat1 |
CVE-2026-45186 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: denial of service via crafted XML input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19
|
| libexpat1 |
CVE-2026-50219 |
中危 |
2.6.1-2ubuntu0.4 |
|
expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
|
| libexpat1 |
CVE-2026-56131 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
|
| libexpat1 |
CVE-2026-56132 |
中危 |
2.6.1-2ubuntu0.4 |
|
expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
|
| libexpat1 |
CVE-2026-56403 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
|
| libexpat1 |
CVE-2026-56404 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
|
| libexpat1 |
CVE-2026-56405 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
|
| libexpat1 |
CVE-2026-56406 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
|
| libexpat1 |
CVE-2026-56407 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Arbitrary code execution due to integer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
|
| libexpat1 |
CVE-2026-56408 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat before 2.8.2 has an integer overflow in copyString.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
|
| libexpat1 |
CVE-2026-56409 |
中危 |
2.6.1-2ubuntu0.4 |
|
xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
|
| libexpat1 |
CVE-2026-56410 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
|
| libexpat1 |
CVE-2026-56411 |
中危 |
2.6.1-2ubuntu0.4 |
|
expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
|
| libexpat1 |
CVE-2026-56412 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
|
| libexpat1 |
CVE-2026-66046 |
中危 |
2.6.1-2ubuntu0.4 |
|
Expat through 2.8.3 contains a denial of service vulnerability caused ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17
|
| libexpat1 |
CVE-2026-72522 |
中危 |
2.6.1-2ubuntu0.4 |
|
expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33
|
| libexpat1 |
CVE-2026-76641 |
中危 |
2.6.1-2ubuntu0.4 |
|
CVE-2026-76641 affecting package expat for versions less than 2.8.3-2
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17
|
| libexpat1 |
CVE-2026-76957 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56
|
| perl-base |
CVE-2026-15534 |
中危 |
5.38.2-3.2ubuntu0.4 |
|
perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
|
| perl-base |
CVE-2026-19487 |
中危 |
5.38.2-3.2ubuntu0.4 |
|
perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
|
| tar |
CVE-2026-18477 |
中危 |
1.35+dfsg-3ubuntu0.4 |
|
tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
|
| tar |
CVE-2026-18508 |
中危 |
1.35+dfsg-3ubuntu0.4 |
|
tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
|
| libudev1 |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| login |
CVE-2024-56433 |
低危 |
1:4.13+dfsg1-4ubuntu3.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| passwd |
CVE-2024-56433 |
低危 |
1:4.13+dfsg1-4ubuntu3.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| libelf1t64 |
CVE-2025-1352 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38
|
| libelf1t64 |
CVE-2025-1376 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
|
| libicu74 |
CVE-2025-5222 |
低危 |
74.2-1ubuntu3.1 |
|
icu: Stack buffer overflow in the SRBRoot::addTag function
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222
镜像层: sha256:4cf5bae07441906da966a835e50d7830ac1ee869932b059d5047cdb68f8990bc
发布日期: 2025-05-27 21:15 修改: 2026-09-03 15:17
|
| libsystemd0 |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|