A Cloud-Native Application Protection Platform (CNAPP) is anĀ integrated security solutionĀ designed to provide comprehensiveĀ visibility and protection for cloud-native applications throughout their lifecycle, from development to production.
It integrates multiple security capabilities, such as CSPM (Cloud Security Posture Management), CWPP (Cloud Workload Protection), and others like CIEM and API security, into a single solution to simplify management, detect and respond to threats, and help ensure compliance
brew install trivy
trivy image nginx
2025-11-17T13:03:16-08:00 INFO [vulndb] Need to update DB
2025-11-17T13:03:16-08:00 INFO [vulndb] Downloading vulnerability DB...
2025-11-17T13:03:16-08:00 INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2"
75.20 MiB / 75.20 MiB [---------------------------------------------------------------------------------------------------------------------------------------------------------------------------] 100.00% 17.15 MiB p/s 4.6s
2025-11-17T13:03:23-08:00 INFO [vulndb] Artifact successfully downloaded repo="mirror.gcr.io/aquasec/trivy-db:2"
2025-11-17T13:03:23-08:00 INFO [vuln] Vulnerability scanning is enabled
2025-11-17T13:03:23-08:00 INFO [secret] Secret scanning is enabled
2025-11-17T13:03:23-08:00 INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-11-17T13:03:23-08:00 INFO [secret] Please see https://trivy.dev/v0.67/docs/scanner/secret#recommendation for faster secret detection
2025-11-17T13:03:26-08:00 INFO [javadb] Downloading Java DB...
2025-11-17T13:03:26-08:00 INFO [javadb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-java-db:1"
798.47 MiB / 798.47 MiB [--------------------------------------------------------------------------------------------------------------------------------------------------------------------------] 100.00% 24.02 MiB p/s 33s
2025-11-17T13:04:02-08:00 INFO [javadb] Artifact successfully downloaded repo="mirror.gcr.io/aquasec/trivy-java-db:1"
2025-11-17T13:04:02-08:00 INFO [javadb] Java DB is cached for 3 days. If you want to update the database more frequently, "trivy clean --java-db" command clears the DB cache.
2025-11-17T13:04:02-08:00 INFO Detected OS family="debian" version="13.1"
2025-11-17T13:04:02-08:00 INFO [debian] Detecting vulnerabilities... os_version="13" pkg_num=150
2025-11-17T13:04:02-08:00 INFO Number of language-specific files num=0
2025-11-17T13:04:02-08:00 WARN Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/v0.67/docs/scanner/vulnerability#severity-selection for details.
Report Summary
āāāāāāāāāāāāāāāāāāāāāāā¬āāāāāāāāā¬āāāāāāāāāāāāāāāāāā¬āāāāāāāāāā
ā Target ā Type ā Vulnerabilities ā Secrets ā
āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāā¼āāāāāāāāāāāāāāāāāā¼āāāāāāāāāā¤
ā nginx (debian 13.1) ā debian ā 98 ā - ā
āāāāāāāāāāāāāāāāāāāāāāā“āāāāāāāāā“āāāāāāāāāāāāāāāāāā“āāāāāāāāāā
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)
nginx (debian 13.1)
Total: 98 (UNKNOWN: 0, LOW: 84, MEDIUM: 12, HIGH: 2, CRITICAL: 0)
āāāāāāāāāāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāāāāāā¬āāāāāāāāāāā¬āāāāāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā
ā Library ā Vulnerability ā Severity ā Status ā Installed Version ā Fixed Version ā Title ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā apt ā CVE-2011-3374 ā LOW ā affected ā 3.0.3 ā ā It was found that apt-key in apt, all versions, do not ā
ā ā ā ā ā ā ā correctly... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2011-3374 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā bash ā TEMP-0841856-B18BAF ā ā ā 5.2.37-2+b5 ā ā [Privilege escalation possible to other user than root] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0841856-B1- ā
ā ā ā ā ā ā ā 8BAF ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā bsdutils ā CVE-2022-0563 ā ā ā 1:2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā coreutils ā CVE-2017-18018 ā ā ā 9.7-3 ā ā coreutils: race condition vulnerability in chown and chgrp ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-18018 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-5278 ā ā ā ā ā coreutils: Heap Buffer Under-Read in GNU Coreutils sort via ā
ā ā ā ā ā ā ā Key Specification ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-5278 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā curl ā CVE-2025-10148 ā MEDIUM ā fixed ā 8.14.1-2 ā 8.14.1-2+deb13u1 ā curl: predictable WebSocket mask ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10148 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-11563 ā ā ā ā 8.14.1-2+deb13u2 ā wcurl path traversal with percent-encoded slashes ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-11563 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-9086 ā ā ā ā 8.14.1-2+deb13u1 ā curl: libcurl: Curl out of bounds read for cookie path ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-9086 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-10966 ā LOW ā affected ā ā ā curl: Curl missing SFTP host verification with wolfSSH ā
ā ā ā ā ā ā ā backend ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10966 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libapt-pkg7.0 ā CVE-2011-3374 ā ā ā 3.0.3 ā ā It was found that apt-key in apt, all versions, do not ā
ā ā ā ā ā ā ā correctly... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2011-3374 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libblkid1 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libc-bin ā CVE-2010-4756 ā ā ā 2.41-12 ā ā glibc: glob implementation can cause excessive CPU and ā
ā ā ā ā ā ā ā memory consumption due to... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2010-4756 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2018-20796 ā ā ā ā ā glibc: uncontrolled recursion in function ā
ā ā ā ā ā ā ā check_dst_limits_calc_pos_1 in posix/regexec.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-20796 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010022 ā ā ā ā ā glibc: stack guard protection bypass ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010022 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010023 ā ā ā ā ā glibc: running ldd on malicious ELF leads to code execution ā
ā ā ā ā ā ā ā because of... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010023 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010024 ā ā ā ā ā glibc: ASLR bypass using cache of thread stack and heap ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010024 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010025 ā ā ā ā ā glibc: information disclosure of heap addresses of ā
ā ā ā ā ā ā ā pthread_created thread ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010025 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-9192 ā ā ā ā ā glibc: uncontrolled recursion in function ā
ā ā ā ā ā ā ā check_dst_limits_calc_pos_1 in posix/regexec.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-9192 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libc6 ā CVE-2010-4756 ā ā ā ā ā glibc: glob implementation can cause excessive CPU and ā
ā ā ā ā ā ā ā memory consumption due to... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2010-4756 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2018-20796 ā ā ā ā ā glibc: uncontrolled recursion in function ā
ā ā ā ā ā ā ā check_dst_limits_calc_pos_1 in posix/regexec.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-20796 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010022 ā ā ā ā ā glibc: stack guard protection bypass ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010022 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010023 ā ā ā ā ā glibc: running ldd on malicious ELF leads to code execution ā
ā ā ā ā ā ā ā because of... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010023 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010024 ā ā ā ā ā glibc: ASLR bypass using cache of thread stack and heap ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010024 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010025 ā ā ā ā ā glibc: information disclosure of heap addresses of ā
ā ā ā ā ā ā ā pthread_created thread ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010025 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-9192 ā ā ā ā ā glibc: uncontrolled recursion in function ā
ā ā ā ā ā ā ā check_dst_limits_calc_pos_1 in posix/regexec.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-9192 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libcurl4t64 ā CVE-2025-10148 ā MEDIUM ā fixed ā 8.14.1-2 ā 8.14.1-2+deb13u1 ā curl: predictable WebSocket mask ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10148 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-11563 ā ā ā ā 8.14.1-2+deb13u2 ā wcurl path traversal with percent-encoded slashes ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-11563 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-9086 ā ā ā ā 8.14.1-2+deb13u1 ā curl: libcurl: Curl out of bounds read for cookie path ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-9086 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-10966 ā LOW ā affected ā ā ā curl: Curl missing SFTP host verification with wolfSSH ā
ā ā ā ā ā ā ā backend ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10966 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libde265-0 ā CVE-2024-38949 ā MEDIUM ā fix_deferred ā 1.0.15-1+b3 ā ā Heap Buffer Overflow vulnerability in Libde265 v1.0.15 ā
ā ā ā ā ā ā ā allows attacker ... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-38949 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-38950 ā ā ā ā ā Heap Buffer Overflow vulnerability in Libde265 v1.0.15 ā
ā ā ā ā ā ā ā allows attacker ... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-38950 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libexpat1 ā CVE-2025-59375 ā ā affected ā 2.7.1-2 ā ā expat: libexpat in Expat allows attackers to trigger large ā
ā ā ā ā ā ā ā dynamic memory allocations... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-59375 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libgcrypt20 ā CVE-2018-6829 ā LOW ā ā 1.11.0-7 ā ā libgcrypt: ElGamal implementation doesn't have semantic ā
ā ā ā ā ā ā ā security due to incorrectly encoded plaintexts... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-6829 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-2236 ā ā ā ā ā libgcrypt: vulnerable to Marvin Attack ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-2236 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libgnutls30t64 ā CVE-2011-3389 ā ā ā 3.8.9-3 ā ā HTTPS: block-wise chosen-plaintext attack against SSL/TLS ā
ā ā ā ā ā ā ā (BEAST) ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2011-3389 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libgssapi-krb5-2 ā CVE-2018-5709 ā ā ā 1.21.3-5 ā ā krb5: integer overflow in dbentry->n_key_data in ā
ā ā ā ā ā ā ā kadmin/dbutil/dump.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-5709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26458 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26458 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26461 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26461 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libjbig0 ā CVE-2017-9937 ā ā ā 2.1-6.1+b2 ā ā libtiff: memory malloc failure in tif_jbig.c could cause ā
ā ā ā ā ā ā ā DOS. ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-9937 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libk5crypto3 ā CVE-2018-5709 ā ā ā 1.21.3-5 ā ā krb5: integer overflow in dbentry->n_key_data in ā
ā ā ā ā ā ā ā kadmin/dbutil/dump.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-5709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26458 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26458 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26461 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26461 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libkrb5-3 ā CVE-2018-5709 ā ā ā ā ā krb5: integer overflow in dbentry->n_key_data in ā
ā ā ā ā ā ā ā kadmin/dbutil/dump.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-5709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26458 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26458 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26461 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26461 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libkrb5support0 ā CVE-2018-5709 ā ā ā ā ā krb5: integer overflow in dbentry->n_key_data in ā
ā ā ā ā ā ā ā kadmin/dbutil/dump.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-5709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26458 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26458 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26461 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26461 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā liblastlog2-2 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libldap2 ā CVE-2015-3276 ā ā ā 2.6.10+dfsg-1 ā ā openldap: incorrect multi-keyword mode cipherstring parsing ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2015-3276 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2017-14159 ā ā ā ā ā openldap: Privilege escalation via PID file manipulation ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-14159 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2017-17740 ā ā ā ā ā openldap: contrib/slapd-modules/nops/nops.c attempts to free ā
ā ā ā ā ā ā ā stack buffer allowing remote attackers to cause... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-17740 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2020-15719 ā ā ā ā ā openldap: Certificate validation incorrectly matches name ā
ā ā ā ā ā ā ā against CN-ID ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2020-15719 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libmount1 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libpng16-16t64 ā CVE-2021-4214 ā ā ā 1.6.48-1 ā ā libpng: hardcoded value leads to heap-overflow ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2021-4214 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libsmartcols1 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libsqlite3-0 ā CVE-2025-7709 ā MEDIUM ā ā 3.46.1-7 ā ā An integer overflow exists in the FTS5 ā
ā ā ā ā ā ā ā https://sqlite.org/fts5.html e ... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-7709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2021-45346 ā LOW ā ā ā ā sqlite: crafted SQL query allows a malicious user to obtain ā
ā ā ā ā ā ā ā sensitive information... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2021-45346 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libsystemd0 ā CVE-2013-4392 ā ā ā 257.8-1~deb13u2 ā ā systemd: TOCTOU race condition when updating file ā
ā ā ā ā ā ā ā permissions and SELinux security contexts... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2013-4392 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31437 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā modify a... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31437 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31438 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā truncate a... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31438 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31439 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā modify the... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31439 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libtiff6 ā CVE-2017-16232 ā ā ā 4.7.0-3+deb13u1 ā ā libtiff: Memory leaks in tif_open.c, tif_lzw.c, and ā
ā ā ā ā ā ā ā tif_aux.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-16232 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2018-10126 ā ā ā ā ā libtiff: NULL pointer dereference in the jpeg_fdct_16x16 ā
ā ā ā ā ā ā ā function in jfdctint.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-10126 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2022-1210 ā ā ā ā ā tiff: Malicious file leads to a denial of service in TIFF ā
ā ā ā ā ā ā ā File... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-1210 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-8176 ā ā ā ā ā libtiff: LibTIFF Use-After-Free Vulnerability ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-8176 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-8177 ā ā ā ā ā libtiff: LibTIFF Buffer Overflow ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-8177 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-8534 ā ā ā ā ā libtiff: Libtiff Null Pointer Dereference Vulnerability ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-8534 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libtinfo6 ā CVE-2025-6141 ā ā ā 6.5+20250216-2 ā ā gnu-ncurses: ncurses Stack Buffer Overflow ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-6141 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libudev1 ā CVE-2013-4392 ā ā ā 257.8-1~deb13u2 ā ā systemd: TOCTOU race condition when updating file ā
ā ā ā ā ā ā ā permissions and SELinux security contexts... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2013-4392 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31437 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā modify a... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31437 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31438 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā truncate a... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31438 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31439 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā modify the... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31439 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libuuid1 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libxml2 ā CVE-2025-12863 ā HIGH ā ā 2.12.7+dfsg+really2.9.14-2.1+deb13u1 ā ā libxml2: Namespace Use-After-Free in xmlSetTreeDoc() ā
ā ā ā ā ā ā ā function of libxml2 ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-12863 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-9714 ā MEDIUM ā fixed ā ā 2.12.7+dfsg+really2.9.14-2.1+deb13u2 ā libxslt: libxml2: Inifinite recursion at exsltDynMapFunction ā
ā ā ā ā ā ā ā function in libexslt/dynamic.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-9714 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-8732 ā LOW ā affected ā ā ā libxml2: libxml2: Uncontrolled Recursion Vulnerability ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-8732 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libxslt1.1 ā CVE-2025-7425 ā HIGH ā ā 1.1.35-1.2+deb13u2 ā ā libxslt: Heap Use-After-Free in libxslt caused by atype ā
ā ā ā ā ā ā ā corruption in xmlAttrPtr ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-7425 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-10911 ā MEDIUM ā fix_deferred ā ā ā libxslt: use-after-free with key data stored cross-RVT ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10911 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2015-9019 ā LOW ā affected ā ā ā libxslt: math.random() in xslt uses unseeded randomness ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2015-9019 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-11731 ā ā ā ā ā libxslt: Type Confusion in exsltFuncResultCompfunction of ā
ā ā ā ā ā ā ā libxslt ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-11731 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā login ā CVE-2022-0563 ā ā ā 1:4.16.0-2+really2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā login.defs ā CVE-2007-5686 ā ā ā 1:4.17.4-2 ā ā initscripts in rPath Linux 1 sets insecure permissions for ā
ā ā ā ā ā ā ā the /var/lo ...... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2007-5686 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-56433 ā ā ā ā ā shadow-utils: Default subordinate ID configuration in ā
ā ā ā ā ā ā ā /etc/login.defs could lead to compromise ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-56433 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā TEMP-0628843-DBAD28 ā ā ā ā ā [more related to CVE-2005-4890] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0628843-DB- ā
ā ā ā ā ā ā ā AD28 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā mount ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ncurses-base ā CVE-2025-6141 ā ā ā 6.5+20250216-2 ā ā gnu-ncurses: ncurses Stack Buffer Overflow ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-6141 ā
āāāāāāāāāāāāāāāāāāāā¤ ā ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤ ā
ā ncurses-bin ā ā ā ā ā ā ā
ā ā ā ā ā ā ā ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā nginx ā CVE-2009-4487 ā ā ā 1.29.3-1~trixie ā ā nginx: Absent sanitation of escape sequences in web server ā
ā ā ā ā ā ā ā log ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2009-4487 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2013-0337 ā ā will_not_fix ā ā ā The default configuration of nginx, possibly 1.3.13 and ā
ā ā ā ā ā ā ā earlier, uses ...... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2013-0337 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā passwd ā CVE-2007-5686 ā ā affected ā 1:4.17.4-2 ā ā initscripts in rPath Linux 1 sets insecure permissions for ā
ā ā ā ā ā ā ā the /var/lo ...... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2007-5686 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-56433 ā ā ā ā ā shadow-utils: Default subordinate ID configuration in ā
ā ā ā ā ā ā ā /etc/login.defs could lead to compromise ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-56433 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā TEMP-0628843-DBAD28 ā ā ā ā ā [more related to CVE-2005-4890] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0628843-DB- ā
ā ā ā ā ā ā ā AD28 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā perl-base ā CVE-2011-4116 ā ā ā 5.40.1-6 ā ā perl: File:: Temp insecure temporary file handling ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2011-4116 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā sysvinit-utils ā TEMP-0517018-A83CE6 ā ā ā 3.14-4 ā ā [sysvinit: no-root option in expert installer exposes ā
ā ā ā ā ā ā ā locally exploitable security flaw] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0517018-A8- ā
ā ā ā ā ā ā ā 3CE6 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā tar ā CVE-2005-2541 ā ā ā 1.35+dfsg-3.1 ā ā tar: does not properly warn the user when extracting setuid ā
ā ā ā ā ā ā ā or setgid... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2005-2541 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā TEMP-0290435-0B57B5 ā ā ā ā ā [tar's rmt command may have undesired side effects] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0290435-0B- ā
ā ā ā ā ā ā ā 57B5 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā util-linux ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā“āāāāāāāāāāāāāāāāāāāāāā“āāāāāāāāāāā“āāāāāāāāāāāāāāā“āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā“āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā“āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā
mshaik@rafis-MacBook-Pro ~ %
mshaik@rafis-MacBook-Pro ~ % trivy image rafi494/nginx:custom
2025-11-17T13:07:12-08:00 INFO [vuln] Vulnerability scanning is enabled
2025-11-17T13:07:12-08:00 INFO [secret] Secret scanning is enabled
2025-11-17T13:07:12-08:00 INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-11-17T13:07:12-08:00 INFO [secret] Please see https://trivy.dev/v0.67/docs/scanner/secret#recommendation for faster secret detection
2025-11-17T13:07:12-08:00 INFO Detected OS family="debian" version="13.1"
2025-11-17T13:07:12-08:00 INFO [debian] Detecting vulnerabilities... os_version="13" pkg_num=150
2025-11-17T13:07:12-08:00 INFO Number of language-specific files num=0
2025-11-17T13:07:12-08:00 WARN Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/v0.67/docs/scanner/vulnerability#severity-selection for details.
Report Summary
āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¬āāāāāāāāā¬āāāāāāāāāāāāāāāāāā¬āāāāāāāāāā
ā Target ā Type ā Vulnerabilities ā Secrets ā
āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāā¼āāāāāāāāāāāāāāāāāā¼āāāāāāāāāā¤
ā rafi494/nginx:custom (debian 13.1) ā debian ā 98 ā - ā
āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā“āāāāāāāāā“āāāāāāāāāāāāāāāāāā“āāāāāāāāāā
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)
rafi494/nginx:custom (debian 13.1)
Total: 98 (UNKNOWN: 0, LOW: 84, MEDIUM: 12, HIGH: 2, CRITICAL: 0)
āāāāāāāāāāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāāāāāā¬āāāāāāāāāāā¬āāāāāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā
ā Library ā Vulnerability ā Severity ā Status ā Installed Version ā Fixed Version ā Title ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā apt ā CVE-2011-3374 ā LOW ā affected ā 3.0.3 ā ā It was found that apt-key in apt, all versions, do not ā
ā ā ā ā ā ā ā correctly... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2011-3374 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā bash ā TEMP-0841856-B18BAF ā ā ā 5.2.37-2+b5 ā ā [Privilege escalation possible to other user than root] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0841856-B1- ā
ā ā ā ā ā ā ā 8BAF ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā bsdutils ā CVE-2022-0563 ā ā ā 1:2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā coreutils ā CVE-2017-18018 ā ā ā 9.7-3 ā ā coreutils: race condition vulnerability in chown and chgrp ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-18018 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-5278 ā ā ā ā ā coreutils: Heap Buffer Under-Read in GNU Coreutils sort via ā
ā ā ā ā ā ā ā Key Specification ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-5278 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā curl ā CVE-2025-10148 ā MEDIUM ā fixed ā 8.14.1-2 ā 8.14.1-2+deb13u1 ā curl: predictable WebSocket mask ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10148 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-11563 ā ā ā ā 8.14.1-2+deb13u2 ā wcurl path traversal with percent-encoded slashes ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-11563 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-9086 ā ā ā ā 8.14.1-2+deb13u1 ā curl: libcurl: Curl out of bounds read for cookie path ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-9086 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-10966 ā LOW ā affected ā ā ā curl: Curl missing SFTP host verification with wolfSSH ā
ā ā ā ā ā ā ā backend ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10966 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libapt-pkg7.0 ā CVE-2011-3374 ā ā ā 3.0.3 ā ā It was found that apt-key in apt, all versions, do not ā
ā ā ā ā ā ā ā correctly... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2011-3374 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libblkid1 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libc-bin ā CVE-2010-4756 ā ā ā 2.41-12 ā ā glibc: glob implementation can cause excessive CPU and ā
ā ā ā ā ā ā ā memory consumption due to... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2010-4756 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2018-20796 ā ā ā ā ā glibc: uncontrolled recursion in function ā
ā ā ā ā ā ā ā check_dst_limits_calc_pos_1 in posix/regexec.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-20796 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010022 ā ā ā ā ā glibc: stack guard protection bypass ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010022 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010023 ā ā ā ā ā glibc: running ldd on malicious ELF leads to code execution ā
ā ā ā ā ā ā ā because of... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010023 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010024 ā ā ā ā ā glibc: ASLR bypass using cache of thread stack and heap ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010024 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010025 ā ā ā ā ā glibc: information disclosure of heap addresses of ā
ā ā ā ā ā ā ā pthread_created thread ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010025 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-9192 ā ā ā ā ā glibc: uncontrolled recursion in function ā
ā ā ā ā ā ā ā check_dst_limits_calc_pos_1 in posix/regexec.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-9192 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libc6 ā CVE-2010-4756 ā ā ā ā ā glibc: glob implementation can cause excessive CPU and ā
ā ā ā ā ā ā ā memory consumption due to... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2010-4756 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2018-20796 ā ā ā ā ā glibc: uncontrolled recursion in function ā
ā ā ā ā ā ā ā check_dst_limits_calc_pos_1 in posix/regexec.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-20796 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010022 ā ā ā ā ā glibc: stack guard protection bypass ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010022 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010023 ā ā ā ā ā glibc: running ldd on malicious ELF leads to code execution ā
ā ā ā ā ā ā ā because of... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010023 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010024 ā ā ā ā ā glibc: ASLR bypass using cache of thread stack and heap ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010024 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-1010025 ā ā ā ā ā glibc: information disclosure of heap addresses of ā
ā ā ā ā ā ā ā pthread_created thread ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-1010025 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2019-9192 ā ā ā ā ā glibc: uncontrolled recursion in function ā
ā ā ā ā ā ā ā check_dst_limits_calc_pos_1 in posix/regexec.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2019-9192 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libcurl4t64 ā CVE-2025-10148 ā MEDIUM ā fixed ā 8.14.1-2 ā 8.14.1-2+deb13u1 ā curl: predictable WebSocket mask ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10148 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-11563 ā ā ā ā 8.14.1-2+deb13u2 ā wcurl path traversal with percent-encoded slashes ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-11563 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-9086 ā ā ā ā 8.14.1-2+deb13u1 ā curl: libcurl: Curl out of bounds read for cookie path ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-9086 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-10966 ā LOW ā affected ā ā ā curl: Curl missing SFTP host verification with wolfSSH ā
ā ā ā ā ā ā ā backend ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10966 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libde265-0 ā CVE-2024-38949 ā MEDIUM ā fix_deferred ā 1.0.15-1+b3 ā ā Heap Buffer Overflow vulnerability in Libde265 v1.0.15 ā
ā ā ā ā ā ā ā allows attacker ... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-38949 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-38950 ā ā ā ā ā Heap Buffer Overflow vulnerability in Libde265 v1.0.15 ā
ā ā ā ā ā ā ā allows attacker ... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-38950 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libexpat1 ā CVE-2025-59375 ā ā affected ā 2.7.1-2 ā ā expat: libexpat in Expat allows attackers to trigger large ā
ā ā ā ā ā ā ā dynamic memory allocations... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-59375 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libgcrypt20 ā CVE-2018-6829 ā LOW ā ā 1.11.0-7 ā ā libgcrypt: ElGamal implementation doesn't have semantic ā
ā ā ā ā ā ā ā security due to incorrectly encoded plaintexts... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-6829 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-2236 ā ā ā ā ā libgcrypt: vulnerable to Marvin Attack ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-2236 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libgnutls30t64 ā CVE-2011-3389 ā ā ā 3.8.9-3 ā ā HTTPS: block-wise chosen-plaintext attack against SSL/TLS ā
ā ā ā ā ā ā ā (BEAST) ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2011-3389 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libgssapi-krb5-2 ā CVE-2018-5709 ā ā ā 1.21.3-5 ā ā krb5: integer overflow in dbentry->n_key_data in ā
ā ā ā ā ā ā ā kadmin/dbutil/dump.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-5709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26458 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26458 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26461 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26461 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libjbig0 ā CVE-2017-9937 ā ā ā 2.1-6.1+b2 ā ā libtiff: memory malloc failure in tif_jbig.c could cause ā
ā ā ā ā ā ā ā DOS. ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-9937 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libk5crypto3 ā CVE-2018-5709 ā ā ā 1.21.3-5 ā ā krb5: integer overflow in dbentry->n_key_data in ā
ā ā ā ā ā ā ā kadmin/dbutil/dump.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-5709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26458 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26458 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26461 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26461 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libkrb5-3 ā CVE-2018-5709 ā ā ā ā ā krb5: integer overflow in dbentry->n_key_data in ā
ā ā ā ā ā ā ā kadmin/dbutil/dump.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-5709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26458 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26458 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26461 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26461 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libkrb5support0 ā CVE-2018-5709 ā ā ā ā ā krb5: integer overflow in dbentry->n_key_data in ā
ā ā ā ā ā ā ā kadmin/dbutil/dump.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-5709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26458 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26458 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-26461 ā ā ā ā ā krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-26461 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā liblastlog2-2 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libldap2 ā CVE-2015-3276 ā ā ā 2.6.10+dfsg-1 ā ā openldap: incorrect multi-keyword mode cipherstring parsing ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2015-3276 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2017-14159 ā ā ā ā ā openldap: Privilege escalation via PID file manipulation ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-14159 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2017-17740 ā ā ā ā ā openldap: contrib/slapd-modules/nops/nops.c attempts to free ā
ā ā ā ā ā ā ā stack buffer allowing remote attackers to cause... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-17740 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2020-15719 ā ā ā ā ā openldap: Certificate validation incorrectly matches name ā
ā ā ā ā ā ā ā against CN-ID ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2020-15719 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libmount1 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libpng16-16t64 ā CVE-2021-4214 ā ā ā 1.6.48-1 ā ā libpng: hardcoded value leads to heap-overflow ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2021-4214 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libsmartcols1 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libsqlite3-0 ā CVE-2025-7709 ā MEDIUM ā ā 3.46.1-7 ā ā An integer overflow exists in the FTS5 ā
ā ā ā ā ā ā ā https://sqlite.org/fts5.html e ... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-7709 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2021-45346 ā LOW ā ā ā ā sqlite: crafted SQL query allows a malicious user to obtain ā
ā ā ā ā ā ā ā sensitive information... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2021-45346 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libsystemd0 ā CVE-2013-4392 ā ā ā 257.8-1~deb13u2 ā ā systemd: TOCTOU race condition when updating file ā
ā ā ā ā ā ā ā permissions and SELinux security contexts... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2013-4392 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31437 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā modify a... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31437 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31438 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā truncate a... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31438 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31439 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā modify the... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31439 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libtiff6 ā CVE-2017-16232 ā ā ā 4.7.0-3+deb13u1 ā ā libtiff: Memory leaks in tif_open.c, tif_lzw.c, and ā
ā ā ā ā ā ā ā tif_aux.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2017-16232 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2018-10126 ā ā ā ā ā libtiff: NULL pointer dereference in the jpeg_fdct_16x16 ā
ā ā ā ā ā ā ā function in jfdctint.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2018-10126 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2022-1210 ā ā ā ā ā tiff: Malicious file leads to a denial of service in TIFF ā
ā ā ā ā ā ā ā File... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-1210 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-8176 ā ā ā ā ā libtiff: LibTIFF Use-After-Free Vulnerability ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-8176 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-8177 ā ā ā ā ā libtiff: LibTIFF Buffer Overflow ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-8177 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-8534 ā ā ā ā ā libtiff: Libtiff Null Pointer Dereference Vulnerability ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-8534 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libtinfo6 ā CVE-2025-6141 ā ā ā 6.5+20250216-2 ā ā gnu-ncurses: ncurses Stack Buffer Overflow ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-6141 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libudev1 ā CVE-2013-4392 ā ā ā 257.8-1~deb13u2 ā ā systemd: TOCTOU race condition when updating file ā
ā ā ā ā ā ā ā permissions and SELinux security contexts... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2013-4392 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31437 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā modify a... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31437 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31438 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā truncate a... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31438 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2023-31439 ā ā ā ā ā An issue was discovered in systemd 253. An attacker can ā
ā ā ā ā ā ā ā modify the... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2023-31439 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libuuid1 ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libxml2 ā CVE-2025-12863 ā HIGH ā ā 2.12.7+dfsg+really2.9.14-2.1+deb13u1 ā ā libxml2: Namespace Use-After-Free in xmlSetTreeDoc() ā
ā ā ā ā ā ā ā function of libxml2 ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-12863 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-9714 ā MEDIUM ā fixed ā ā 2.12.7+dfsg+really2.9.14-2.1+deb13u2 ā libxslt: libxml2: Inifinite recursion at exsltDynMapFunction ā
ā ā ā ā ā ā ā function in libexslt/dynamic.c ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-9714 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-8732 ā LOW ā affected ā ā ā libxml2: libxml2: Uncontrolled Recursion Vulnerability ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-8732 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā libxslt1.1 ā CVE-2025-7425 ā HIGH ā ā 1.1.35-1.2+deb13u2 ā ā libxslt: Heap Use-After-Free in libxslt caused by atype ā
ā ā ā ā ā ā ā corruption in xmlAttrPtr ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-7425 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-10911 ā MEDIUM ā fix_deferred ā ā ā libxslt: use-after-free with key data stored cross-RVT ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-10911 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāā¼āāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2015-9019 ā LOW ā affected ā ā ā libxslt: math.random() in xslt uses unseeded randomness ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2015-9019 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2025-11731 ā ā ā ā ā libxslt: Type Confusion in exsltFuncResultCompfunction of ā
ā ā ā ā ā ā ā libxslt ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-11731 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā login ā CVE-2022-0563 ā ā ā 1:4.16.0-2+really2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā login.defs ā CVE-2007-5686 ā ā ā 1:4.17.4-2 ā ā initscripts in rPath Linux 1 sets insecure permissions for ā
ā ā ā ā ā ā ā the /var/lo ...... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2007-5686 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-56433 ā ā ā ā ā shadow-utils: Default subordinate ID configuration in ā
ā ā ā ā ā ā ā /etc/login.defs could lead to compromise ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-56433 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā TEMP-0628843-DBAD28 ā ā ā ā ā [more related to CVE-2005-4890] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0628843-DB- ā
ā ā ā ā ā ā ā AD28 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā mount ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ncurses-base ā CVE-2025-6141 ā ā ā 6.5+20250216-2 ā ā gnu-ncurses: ncurses Stack Buffer Overflow ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2025-6141 ā
āāāāāāāāāāāāāāāāāāāā¤ ā ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤ ā
ā ncurses-bin ā ā ā ā ā ā ā
ā ā ā ā ā ā ā ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā nginx ā CVE-2009-4487 ā ā ā 1.29.3-1~trixie ā ā nginx: Absent sanitation of escape sequences in web server ā
ā ā ā ā ā ā ā log ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2009-4487 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2013-0337 ā ā will_not_fix ā ā ā The default configuration of nginx, possibly 1.3.13 and ā
ā ā ā ā ā ā ā earlier, uses ...... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2013-0337 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ āāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā passwd ā CVE-2007-5686 ā ā affected ā 1:4.17.4-2 ā ā initscripts in rPath Linux 1 sets insecure permissions for ā
ā ā ā ā ā ā ā the /var/lo ...... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2007-5686 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā CVE-2024-56433 ā ā ā ā ā shadow-utils: Default subordinate ID configuration in ā
ā ā ā ā ā ā ā /etc/login.defs could lead to compromise ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2024-56433 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā TEMP-0628843-DBAD28 ā ā ā ā ā [more related to CVE-2005-4890] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0628843-DB- ā
ā ā ā ā ā ā ā AD28 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā perl-base ā CVE-2011-4116 ā ā ā 5.40.1-6 ā ā perl: File:: Temp insecure temporary file handling ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2011-4116 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā sysvinit-utils ā TEMP-0517018-A83CE6 ā ā ā 3.14-4 ā ā [sysvinit: no-root option in expert installer exposes ā
ā ā ā ā ā ā ā locally exploitable security flaw] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0517018-A8- ā
ā ā ā ā ā ā ā 3CE6 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā tar ā CVE-2005-2541 ā ā ā 1.35+dfsg-3.1 ā ā tar: does not properly warn the user when extracting setuid ā
ā ā ā ā ā ā ā or setgid... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2005-2541 ā
ā āāāāāāāāāāāāāāāāāāāāāāā¤ ā ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā ā TEMP-0290435-0B57B5 ā ā ā ā ā [tar's rmt command may have undesired side effects] ā
ā ā ā ā ā ā ā https://security-tracker.debian.org/tracker/TEMP-0290435-0B- ā
ā ā ā ā ā ā ā 57B5 ā
āāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāā¤ ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¼āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā¤
ā util-linux ā CVE-2022-0563 ā ā ā 2.41-5 ā ā util-linux: partial disclosure of arbitrary files in chfn ā
ā ā ā ā ā ā ā and chsh when compiled... ā
ā ā ā ā ā ā ā https://avd.aquasec.com/nvd/cve-2022-0563 ā
āāāāāāāāāāāāāāāāāāāā“āāāāāāāāāāāāāāāāāāāāāā“āāāāāāāāāāā“āāāāāāāāāāāāāāā“āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā“āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā“āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā
Ai + DevOps + Systems-Engineering š„³ 