ghcr.io/lukegus/termix:2.5.0 linux/amd64

ghcr.io/lukegus/termix:2.5.0 - Trivy安全扫描结果扫描时间: 2026-07-15 13:38

全部漏洞信息

低危漏洞:149

中危漏洞:145

高危漏洞:55

严重漏洞:5

系统OS: debian 12.14 扫描引擎: Trivy 扫描时间: 2026-07-15 13:38

ghcr.io/lukegus/termix:2.5.0 (debian 12.14) (debian)

低危漏洞:147

中危漏洞:143

高危漏洞:53

严重漏洞:5

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libsqlite3-0	CVE-2025-7458	严重	3.40.1-2+deb12u2		sqlite: SQLite integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7458 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-07-29 13:15 修改: 2026-06-17 10:04
perl-base	CVE-2026-42496	严重	5.36.0-7+deb12u3		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-26 02:16 修改: 2026-06-30 03:19
perl-base	CVE-2026-8376	严重	5.36.0-7+deb12u3		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-26 00:16 修改: 2026-06-17 11:03
python3-openssl	CVE-2026-27459	严重	23.0.0-1		pyOpenSSL: DTLS cookie callback buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27459 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-18 00:16 修改: 2026-07-01 13:16
zlib1g	CVE-2023-45853	严重	1:1.2.13.dfsg-1		zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-10-14 02:15 修改: 2026-06-17 06:29
libexpat1	CVE-2026-25210	高危	2.5.0-1+deb12u2		libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24
libexpat1	CVE-2026-45186	高危	2.5.0-1+deb12u2		libexpat: denial of service via crafted XML input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-10 07:16 修改: 2026-06-30 03:20
libexpat1	CVE-2026-56131	高危	2.5.0-1+deb12u2		libexpat before 2.8.2 lacks handler call depth tracking for calls to X ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56407	高危	2.5.0-1+deb12u2		libexpat before 2.8.2 has an integer overflow in doProlog that is rela ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1	CVE-2026-56408	高危	2.5.0-1+deb12u2		libexpat before 2.8.2 has an integer overflow in copyString. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libmount1	CVE-2026-53615	高危	2.38.1-5+deb12u3		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libncursesw6	CVE-2025-69720	高危	6.4-4		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libpython3.11-minimal	CVE-2025-69534	高危	3.11.2-6+deb12u7		python-markdown: denial of service via malformed HTML-like sequences 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-05 15:16 修改: 2026-06-30 03:16
libpython3.11-minimal	CVE-2026-11940	高危	3.11.2-6+deb12u7		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 17:16 修改: 2026-06-30 16:16
libpython3.11-minimal	CVE-2026-3644	高危	3.11.2-6+deb12u7		cpython: Incomplete control character validation in http.cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16
libpython3.11-minimal	CVE-2026-4224	高危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: Stack overflow parsing XML with deeply nested DTD content models 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56
libpython3.11-minimal	CVE-2026-6100	高危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-13 18:16 修改: 2026-06-30 03:21
libpython3.11-minimal	CVE-2026-7210	高危	3.11.2-6+deb12u7		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02
libpython3.11-stdlib	CVE-2025-69534	高危	3.11.2-6+deb12u7		python-markdown: denial of service via malformed HTML-like sequences 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-05 15:16 修改: 2026-06-30 03:16
libpython3.11-stdlib	CVE-2026-11940	高危	3.11.2-6+deb12u7		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 17:16 修改: 2026-06-30 16:16
libpython3.11-stdlib	CVE-2026-3644	高危	3.11.2-6+deb12u7		cpython: Incomplete control character validation in http.cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16
libpython3.11-stdlib	CVE-2026-4224	高危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: Stack overflow parsing XML with deeply nested DTD content models 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56
libpython3.11-stdlib	CVE-2026-6100	高危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-13 18:16 修改: 2026-06-30 03:21
libpython3.11-stdlib	CVE-2026-7210	高危	3.11.2-6+deb12u7		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02
libsmartcols1	CVE-2026-53615	高危	2.38.1-5+deb12u3		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils	CVE-2026-53615	高危	1:2.38.1-5+deb12u3		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libtinfo6	CVE-2025-69720	高危	6.4-4		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libuuid1	CVE-2026-53615	高危	2.38.1-5+deb12u3		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount	CVE-2026-53615	高危	2.38.1-5+deb12u3		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
ncurses-base	CVE-2025-69720	高危	6.4-4		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
ncurses-bin	CVE-2025-69720	高危	6.4-4		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
nginx	CVE-2026-42055	高危	1.22.1-9+deb12u8	1.22.1-9+deb12u9	nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42055 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-17 15:16 修改: 2026-07-13 13:16
nginx-common	CVE-2026-42055	高危	1.22.1-9+deb12u8	1.22.1-9+deb12u9	nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42055 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-17 15:16 修改: 2026-07-13 13:16
gzip	CVE-2026-41992	高危	1.12-1		GNU gzip contains a global buffer overflow vulnerability in the LZH de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
libacl1	CVE-2026-54369	高危	2.3.1-3		acl: Symlink traversal privilege escalation via libacl functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 14:16 修改: 2026-07-02 12:17
perl-base	CVE-2026-42497	高危	5.36.0-7+deb12u3		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-26 02:16 修改: 2026-06-17 10:47
perl-base	CVE-2026-48962	高危	5.36.0-7+deb12u3		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-27 04:16 修改: 2026-06-30 03:20
perl-base	CVE-2026-9538	高危	5.36.0-7+deb12u3		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-26 02:16 修改: 2026-06-17 11:05
python3-cryptography	CVE-2023-50782	高危	38.0.4-3+deb12u1		python-cryptography: Bleichenbacher timing oracle attack against RSA decryption - incomplete fix for CVE-2020-25659 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50782 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-05 21:15 修改: 2026-06-17 06:39
libblkid1	CVE-2026-53615	高危	2.38.1-5+deb12u3		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
python3-urllib3	CVE-2025-66471	高危	1.26.12-1+deb12u3		urllib3: urllib3 Streaming API improperly handles highly compressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
python3.11	CVE-2025-69534	高危	3.11.2-6+deb12u7		python-markdown: denial of service via malformed HTML-like sequences 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-05 15:16 修改: 2026-06-30 03:16
python3.11	CVE-2026-11940	高危	3.11.2-6+deb12u7		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 17:16 修改: 2026-06-30 16:16
python3.11	CVE-2026-3644	高危	3.11.2-6+deb12u7		cpython: Incomplete control character validation in http.cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16
python3.11	CVE-2026-4224	高危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: Stack overflow parsing XML with deeply nested DTD content models 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56
python3.11	CVE-2026-6100	高危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-13 18:16 修改: 2026-06-30 03:21
python3.11	CVE-2026-7210	高危	3.11.2-6+deb12u7		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02
python3.11-minimal	CVE-2025-69534	高危	3.11.2-6+deb12u7		python-markdown: denial of service via malformed HTML-like sequences 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-05 15:16 修改: 2026-06-30 03:16
python3.11-minimal	CVE-2026-11940	高危	3.11.2-6+deb12u7		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 17:16 修改: 2026-06-30 16:16
python3.11-minimal	CVE-2026-3644	高危	3.11.2-6+deb12u7		cpython: Incomplete control character validation in http.cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16
python3.11-minimal	CVE-2026-4224	高危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: Stack overflow parsing XML with deeply nested DTD content models 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56
python3.11-minimal	CVE-2026-6100	高危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-13 18:16 修改: 2026-06-30 03:21
python3.11-minimal	CVE-2026-7210	高危	3.11.2-6+deb12u7		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02
util-linux	CVE-2026-53615	高危	2.38.1-5+deb12u3		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux-extra	CVE-2026-53615	高危	2.38.1-5+deb12u3		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
wget	CVE-2026-58471	高危	1.21.3-1+deb12u1		wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58471 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:02
wget	CVE-2026-58472	高危	1.21.3-1+deb12u1		GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buff ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58472 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:58
libexpat1	CVE-2025-59375	高危	2.5.0-1+deb12u2		firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46
libpam0g	CVE-2024-10041	中危	1.5.2-6+deb12u2		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
libpam0g	CVE-2026-54411	中危	1.5.2-6+deb12u2		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-14 18:17 修改: 2026-06-17 10:58
libblkid1	CVE-2026-13595	中危	2.38.1-5+deb12u3		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libblkid1	CVE-2026-27456	中危	2.38.1-5+deb12u3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libblkid1	CVE-2026-3184	中危	2.38.1-5+deb12u3		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libbz2-1.0	CVE-2026-42250	中危	1.0.8-5+b1		bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
libc-bin	CVE-2026-5435	中危	2.36-9+deb12u14		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59
libc-bin	CVE-2026-5450	中危	2.36-9+deb12u14		glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
libpython3.11-minimal	CVE-2025-12781	中危	3.11.2-6+deb12u7		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
libpython3.11-minimal	CVE-2025-15366	中危	3.11.2-6+deb12u7		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
libpython3.11-minimal	CVE-2025-15367	中危	3.11.2-6+deb12u7		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
libpython3.11-minimal	CVE-2026-0864	中危	3.11.2-6+deb12u7		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 18:17 修改: 2026-06-25 19:51
libpython3.11-minimal	CVE-2026-11972	中危	3.11.2-6+deb12u7		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16
libpython3.11-minimal	CVE-2026-1502	中危	3.11.2-6+deb12u7		python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
libpython3.11-minimal	CVE-2026-3276	中危	3.11.2-6+deb12u7		python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43
libpython3.11-minimal	CVE-2026-3446	中危	3.11.2-6+deb12u7		python: Python base64: Incomplete data decoding due to premature stop at padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
libpython3.11-minimal	CVE-2026-6019	中危	3.11.2-6+deb12u7		python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00
libpython3.11-minimal	CVE-2026-8328	中危	3.11.2-6+deb12u7		The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
libpython3.11-minimal	CVE-2026-9669	中危	3.11.2-6+deb12u7		python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-08 23:17 修改: 2026-07-07 18:16
libc-bin	CVE-2026-5928	中危	2.36-9+deb12u14		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
libc-bin	CVE-2026-6238	中危	2.36-9+deb12u14		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17
libc6	CVE-2026-5435	中危	2.36-9+deb12u14		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59
libc6	CVE-2026-5450	中危	2.36-9+deb12u14		glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
libc6	CVE-2026-5928	中危	2.36-9+deb12u14		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
libc6	CVE-2026-6238	中危	2.36-9+deb12u14		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17
libpython3.11-stdlib	CVE-2025-12781	中危	3.11.2-6+deb12u7		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
libpython3.11-stdlib	CVE-2025-15366	中危	3.11.2-6+deb12u7		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
libpython3.11-stdlib	CVE-2025-15367	中危	3.11.2-6+deb12u7		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
libpython3.11-stdlib	CVE-2026-0864	中危	3.11.2-6+deb12u7		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 18:17 修改: 2026-06-25 19:51
libpython3.11-stdlib	CVE-2026-11972	中危	3.11.2-6+deb12u7		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16
libpython3.11-stdlib	CVE-2026-1502	中危	3.11.2-6+deb12u7		python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
libpython3.11-stdlib	CVE-2026-3276	中危	3.11.2-6+deb12u7		python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43
libpython3.11-stdlib	CVE-2026-3446	中危	3.11.2-6+deb12u7		python: Python base64: Incomplete data decoding due to premature stop at padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
libpython3.11-stdlib	CVE-2026-6019	中危	3.11.2-6+deb12u7		python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00
libpython3.11-stdlib	CVE-2026-8328	中危	3.11.2-6+deb12u7		The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
libpython3.11-stdlib	CVE-2026-9669	中危	3.11.2-6+deb12u7		python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-08 23:17 修改: 2026-07-07 18:16
gpgv	CVE-2025-30258	中危	2.2.40-1.1+deb12u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
libsmartcols1	CVE-2026-13595	中危	2.38.1-5+deb12u3		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libsmartcols1	CVE-2026-27456	中危	2.38.1-5+deb12u3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libsmartcols1	CVE-2026-3184	中危	2.38.1-5+deb12u3		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
gpgv	CVE-2025-68972	中危	2.2.40-1.1+deb12u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
libsqlite3-0	CVE-2025-7709	中危	3.40.1-2+deb12u2		An integer overflow exists in the FTS5 https://sqlite.org/fts5.html e ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7709 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-09-08 15:15 修改: 2026-06-17 10:05
libsqlite3-0	CVE-2026-11822	中危	3.40.1-2+deb12u2		SQLite before 3.53.2 contains memory corruption vulnerabilities in the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-09 20:16 修改: 2026-06-17 10:14
libsqlite3-0	CVE-2026-11824	中危	3.40.1-2+deb12u2		SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-09 20:16 修改: 2026-06-17 10:14
bsdutils	CVE-2026-13595	中危	1:2.38.1-5+deb12u3		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libtinfo6	CVE-2023-50495	中危	6.4-4		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
gzip	CVE-2026-41991	中危	1.12-1		gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
libuuid1	CVE-2026-13595	中危	2.38.1-5+deb12u3		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libuuid1	CVE-2026-27456	中危	2.38.1-5+deb12u3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libuuid1	CVE-2026-3184	中危	2.38.1-5+deb12u3		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libxml2	CVE-2026-0990	中危	2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0990 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-15 15:15 修改: 2026-06-30 20:18
libxml2	CVE-2026-6653	中危	2.9.14+dfsg-1.3~deb12u5		libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6653 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-22 14:17 修改: 2026-06-22 18:16
libxslt1.1	CVE-2025-10911	中危	1.1.35-1+deb12u4		libxslt: use-after-free with key data stored cross-RVT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10911 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-09-25 16:15 修改: 2026-06-30 00:16
bsdutils	CVE-2026-27456	中危	1:2.38.1-5+deb12u3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
mount	CVE-2026-13595	中危	2.38.1-5+deb12u3		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
mount	CVE-2026-27456	中危	2.38.1-5+deb12u3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
mount	CVE-2026-3184	中危	2.38.1-5+deb12u3		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libacl1	CVE-2026-54370	中危	2.3.1-3		acl: TOCTOU Symlink Traversal via getfacl/setfacl 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
ncurses-base	CVE-2023-50495	中危	6.4-4		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libexpat1	CVE-2025-66382	中危	2.5.0-1+deb12u2		libexpat: libexpat: Denial of service via crafted file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
ncurses-bin	CVE-2023-50495	中危	6.4-4		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libexpat1	CVE-2026-32776	中危	2.5.0-1+deb12u2		libexpat: libexpat: Denial of Service due to NULL pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 14:19 修改: 2026-06-17 10:36
nginx	CVE-2026-48142	中危	1.22.1-9+deb12u8	1.22.1-9+deb12u9	nginx: NGINX: Memory disclosure or denial of service via ngx_http_charset_module heap buffer over-read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48142 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-17 15:16 修改: 2026-06-22 16:50
libexpat1	CVE-2026-32777	中危	2.5.0-1+deb12u2		libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 14:19 修改: 2026-06-17 10:36
nginx-common	CVE-2026-48142	中危	1.22.1-9+deb12u8	1.22.1-9+deb12u9	nginx: NGINX: Memory disclosure or denial of service via ngx_http_charset_module heap buffer over-read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48142 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-17 15:16 修改: 2026-06-22 16:50
libexpat1	CVE-2026-32778	中危	2.5.0-1+deb12u2		libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-16 14:19 修改: 2026-06-17 10:36
libexpat1	CVE-2026-50219	中危	2.5.0-1+deb12u2		expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-04 06:16 修改: 2026-06-17 10:57
libexpat1	CVE-2026-56132	中危	2.5.0-1+deb12u2		expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56403	中危	2.5.0-1+deb12u2		libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56404	中危	2.5.0-1+deb12u2		libexpat before 2.8.2 has an integer overflow in addBinding. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
perl-base	CVE-2025-15649	中危	5.36.0-7+deb12u3		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-27 04:16 修改: 2026-06-17 08:38
perl-base	CVE-2026-12087	中危	5.36.0-7+deb12u3		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base	CVE-2026-48959	中危	5.36.0-7+deb12u3		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
perl-base	CVE-2026-48961	中危	5.36.0-7+deb12u3		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
perl-base	CVE-2026-7010	中危	5.36.0-7+deb12u3		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
libexpat1	CVE-2026-56405	中危	2.5.0-1+deb12u2		libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
python3-cryptography	CVE-2026-26007	中危	38.0.4-3+deb12u1		cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26007 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-02-10 22:17 修改: 2026-07-01 13:16
python3-cryptography	CVE-2026-34073	中危	38.0.4-3+deb12u1		python-cryptography: Cryptography: Security bypass due to improper DNS name constraint validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34073 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
python3-idna	CVE-2026-45409	中危	3.3-1+deb12u1		python-idna: idna: Denial of Service via specially crafted long inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-05 23:16 修改: 2026-06-17 10:52
python3-lxml	CVE-2026-28348	中危	4.9.2-1+b1		lxml_html_clean is a project for HTML cleaning functionalities copied ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28348 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-05 20:16 修改: 2026-06-17 10:28
python3-lxml	CVE-2026-28350	中危	4.9.2-1+b1		lxml_html_clean is a project for HTML cleaning functionalities copied ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28350 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-05 20:16 修改: 2026-06-17 10:28
python3-lxml	CVE-2026-41066	中危	4.9.2-1+b1		lxml: python: lxml: Information disclosure via untrusted XML input leading to local file read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41066 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46
libexpat1	CVE-2026-56406	中危	2.5.0-1+deb12u2		libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
python3-openssl	CVE-2026-27448	中危	23.0.0-1		pyOpenSSL: TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27448 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-18 00:16 修改: 2026-06-17 10:27
python3-requests	CVE-2023-32681	中危	2.28.1+dfsg-1		python-requests: Unintended leak of Proxy-Authorization header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32681 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2023-05-26 18:15 修改: 2026-06-17 05:59
python3-requests	CVE-2024-35195	中危	2.28.1+dfsg-1		requests: subsequent requests to the same host ignore cert verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35195 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-05-20 21:15 修改: 2026-06-17 07:34
python3-requests	CVE-2024-47081	中危	2.28.1+dfsg-1		requests: Requests vulnerable to .netrc credentials leak via malicious URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47081 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-06-09 18:15 修改: 2026-06-17 07:56
python3-requests	CVE-2026-25645	中危	2.28.1+dfsg-1		requests: Requests: Security bypass due to predictable temporary file creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25
libexpat1	CVE-2026-56409	中危	2.5.0-1+deb12u2		xmlwf in libexpat before 2.8.2 has an integer overflow for the output ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
python3-urllib3	CVE-2026-44431	中危	1.26.12-1+deb12u3	1.26.12-1+deb12u4	urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
python3-urllib3	CVE-2026-9375	中危	1.26.12-1+deb12u3		urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9375 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-19 19:16 修改: 2026-06-22 19:49
libexpat1	CVE-2026-56410	中危	2.5.0-1+deb12u2		libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1	CVE-2026-56411	中危	2.5.0-1+deb12u2		expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1	CVE-2026-56412	中危	2.5.0-1+deb12u2		libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
liblzma5	CVE-2026-34743	中危	5.4.1-1	5.4.1-1+deb12u1	xz: XZ Utils: Denial of Service via buffer overflow in index decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-02 19:21 修改: 2026-06-17 10:39
libattr1	CVE-2026-54371	中危	1:2.5.1-4		attr: Symlink Traversal Privilege Escalation via getfattr and setfattr 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 14:16 修改: 2026-07-03 13:17
libmount1	CVE-2026-13595	中危	2.38.1-5+deb12u3		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
python3.11	CVE-2025-12781	中危	3.11.2-6+deb12u7		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
python3.11	CVE-2025-15366	中危	3.11.2-6+deb12u7		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
python3.11	CVE-2025-15367	中危	3.11.2-6+deb12u7		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
python3.11	CVE-2026-0864	中危	3.11.2-6+deb12u7		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 18:17 修改: 2026-06-25 19:51
python3.11	CVE-2026-11972	中危	3.11.2-6+deb12u7		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16
python3.11	CVE-2026-1502	中危	3.11.2-6+deb12u7		python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
python3.11	CVE-2026-3276	中危	3.11.2-6+deb12u7		python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43
python3.11	CVE-2026-3446	中危	3.11.2-6+deb12u7		python: Python base64: Incomplete data decoding due to premature stop at padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
python3.11	CVE-2026-6019	中危	3.11.2-6+deb12u7		python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00
python3.11	CVE-2026-8328	中危	3.11.2-6+deb12u7		The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
python3.11	CVE-2026-9669	中危	3.11.2-6+deb12u7		python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-08 23:17 修改: 2026-07-07 18:16
libmount1	CVE-2026-27456	中危	2.38.1-5+deb12u3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libmount1	CVE-2026-3184	中危	2.38.1-5+deb12u3		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
bsdutils	CVE-2026-3184	中危	1:2.38.1-5+deb12u3		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libncursesw6	CVE-2023-50495	中危	6.4-4		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libp11-kit0	CVE-2026-13757	中危	0.24.1-2		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
libpam-modules	CVE-2024-10041	中危	1.5.2-6+deb12u2		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
python3.11-minimal	CVE-2025-12781	中危	3.11.2-6+deb12u7		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
python3.11-minimal	CVE-2025-15366	中危	3.11.2-6+deb12u7		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
python3.11-minimal	CVE-2025-15367	中危	3.11.2-6+deb12u7		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
python3.11-minimal	CVE-2026-0864	中危	3.11.2-6+deb12u7		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 18:17 修改: 2026-06-25 19:51
python3.11-minimal	CVE-2026-11972	中危	3.11.2-6+deb12u7		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16
python3.11-minimal	CVE-2026-1502	中危	3.11.2-6+deb12u7		python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
python3.11-minimal	CVE-2026-3276	中危	3.11.2-6+deb12u7		python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43
python3.11-minimal	CVE-2026-3446	中危	3.11.2-6+deb12u7		python: Python base64: Incomplete data decoding due to premature stop at padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
python3.11-minimal	CVE-2026-6019	中危	3.11.2-6+deb12u7		python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00
python3.11-minimal	CVE-2026-8328	中危	3.11.2-6+deb12u7		The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
python3.11-minimal	CVE-2026-9669	中危	3.11.2-6+deb12u7		python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-08 23:17 修改: 2026-07-07 18:16
tar	CVE-2026-5704	中危	1.34+dfsg-1.2+deb12u1		tar: tar: Hidden file injection via crafted archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
libpam-modules	CVE-2026-54411	中危	1.5.2-6+deb12u2		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-14 18:17 修改: 2026-06-17 10:58
util-linux	CVE-2026-13595	中危	2.38.1-5+deb12u3		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
util-linux	CVE-2026-27456	中危	2.38.1-5+deb12u3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
util-linux	CVE-2026-3184	中危	2.38.1-5+deb12u3		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libpam-modules-bin	CVE-2024-10041	中危	1.5.2-6+deb12u2		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
util-linux-extra	CVE-2026-13595	中危	2.38.1-5+deb12u3		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
util-linux-extra	CVE-2026-27456	中危	2.38.1-5+deb12u3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
util-linux-extra	CVE-2026-3184	中危	2.38.1-5+deb12u3		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libpam-modules-bin	CVE-2026-54411	中危	1.5.2-6+deb12u2		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-14 18:17 修改: 2026-06-17 10:58
libpam-runtime	CVE-2024-10041	中危	1.5.2-6+deb12u2		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
wget	CVE-2021-31879	中危	1.21.3-1+deb12u1		wget: authorization header disclosure on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
wget	CVE-2024-10524	中危	1.21.3-1+deb12u1		wget: GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10524 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-11-19 15:15 修改: 2026-06-17 06:55
wget	CVE-2026-15146	中危	1.21.3-1+deb12u1		wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15146 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-07-10 19:17 修改: 2026-07-10 20:16
wget	CVE-2026-58469	中危	1.21.3-1+deb12u1		GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buff ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58469 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:59
wget	CVE-2026-58470	中危	1.21.3-1+deb12u1		GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58470 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:01
libpam-runtime	CVE-2026-54411	中危	1.5.2-6+deb12u2		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-14 18:17 修改: 2026-06-17 10:58
zlib1g	CVE-2026-27171	中危	1:1.2.13.dfsg-1		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libkrb5support0	CVE-2024-26461	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0	CVE-2026-11850	低危	1.20.1-2+deb12u5		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libc-bin	CVE-2019-9192	低危	2.36-9+deb12u14		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
libuuid1	CVE-2022-0563	低危	2.38.1-5+deb12u3		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libuuid1	CVE-2025-14104	低危	2.38.1-5+deb12u3		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
krb5-locales	CVE-2024-26461	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
krb5-locales	CVE-2026-11850	低危	1.20.1-2+deb12u5		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libxml2	CVE-2025-8732	低危	2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	libxml2: libxml2: Uncontrolled Recursion Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8732 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-08-08 17:15 修改: 2026-07-01 15:25
libxml2	CVE-2026-0989	低危	2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0989 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-15 15:15 修改: 2026-06-30 20:20
libxml2	CVE-2026-0992	低危	2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	libxml2: libxml2: Denial of Service via crafted XML catalogs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0992 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-15 15:15 修改: 2026-06-30 20:17
libxml2	CVE-2026-11979	低危	2.9.14+dfsg-1.3~deb12u5		libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11979 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-29 14:16 修改: 2026-06-30 20:22
libxml2	CVE-2026-1757	低危	2.9.14+dfsg-1.3~deb12u5	2.9.14+dfsg-1.3~deb12u6	libxml2: Memory Leak Leading to Local Denial of Service in xmllint Interactive Shell 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1757 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-02-02 13:15 修改: 2026-06-17 10:16
coreutils	CVE-2016-2781	低危	9.1-1		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
libxslt1.1	CVE-2015-9019	低危	1.1.35-1+deb12u4		libxslt: math.random() in xslt uses unseeded randomness 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9019 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2017-04-05 21:59 修改: 2026-05-13 00:24
libxslt1.1	CVE-2025-11731	低危	1.1.35-1+deb12u4		libxslt: Type Confusion in exsltFuncResultCompfunction of libxslt 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11731 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-10-14 06:15 修改: 2026-06-30 07:16
libxtables12	CVE-2012-2663	低危	1.8.9-2		iptables: --syn flag bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2014-02-15 14:57 修改: 2026-04-29 01:13
login	CVE-2007-5686	低危	1:4.13+dfsg1-1+deb12u2		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
login	CVE-2024-56433	低危	1:4.13+dfsg1-1+deb12u2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
login	TEMP-0628843-DBAD28	低危	1:4.13+dfsg1-1+deb12u2		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
coreutils	CVE-2017-18018	低危	9.1-1		coreutils: race condition vulnerability in chown and chgrp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2018-01-04 04:29 修改: 2026-06-17 01:12
libmount1	CVE-2022-0563	低危	2.38.1-5+deb12u3		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libmount1	CVE-2025-14104	低危	2.38.1-5+deb12u3		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libc6	CVE-2010-4756	低危	2.36-9+deb12u14		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
mount	CVE-2022-0563	低危	2.38.1-5+deb12u3		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
mount	CVE-2025-14104	低危	2.38.1-5+deb12u3		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libc6	CVE-2018-20796	低危	2.36-9+deb12u14		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libncursesw6	CVE-2025-6141	低危	6.4-4		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
ncurses-base	CVE-2025-6141	低危	6.4-4		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libc6	CVE-2019-1010022	低危	2.36-9+deb12u14		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010023	低危	2.36-9+deb12u14		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
ncurses-bin	CVE-2025-6141	低危	6.4-4		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libc6	CVE-2019-1010024	低危	2.36-9+deb12u14		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010025	低危	2.36-9+deb12u14		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
nginx	CVE-2009-4487	低危	1.22.1-9+deb12u8		nginx: Absent sanitation of escape sequences in web server log 漏洞详情: https://avd.aquasec.com/nvd/cve-2009-4487 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2010-01-13 20:30 修改: 2026-04-23 00:35
nginx	CVE-2013-0337	低危	1.22.1-9+deb12u8		The default configuration of nginx, possibly 1.3.13 and earlier, uses ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
nginx	CVE-2023-44487	低危	1.22.1-9+deb12u8		HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27
libc6	CVE-2019-9192	低危	2.36-9+deb12u14		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
libelf1	CVE-2024-25260	低危	0.188-2.1		elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-20 18:15 修改: 2026-06-17 07:15
nginx-common	CVE-2009-4487	低危	1.22.1-9+deb12u8		nginx: Absent sanitation of escape sequences in web server log 漏洞详情: https://avd.aquasec.com/nvd/cve-2009-4487 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2010-01-13 20:30 修改: 2026-04-23 00:35
nginx-common	CVE-2013-0337	低危	1.22.1-9+deb12u8		The default configuration of nginx, possibly 1.3.13 and earlier, uses ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0337 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2013-10-27 00:55 修改: 2026-04-29 01:13
nginx-common	CVE-2023-44487	低危	1.22.1-9+deb12u8		HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27
openssl	CVE-2025-27587	低危	3.0.20-1~deb12u2		OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27587 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-06-16 22:15 修改: 2026-06-17 09:03
openssl	CVE-2026-42767	低危	3.0.20-1~deb12u2		openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
passwd	CVE-2007-5686	低危	1:4.13+dfsg1-1+deb12u2		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
passwd	CVE-2024-56433	低危	1:4.13+dfsg1-1+deb12u2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd	TEMP-0628843-DBAD28	低危	1:4.13+dfsg1-1+deb12u2		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libelf1	CVE-2025-1352	低危	0.188-2.1		elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38
libelf1	CVE-2025-1365	低危	0.188-2.1		elfutils: GNU elfutils eu-readelf readelf.c process_symtab buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1365 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-02-17 00:15 修改: 2026-06-17 08:38
libelf1	CVE-2025-1371	低危	0.188-2.1		elfutils: GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1371 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-02-17 03:15 修改: 2026-06-17 08:39
libelf1	CVE-2025-1372	低危	0.188-2.1		elfutils: GNU elfutils eu-readelf readelf.c print_string_section buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1372 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-02-17 03:15 修改: 2026-06-17 08:39
libelf1	CVE-2025-1376	低危	0.188-2.1		elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
libelf1	CVE-2025-1377	低危	0.188-2.1		elfutils: GNU elfutils eu-strip strip.c gelf_getsymshndx denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1377 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
libapt-pkg6.0	CVE-2011-3374	低危	2.6.1		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
coreutils	CVE-2025-5278	低危	9.1-1		coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-05-27 21:15 修改: 2026-07-01 11:16
gcc-12-base	CVE-2022-27943	低危	12.2.0-14+deb12u1		binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
apt	CVE-2011-3374	低危	2.6.1		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
perl-base	CVE-2011-4116	低危	5.36.0-7+deb12u3		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
perl-base	CVE-2023-31486	低危	5.36.0-7+deb12u3		http-tiny: perl: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
python3-certifi	CVE-2022-23491	低危	2022.9.24-1		python-certifi: untrusted root certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23491 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2022-12-07 22:15 修改: 2026-06-17 04:30
python3-certifi	CVE-2023-37920	低危	2022.9.24-1		python-certifi: Removal of e-Tugra root certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37920 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2023-07-25 21:15 修改: 2026-06-17 06:08
python3-certifi	CVE-2024-39689	低危	2022.9.24-1		python-certifi: Remove root certificates from `GLOBALTRUST` from the root store 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-39689 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-07-05 19:15 修改: 2026-06-17 07:42
python3-configobj	CVE-2023-26112	低危	5.0.8-1		python-configobj: Regular expression denial of service exists in ./src/configobj/validate.py 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26112 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2023-04-03 05:15 修改: 2026-06-17 05:42
bash	TEMP-0841856-B18BAF	低危	5.2.15-2+b13		[Privilege escalation possible to other user than root] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gpgv	CVE-2022-3219	低危	2.2.40-1.1+deb12u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
libblkid1	CVE-2022-0563	低危	2.38.1-5+deb12u3		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libblkid1	CVE-2025-14104	低危	2.38.1-5+deb12u3		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libbpf1	CVE-2025-29481	低危	1:1.1.2-0+deb12u1		libbpf: Heap Buffer Overflow in libbpf 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29481 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-04-07 20:15 修改: 2026-06-17 09:05
gpgv	CVE-2026-57062	低危	2.2.40-1.1+deb12u2		GnuPG: Incorrect cryptographic message parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16
bsdutils	CVE-2022-0563	低危	1:2.38.1-5+deb12u3		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
bsdutils	CVE-2025-14104	低危	1:2.38.1-5+deb12u3		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
krb5-locales	CVE-2018-5709	低危	1.20.1-2+deb12u5		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
krb5-locales	CVE-2024-26458	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libpython3.11-minimal	CVE-2025-13462	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
libpython3.11-minimal	CVE-2026-12003	低危	3.11.2-6+deb12u7		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-16 17:16 修改: 2026-06-23 18:17
libpython3.11-minimal	CVE-2026-2297	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: CPython: Logging Bypass in Legacy .pyc File Handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
libpython3.11-minimal	CVE-2026-3479	低危	3.11.2-6+deb12u7		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
libpython3.11-minimal	CVE-2026-4519	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	python: Python: Command-line option injection in webbrowser.open() via crafted URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-20 15:16 修改: 2026-06-30 03:20
libc-bin	CVE-2010-4756	低危	2.36-9+deb12u14		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc-bin	CVE-2018-20796	低危	2.36-9+deb12u14		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc-bin	CVE-2019-1010022	低危	2.36-9+deb12u14		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc-bin	CVE-2019-1010023	低危	2.36-9+deb12u14		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc-bin	CVE-2019-1010024	低危	2.36-9+deb12u14		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc-bin	CVE-2019-1010025	低危	2.36-9+deb12u14		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libexpat1	CVE-2023-52426	低危	2.5.0-1+deb12u2		expat: recursive XML entity expansion vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42
libexpat1	CVE-2024-28757	低危	2.5.0-1+deb12u2		expat: XML Entity Expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-03-10 05:15 修改: 2026-06-17 07:21
libexpat1	CVE-2026-24515	低危	2.5.0-1+deb12u2		libexpat: libexpat null pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23
libexpat1	CVE-2026-41080	低危	2.5.0-1+deb12u2		libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-04-16 17:16 修改: 2026-06-17 10:46
libgcc-s1	CVE-2022-27943	低危	12.2.0-14+deb12u1		binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libgcrypt20	CVE-2018-6829	低危	1.10.1-3+deb12u1		libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2018-02-07 23:29 修改: 2026-06-17 02:02
libgcrypt20	CVE-2024-2236	低危	1.10.1-3+deb12u1		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
libgnutls30	CVE-2011-3389	低危	3.7.9-2+deb12u7		HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2011-09-06 19:55 修改: 2026-04-29 01:13
libgssapi-krb5-2	CVE-2018-5709	低危	1.20.1-2+deb12u5		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libgssapi-krb5-2	CVE-2024-26458	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libgssapi-krb5-2	CVE-2024-26461	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libpython3.11-stdlib	CVE-2025-13462	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
python3.11	CVE-2025-13462	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
python3.11	CVE-2026-12003	低危	3.11.2-6+deb12u7		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-16 17:16 修改: 2026-06-23 18:17
python3.11	CVE-2026-2297	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: CPython: Logging Bypass in Legacy .pyc File Handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
python3.11	CVE-2026-3479	低危	3.11.2-6+deb12u7		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
python3.11	CVE-2026-4519	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	python: Python: Command-line option injection in webbrowser.open() via crafted URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-20 15:16 修改: 2026-06-30 03:20
libpython3.11-stdlib	CVE-2026-12003	低危	3.11.2-6+deb12u7		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-16 17:16 修改: 2026-06-23 18:17
libpython3.11-stdlib	CVE-2026-2297	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: CPython: Logging Bypass in Legacy .pyc File Handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
libpython3.11-stdlib	CVE-2026-3479	低危	3.11.2-6+deb12u7		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
libpython3.11-stdlib	CVE-2026-4519	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	python: Python: Command-line option injection in webbrowser.open() via crafted URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-20 15:16 修改: 2026-06-30 03:20
libgssapi-krb5-2	CVE-2026-11850	低危	1.20.1-2+deb12u5		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libk5crypto3	CVE-2018-5709	低危	1.20.1-2+deb12u5		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libk5crypto3	CVE-2024-26458	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3	CVE-2024-26461	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libsmartcols1	CVE-2022-0563	低危	2.38.1-5+deb12u3		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libsmartcols1	CVE-2025-14104	低危	2.38.1-5+deb12u3		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libk5crypto3	CVE-2026-11850	低危	1.20.1-2+deb12u5		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5-3	CVE-2018-5709	低危	1.20.1-2+deb12u5		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5-3	CVE-2024-26458	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5-3	CVE-2024-26461	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libsqlite3-0	CVE-2021-45346	低危	3.40.1-2+deb12u2		sqlite: crafted SQL query allows a malicious user to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2022-02-14 19:15 修改: 2026-06-17 04:13
libsqlite3-0	CVE-2025-29088	低危	3.40.1-2+deb12u2		sqlite: Denial of Service in SQLite 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29088 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-04-10 14:15 修改: 2026-06-17 09:05
libsqlite3-0	CVE-2025-70873	低危	3.40.1-2+deb12u2		sqlite: SQLite: Information Disclosure via Crafted ZIP File 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03
python3.11-minimal	CVE-2025-13462	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
python3.11-minimal	CVE-2026-12003	低危	3.11.2-6+deb12u7		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-16 17:16 修改: 2026-06-23 18:17
python3.11-minimal	CVE-2026-2297	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	cpython: CPython: Logging Bypass in Legacy .pyc File Handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
python3.11-minimal	CVE-2026-3479	低危	3.11.2-6+deb12u7		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
python3.11-minimal	CVE-2026-4519	低危	3.11.2-6+deb12u7	3.11.2-6+deb12u8	python: Python: Command-line option injection in webbrowser.open() via crafted URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-03-20 15:16 修改: 2026-06-30 03:20
sysvinit-utils	TEMP-0517018-A83CE6	低危	3.06-4		[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl3	CVE-2025-27587	低危	3.0.20-1~deb12u2		OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27587 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2025-06-16 22:15 修改: 2026-06-17 09:03
tar	CVE-2005-2541	低危	1.34+dfsg-1.2+deb12u1		tar: does not properly warn the user when extracting setuid or setgid files 漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27
tar	TEMP-0290435-0B57B5	低危	1.34+dfsg-1.2+deb12u1		[tar's rmt command may have undesired side effects] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl3	CVE-2026-42767	低危	3.0.20-1~deb12u2		openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libstdc++6	CVE-2022-27943	低危	12.2.0-14+deb12u1		binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libsystemd0	CVE-2013-4392	低危	252.39-1~deb12u2		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libsystemd0	CVE-2023-31437	低危	252.39-1~deb12u2		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
util-linux	CVE-2022-0563	低危	2.38.1-5+deb12u3		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
util-linux	CVE-2025-14104	低危	2.38.1-5+deb12u3		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libsystemd0	CVE-2023-31438	低危	252.39-1~deb12u2		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2023-31439	低危	252.39-1~deb12u2		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2026-40228	低危	252.39-1~deb12u2		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libtasn1-6	CVE-2025-13151	低危	4.19.0-2+deb12u1		libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
util-linux-extra	CVE-2022-0563	低危	2.38.1-5+deb12u3		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
util-linux-extra	CVE-2025-14104	低危	2.38.1-5+deb12u3		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libkrb5-3	CVE-2026-11850	低危	1.20.1-2+deb12u5		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5support0	CVE-2018-5709	低危	1.20.1-2+deb12u5		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libtinfo6	CVE-2025-6141	低危	6.4-4		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libudev1	CVE-2013-4392	低危	252.39-1~deb12u2		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libudev1	CVE-2023-31437	低危	252.39-1~deb12u2		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31438	低危	252.39-1~deb12u2		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31439	低危	252.39-1~deb12u2		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2026-40228	低危	252.39-1~deb12u2		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libkrb5support0	CVE-2024-26458	低危	1.20.1-2+deb12u5		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9f4874f2f444344294c9d673f2e390e821b9db7680e9c5ff7a18b19f8b8c3535 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
perl-base	CVE-2026-57433	未知	5.36.0-7+deb12u3		Storable versions before 3.41 for Perl have a signed integer overflow ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-07-13 17:17 修改: 2026-07-13 20:16
perl-base	CVE-2026-7017	未知	5.36.0-7+deb12u3		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
util-linux-extra	CVE-2026-53613	未知	2.38.1-5+deb12u3		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils	CVE-2026-53613	未知	1:2.38.1-5+deb12u3		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1	CVE-2026-53613	未知	2.38.1-5+deb12u3		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount	CVE-2026-53613	未知	2.38.1-5+deb12u3		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1	CVE-2026-53613	未知	2.38.1-5+deb12u3		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux	CVE-2026-53613	未知	2.38.1-5+deb12u3		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1	CVE-2026-53613	未知	2.38.1-5+deb12u3		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1	CVE-2026-53613	未知	2.38.1-5+deb12u3		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
perl-base	CVE-2026-13221	未知	5.36.0-7+deb12u3		Perl versions through 5.43.9 produce silently incorrect regular expres ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-07-13 17:16 修改: 2026-07-13 20:16
perl-base	CVE-2026-57432	未知	5.36.0-7+deb12u3		Perl versions through 5.43.10 have an integer overflow in S_measure_st ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:b05a96227958df6091396f6fbd5aa4616df631a65626ac8688c91cfa70d1a7e6 发布日期: 2026-07-13 17:17 修改: 2026-07-13 20:16

Node.js (node-pkg)

低危漏洞:2

中危漏洞:2

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
form-data	CVE-2026-12143	高危	4.0.5	2.5.6, 3.0.5, 4.0.6	form-data: form-data: Form field override via CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143 镜像层: sha256:a318565e7eaca965187916575fab0fb0ee31c794db49f97ee83a9213b7320235 发布日期: 2026-06-12 19:16 修改: 2026-07-13 13:16
undici	CVE-2026-12151	高危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151 镜像层: sha256:1310434fbf6de37d2ea1bbc3c4e61460175d58fb84c1f086bb042580811e1865 发布日期: 2026-06-17 17:16 修改: 2026-07-13 13:16
tar	CVE-2026-53655	中危	7.5.15	7.5.16	node-tar: node-tar: File smuggling due to inconsistent tar archive parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655 镜像层: sha256:1310434fbf6de37d2ea1bbc3c4e61460175d58fb84c1f086bb042580811e1865 发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
undici	CVE-2026-9679	中危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679 镜像层: sha256:1310434fbf6de37d2ea1bbc3c4e61460175d58fb84c1f086bb042580811e1865 发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
undici	CVE-2026-11525	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525 镜像层: sha256:1310434fbf6de37d2ea1bbc3c4e61460175d58fb84c1f086bb042580811e1865 发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici	CVE-2026-6733	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733 镜像层: sha256:1310434fbf6de37d2ea1bbc3c4e61460175d58fb84c1f086bb042580811e1865 发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46

/app/html/assets/AppShell-C5CwMY8O.js ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息