docker.io/apache/spark:v3.2.3 linux/amd64

docker.io/apache/spark:v3.2.3 - Trivy安全扫描结果扫描时间: 2024-11-11 16:12

全部漏洞信息

低危漏洞:123

中危漏洞:112

高危漏洞:192

严重漏洞:47

系统OS: debian 11.4 扫描引擎: Trivy 扫描时间: 2024-11-11 16:12

docker.io/apache/spark:v3.2.3 (debian 11.4) (debian)

低危漏洞:113

中危漏洞:76

高危漏洞:107

严重漏洞:16

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
krb5-user	CVE-2024-37371	严重	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libdb5.3	CVE-2019-8457	严重	5.3.28+dfsg1-0.8		sqlite: heap out-of-bound read in function rtreenode() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-05-30 16:29 修改: 2023-11-07 03:13
libgssapi-krb5-2	CVE-2024-37371	严重	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libgssrpc4	CVE-2024-37371	严重	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libjson-c5	CVE-2021-32292	严重	0.15-2	0.15-2+deb11u1	json-c: stack-buffer-overflow in parseit() in json_parse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32292 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-22 19:16 修改: 2023-09-29 22:15
libk5crypto3	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkadm5clnt-mit12	CVE-2024-37371	严重	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkadm5srv-mit12	CVE-2024-37371	严重	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkdb5-10	CVE-2024-37371	严重	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5-3	CVE-2024-37371	严重	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5support0	CVE-2024-37371	严重	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libpcre2-8-0	CVE-2022-1586	严重	10.36-2	10.36-2+deb11u1	pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1586 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-05-16 21:15 修改: 2023-11-07 03:42
libpcre2-8-0	CVE-2022-1587	严重	10.36-2	10.36-2+deb11u1	pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1587 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-05-16 21:15 修改: 2023-11-07 03:42
libtasn1-6	CVE-2021-46848	严重	4.16.0-2	4.16.0-2+deb11u1	libtasn1: Out-of-bound access in ETYPE_OK 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-10-24 14:15 修改: 2023-11-07 03:40
zlib1g	CVE-2022-37434	严重	1:1.2.11.dfsg-2+deb11u1	1:1.2.11.dfsg-2+deb11u2	zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-08-05 07:15 修改: 2023-07-19 00:56
zlib1g	CVE-2023-45853	严重	1:1.2.11.dfsg-2+deb11u1		zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-10-14 02:15 修改: 2024-08-01 13:44
bind9-host	CVE-2024-4076	高危	1:9.16.33-1~deb11u1	1:9.16.50-1~deb11u1	bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4076 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-07-23 15:15 修改: 2024-08-01 13:59
bind9-libs	CVE-2022-2881	高危	1:9.16.33-1~deb11u1		bind: buffer overread in statistics channel code 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2881 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2022-09-21 11:15 修改: 2022-11-16 20:12
bind9-libs	CVE-2022-3094	高危	1:9.16.33-1~deb11u1	1:9.16.37-1~deb11u1	bind: flooding with UPDATE requests may lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3094 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-01-26 21:15 修改: 2023-11-07 03:50
bind9-libs	CVE-2022-3736	高危	1:9.16.33-1~deb11u1	1:9.16.37-1~deb11u1	bind: sending specific queries to the resolver may cause a DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3736 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-01-26 21:15 修改: 2023-11-07 03:51
bind9-libs	CVE-2022-3924	高危	1:9.16.33-1~deb11u1	1:9.16.37-1~deb11u1	bind: sending specific queries to the resolver may cause a DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3924 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-01-26 21:16 修改: 2023-11-07 03:51
bind9-libs	CVE-2023-2828	高危	1:9.16.33-1~deb11u1	1:9.16.42-1~deb11u1	bind: named's configured cache size limit can be significantly exceeded 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2828 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-06-21 17:15 修改: 2023-07-21 19:19
bind9-libs	CVE-2023-2911	高危	1:9.16.33-1~deb11u1	1:9.16.42-1~deb11u1	bind: Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2911 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-06-21 17:15 修改: 2023-07-03 19:09
bind9-libs	CVE-2023-3341	高危	1:9.16.33-1~deb11u1	1:9.16.44-1~deb11u1	bind: stack exhaustion in control channel code may lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3341 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-09-20 13:15 修改: 2024-02-16 18:39
bind9-libs	CVE-2023-4408	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Parsing large DNS messages may cause excessive CPU load 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4408 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-13 14:15 修改: 2024-10-21 21:02
bind9-libs	CVE-2023-50387	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
bind9-libs	CVE-2023-50868	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
bind9-libs	CVE-2023-5517	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5517 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-13 14:15 修改: 2024-10-22 14:09
bind9-libs	CVE-2023-5679	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5679 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-13 14:15 修改: 2024-10-22 13:58
bind9-libs	CVE-2023-6516	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Specific recursive query patterns may lead to an out-of-memory condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6516 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-13 14:15 修改: 2024-10-22 18:14
bind9-libs	CVE-2024-1737	高危	1:9.16.33-1~deb11u1	1:9.16.50-1~deb11u1	bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1737 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-07-23 15:15 修改: 2024-08-01 13:46
bind9-libs	CVE-2024-1975	高危	1:9.16.33-1~deb11u1	1:9.16.50-1~deb11u1	bind9: bind: SIG(0) can be used to exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1975 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-07-23 15:15 修改: 2024-08-01 13:46
bind9-libs	CVE-2024-4076	高危	1:9.16.33-1~deb11u1	1:9.16.50-1~deb11u1	bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4076 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-07-23 15:15 修改: 2024-08-01 13:59
bsdutils	CVE-2024-28085	高危	1:2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
e2fsprogs	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
bash	CVE-2022-3715	高危	5.1-2+deb11u1		bash: a heap-buffer-overflow in valid_parameter_transform 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3715 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-01-05 15:15 修改: 2023-02-24 18:38
krb5-user	CVE-2024-37370	高危	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libblkid1	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libc-bin	CVE-2021-3999	高危	2.31-13+deb11u3	2.31-13+deb11u4	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-08-24 16:15 修改: 2023-02-12 23:43
libc-bin	CVE-2023-4911	高危	2.31-13+deb11u3	2.31-13+deb11u7	glibc: buffer overflow in ld.so leading to privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-10-03 18:15 修改: 2024-09-17 19:46
libc-bin	CVE-2024-2961	高危	2.31-13+deb11u3	2.31-13+deb11u9	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33599	高危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2023-4911	高危	2.31-13+deb11u5	2.31-13+deb11u7	glibc: buffer overflow in ld.so leading to privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-10-03 18:15 修改: 2024-09-17 19:46
libc6	CVE-2024-2961	高危	2.31-13+deb11u5	2.31-13+deb11u9	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33599	高危	2.31-13+deb11u5	2.31-13+deb11u10	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libcom-err2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
bind9-host	CVE-2022-2881	高危	1:9.16.33-1~deb11u1		bind: buffer overread in statistics channel code 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2881 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2022-09-21 11:15 修改: 2022-11-16 20:12
libext2fs2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
libgcrypt20	CVE-2021-33560	高危	1.8.7-6		libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2021-06-08 11:15 修改: 2023-11-07 03:35
libgnutls30	CVE-2022-2509	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u2	gnutls: Double free during gnutls_pkcs7_verify 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-08-01 14:15 修改: 2023-11-07 03:46
libgnutls30	CVE-2023-0361	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u3	gnutls: timing side-channel in the TLS RSA key exchange code 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-02-15 18:15 修改: 2023-11-07 04:00
libgnutls30	CVE-2024-0553	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u5	gnutls: incomplete fix for CVE-2023-5981 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-01-16 12:15 修改: 2024-09-16 13:15
libgnutls30	CVE-2024-0567	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u5	gnutls: rejects certificate chain with distributed trust 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0567 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-01-16 14:15 修改: 2024-09-16 13:15
bind9-host	CVE-2022-3094	高危	1:9.16.33-1~deb11u1	1:9.16.37-1~deb11u1	bind: flooding with UPDATE requests may lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3094 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-01-26 21:15 修改: 2023-11-07 03:50
libgssapi-krb5-2	CVE-2024-37370	高危	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
bind9-host	CVE-2022-3736	高危	1:9.16.33-1~deb11u1	1:9.16.37-1~deb11u1	bind: sending specific queries to the resolver may cause a DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3736 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-01-26 21:15 修改: 2023-11-07 03:51
libgssrpc4	CVE-2024-37370	高危	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
bind9-host	CVE-2022-3924	高危	1:9.16.33-1~deb11u1	1:9.16.37-1~deb11u1	bind: sending specific queries to the resolver may cause a DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3924 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-01-26 21:16 修改: 2023-11-07 03:51
bind9-host	CVE-2023-2828	高危	1:9.16.33-1~deb11u1	1:9.16.42-1~deb11u1	bind: named's configured cache size limit can be significantly exceeded 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2828 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-06-21 17:15 修改: 2023-07-21 19:19
libk5crypto3	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libk5crypto3	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
bind9-host	CVE-2023-2911	高危	1:9.16.33-1~deb11u1	1:9.16.42-1~deb11u1	bind: Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2911 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-06-21 17:15 修改: 2023-07-03 19:09
libkadm5clnt-mit12	CVE-2024-37370	高危	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
bind9-host	CVE-2023-3341	高危	1:9.16.33-1~deb11u1	1:9.16.44-1~deb11u1	bind: stack exhaustion in control channel code may lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3341 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-09-20 13:15 修改: 2024-02-16 18:39
libkadm5srv-mit12	CVE-2024-37370	高危	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
bind9-host	CVE-2023-4408	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Parsing large DNS messages may cause excessive CPU load 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4408 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-13 14:15 修改: 2024-10-21 21:02
libkdb5-10	CVE-2024-37370	高危	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
bind9-host	CVE-2023-50387	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libkrb5-3	CVE-2024-37370	高危	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
bind9-host	CVE-2023-50868	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libkrb5support0	CVE-2024-37370	高危	1.18.3-6+deb11u3	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libmount1	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libncurses6	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libncurses6	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libncursesw6	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libncursesw6	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libnss3	CVE-2023-0767	高危	2:3.61-1+deb11u2	2:3.61-1+deb11u3	nss: Arbitrary memory write via PKCS 12 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-06-02 17:15 修改: 2023-08-02 16:45
libnss3	CVE-2024-0743	高危	2:3.61-1+deb11u2	2:3.61-1+deb11u4	Mozilla: Crash in NSS TLS method 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0743 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-01-23 14:15 修改: 2024-03-25 17:15
libnss3	CVE-2024-6609	高危	2:3.61-1+deb11u2	2:3.61-1+deb11u4	When almost out-of-memory an elliptic curve key which was never alloca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6609 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-07-09 15:15 修改: 2024-08-29 18:32
libpam-modules	CVE-2024-10963	高危	1.4.0-9+deb11u1		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-11-07 16:15 修改: 2024-11-08 19:01
libpam-modules-bin	CVE-2024-10963	高危	1.4.0-9+deb11u1		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-11-07 16:15 修改: 2024-11-08 19:01
libpam-runtime	CVE-2024-10963	高危	1.4.0-9+deb11u1		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-11-07 16:15 修改: 2024-11-08 19:01
libpam0g	CVE-2024-10963	高危	1.4.0-9+deb11u1		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-11-07 16:15 修改: 2024-11-08 19:01
bind9-host	CVE-2023-5517	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5517 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-13 14:15 修改: 2024-10-22 14:09
bind9-host	CVE-2023-5679	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5679 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-13 14:15 修改: 2024-10-22 13:58
libsmartcols1	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libsqlite3-0	CVE-2021-36690	高危	3.34.1-3	3.34.1-3+deb11u1	A segmentation fault can occur in the sqlite3.exe command-line compone ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36690 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2021-08-24 14:15 修改: 2024-08-04 01:15
libsqlite3-0	CVE-2023-7104	高危	3.34.1-3	3.34.1-3+deb11u1	sqlite: heap-buffer-overflow at sessionfuzz 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-12-29 10:15 修改: 2024-05-17 02:34
libss2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
libssl1.1	CVE-2022-4450	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0215	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-02-08 20:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2023-0286	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0464	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-03-22 17:15 修改: 2024-06-21 19:15
libsystemd0	CVE-2023-50387	高危	247.3-7	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libsystemd0	CVE-2023-50868	高危	247.3-7	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
bind9-host	CVE-2023-6516	高危	1:9.16.33-1~deb11u1	1:9.16.48-1	bind9: Specific recursive query patterns may lead to an out-of-memory condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6516 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-13 14:15 修改: 2024-10-22 18:14
libtinfo6	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libtinfo6	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libtirpc-common	CVE-2021-46828	高危	1.3.1-1	1.3.1-1+deb11u1	libtirpc: DoS vulnerability with lots of connections 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46828 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-07-20 06:15 修改: 2023-11-07 03:40
libtirpc3	CVE-2021-46828	高危	1.3.1-1	1.3.1-1+deb11u1	libtirpc: DoS vulnerability with lots of connections 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46828 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-07-20 06:15 修改: 2023-11-07 03:40
libudev1	CVE-2023-50387	高危	247.3-7	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libudev1	CVE-2023-50868	高危	247.3-7	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libuuid1	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libuv1	CVE-2024-24806	高危	1.40.0-2	1.40.0-2+deb11u1	libuv: Improper Domain Lookup that potentially leads to SSRF attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24806 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-07 22:15 修改: 2024-07-18 01:15
libxml2	CVE-2022-2309	高危	2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u5	lxml: NULL Pointer Dereference in lxml 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2309 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2022-07-05 10:15 修改: 2023-11-07 03:46
libxml2	CVE-2024-25062	高危	2.9.10+dfsg-6.7+deb11u3		libxml2: use-after-free in XMLReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-04 16:15 修改: 2024-02-13 00:40
libzstd1	CVE-2022-4899	高危	1.4.8+dfsg-2.1		zstd: mysql: buffer overrun in util.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-03-31 20:15 修改: 2023-11-07 03:59
logsave	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
mount	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
ncurses-base	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
ncurses-base	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
ncurses-bin	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
ncurses-bin	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
openssl	CVE-2022-4450	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0215	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-02-08 20:15 修改: 2024-06-21 19:15
openssl	CVE-2023-0286	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0464	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-03-22 17:15 修改: 2024-06-21 19:15
perl-base	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
perl-base	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
perl-base	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-12-18 14:15 修改: 2024-09-16 16:15
util-linux	CVE-2024-28085	高危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
bind9-host	CVE-2024-1737	高危	1:9.16.33-1~deb11u1	1:9.16.50-1~deb11u1	bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1737 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-07-23 15:15 修改: 2024-08-01 13:46
bind9-host	CVE-2024-1975	高危	1:9.16.33-1~deb11u1	1:9.16.50-1~deb11u1	bind9: bind: SIG(0) can be used to exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1975 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-07-23 15:15 修改: 2024-08-01 13:46
libgnutls30	CVE-2023-5981	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u4	gnutls: timing side-channel in the RSA-PSK authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-11-28 12:15 修改: 2024-09-16 13:15
libgnutls30	CVE-2024-28834	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u6	gnutls: vulnerable to Minerva side-channel information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-21 14:15 修改: 2024-09-12 20:15
libkdb5-10	CVE-2023-36054	中危	1.18.3-6+deb11u3	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libgnutls30	CVE-2024-28835	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u6	gnutls: potential crash during chain building/verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28835 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-21 06:15 修改: 2024-09-16 19:16
libc6	CVE-2024-33600	中危	2.31-13+deb11u5	2.31-13+deb11u10	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libkrb5-3	CVE-2023-36054	中危	1.18.3-6+deb11u3	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libc6	CVE-2024-33601	中危	2.31-13+deb11u5	2.31-13+deb11u10	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libgssapi-krb5-2	CVE-2023-36054	中危	1.18.3-6+deb11u3	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libssl1.1	CVE-2022-2097	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-07-05 11:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2022-4304	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0465	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0466	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-2650	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-3446	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2023-3817	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2023-5678	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-0727	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-4741	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl1.1	CVE-2024-5535	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libkrb5support0	CVE-2023-36054	中危	1.18.3-6+deb11u3	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libc6	CVE-2024-33602	中危	2.31-13+deb11u5	2.31-13+deb11u10	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libsystemd0	CVE-2022-3821	中危	247.3-7	247.3-7+deb11u2	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libsystemd0	CVE-2022-4415	中危	247.3-7	247.3-7+deb11u2	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libsystemd0	CVE-2023-7008	中危	247.3-7	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libc-bin	CVE-2024-33600	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libgssrpc4	CVE-2023-36054	中危	1.18.3-6+deb11u3	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libncurses6	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libtinfo6	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libc-bin	CVE-2024-33601	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33602	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libncursesw6	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
krb5-user	CVE-2023-36054	中危	1.18.3-6+deb11u3	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libudev1	CVE-2022-3821	中危	247.3-7	247.3-7+deb11u2	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libudev1	CVE-2022-4415	中危	247.3-7	247.3-7+deb11u2	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libudev1	CVE-2023-7008	中危	247.3-7	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libgcrypt20	CVE-2024-2236	中危	1.8.7-6		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-06 22:15 修改: 2024-09-14 04:15
libk5crypto3	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libnss3	CVE-2023-5388	中危	2:3.61-1+deb11u2		nss: timing attack against RSA decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-03-19 12:15 修改: 2024-03-25 17:15
libnss3	CVE-2023-6135	中危	2:3.61-1+deb11u2		nss: vulnerable to Minerva side-channel information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-12-19 14:15 修改: 2024-01-07 11:15
libxml2	CVE-2016-3709	中危	2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u5	libxml2: Incorrect server side include parsing can lead to XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3709 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2022-07-28 17:15 修改: 2022-12-07 16:39
libxml2	CVE-2023-28484	中危	2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u4	libxml2: NULL dereference in xmlSchemaFixupComplexType 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28484 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-04-24 21:15 修改: 2024-02-01 17:15
libxml2	CVE-2023-29469	中危	2.9.10+dfsg-6.7+deb11u3	2.9.10+dfsg-6.7+deb11u4	libxml2: Hashing of empty dict strings isn't deterministic 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29469 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-04-24 21:15 修改: 2023-06-01 14:15
libxml2	CVE-2023-39615	中危	2.9.10+dfsg-6.7+deb11u3		libxml2: crafted xml can cause global buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39615 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-29 17:15 修改: 2024-08-02 19:15
libxml2	CVE-2023-45322	中危	2.9.10+dfsg-6.7+deb11u3		libxml2: use-after-free in xmlUnlinkNode() in tree.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45322 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-10-06 22:15 修改: 2024-08-02 21:15
libnss3	CVE-2024-6602	中危	2:3.61-1+deb11u2	2:3.61-1+deb11u4	Mozilla: Memory corruption in NSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-07-09 15:15 修改: 2024-07-16 18:15
login	CVE-2023-4641	中危	1:4.8.1-1		shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
libc-bin	CVE-2023-4806	中危	2.31-13+deb11u3		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
libpam-modules	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-10-23 14:15 修改: 2024-11-04 22:27
libpam-modules	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libc-bin	CVE-2023-4813	中危	2.31-13+deb11u3		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
ncurses-base	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libpam-modules-bin	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-10-23 14:15 修改: 2024-11-04 22:27
libpam-modules-bin	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
ncurses-bin	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libkadm5clnt-mit12	CVE-2023-36054	中危	1.18.3-6+deb11u3	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libpam-runtime	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-10-23 14:15 修改: 2024-11-04 22:27
libpam-runtime	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libc6	CVE-2023-4806	中危	2.31-13+deb11u5		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
openssl	CVE-2022-2097	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2022-07-05 11:15 修改: 2024-06-21 19:15
openssl	CVE-2022-4304	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0465	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0466	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
openssl	CVE-2023-2650	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
openssl	CVE-2023-3446	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
openssl	CVE-2023-3817	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
openssl	CVE-2023-5678	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
openssl	CVE-2024-0727	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
openssl	CVE-2024-4741	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl	CVE-2024-5535	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
passwd	CVE-2023-4641	中危	1:4.8.1-1		shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
libpam0g	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-10-23 14:15 修改: 2024-11-04 22:27
libpam0g	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libc6	CVE-2023-4813	中危	2.31-13+deb11u5		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
libkadm5srv-mit12	CVE-2023-36054	中危	1.18.3-6+deb11u3	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libprotobuf-c1	CVE-2022-33070	中危	1.3.3-1+b2		protobuf-c: invalid arithmetic shift via the function parse_tag_and_wiretype may lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-33070 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2022-06-23 17:15 修改: 2023-11-07 03:48
libprotobuf-c1	CVE-2022-48468	中危	1.3.3-1+b2		protobuf-c: unsigned integer overflow in parse_required_member 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48468 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-04-13 21:15 修改: 2023-11-07 03:56
libsqlite3-0	CVE-2021-45346	低危	3.34.1-3		sqlite: crafted SQL query allows a malicious user to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2022-02-14 19:15 修改: 2024-08-04 05:15
libsqlite3-0	CVE-2022-35737	低危	3.34.1-3		sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2022-08-03 06:15 修改: 2024-03-27 16:05
bsdutils	CVE-2022-0563	低危	1:2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libkadm5srv-mit12	CVE-2018-5709	低危	1.18.3-6+deb11u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libkadm5srv-mit12	CVE-2024-26458	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkadm5srv-mit12	CVE-2024-26461	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
coreutils	CVE-2016-2781	低危	8.32-4+b1		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2017-02-07 15:59 修改: 2023-11-07 02:32
libgcc-s1	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
krb5-user	CVE-2018-5709	低危	1.18.3-6+deb11u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libkdb5-10	CVE-2018-5709	低危	1.18.3-6+deb11u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libkdb5-10	CVE-2024-26458	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkdb5-10	CVE-2024-26461	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
krb5-user	CVE-2024-26458	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libgcrypt20	CVE-2018-6829	低危	1.8.7-6		libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2018-02-07 23:29 修改: 2020-01-15 20:15
libc-bin	CVE-2010-4756	低危	2.31-13+deb11u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
libkrb5-3	CVE-2018-5709	低危	1.18.3-6+deb11u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libkrb5-3	CVE-2024-26458	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5-3	CVE-2024-26461	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libssl1.1	CVE-2024-2511	低危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-9143	低危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35
libstdc++6	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
libc-bin	CVE-2018-20796	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
libc-bin	CVE-2019-1010022	低危	2.31-13+deb11u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc-bin	CVE-2019-1010023	低危	2.31-13+deb11u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libkrb5support0	CVE-2018-5709	低危	1.18.3-6+deb11u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libkrb5support0	CVE-2024-26458	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libsystemd0	CVE-2013-4392	低危	247.3-7		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libsystemd0	CVE-2020-13529	低危	247.3-7		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libsystemd0	CVE-2023-31437	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libsystemd0	CVE-2023-31438	低危	247.3-7		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libsystemd0	CVE-2023-31439	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libkrb5support0	CVE-2024-26461	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libc-bin	CVE-2019-1010024	低危	2.31-13+deb11u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libmount1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libc-bin	CVE-2019-1010025	低危	2.31-13+deb11u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libtinfo6	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
libc-bin	CVE-2019-9192	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
libgnutls30	CVE-2011-3389	低危	3.7.1-5+deb11u1		HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2011-09-06 19:55 修改: 2022-11-29 15:56
libncurses6	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
krb5-user	CVE-2024-26461	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libapt-pkg6.0	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08
coreutils	CVE-2017-18018	低危	8.32-4+b1		coreutils: race condition vulnerability in chown and chgrp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2018-01-04 04:29 修改: 2018-01-19 15:46
libncursesw6	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
libudev1	CVE-2013-4392	低危	247.3-7		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libudev1	CVE-2020-13529	低危	247.3-7		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libudev1	CVE-2023-31437	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libudev1	CVE-2023-31438	低危	247.3-7		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libudev1	CVE-2023-31439	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libgssapi-krb5-2	CVE-2018-5709	低危	1.18.3-6+deb11u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libuuid1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libgssapi-krb5-2	CVE-2024-26458	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libgssapi-krb5-2	CVE-2024-26461	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libblkid1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
bash	TEMP-0841856-B18BAF	低危	5.1-2+deb11u1		[Privilege escalation possible to other user than root] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gcc-10-base	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
libnss3	CVE-2017-11695	低危	2:3.61-1+deb11u2		nss: Heap-buffer-overflow in alloc_segs 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11695 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2017-12-27 19:29 修改: 2020-03-16 23:15
libnss3	CVE-2017-11696	低危	2:3.61-1+deb11u2		nss: Heap-buffer-overflow in __hash_open 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11696 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2017-12-27 19:29 修改: 2020-03-16 23:15
libnss3	CVE-2017-11697	低危	2:3.61-1+deb11u2		nss: Floating Point Exception in __hash_open 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11697 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2017-12-27 19:29 修改: 2020-03-16 23:15
libxml2	CVE-2024-34459	低危	2.9.10+dfsg-6.7+deb11u3		libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-05-14 15:39 修改: 2024-08-22 18:35
libnss3	CVE-2017-11698	低危	2:3.61-1+deb11u2		nss: Heap-buffer-overflow in __get_page 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11698 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2017-12-27 19:29 修改: 2020-03-16 23:15
libgssrpc4	CVE-2018-5709	低危	1.18.3-6+deb11u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
login	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45
login	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
login	CVE-2023-29383	低危	1:4.8.1-1		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
login	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgssrpc4	CVE-2024-26458	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libgssrpc4	CVE-2024-26461	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
mount	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
gcc-9-base	CVE-2023-4039	低危	9.3.0-22		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
gpgv	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
libc6	CVE-2010-4756	低危	2.31-13+deb11u5		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
ncurses-base	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
libc6	CVE-2018-20796	低危	2.31-13+deb11u5		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
libc6	CVE-2019-1010022	低危	2.31-13+deb11u5		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libk5crypto3	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
ncurses-bin	CVE-2023-45918	低危	6.2+20201114-2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-16 22:15 修改: 2024-10-31 18:35
libk5crypto3	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libk5crypto3	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libc6	CVE-2019-1010023	低危	2.31-13+deb11u5		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc6	CVE-2019-1010024	低危	2.31-13+deb11u5		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc6	CVE-2019-1010025	低危	2.31-13+deb11u5		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libpcre2-8-0	CVE-2022-41409	低危	10.36-2		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-07-18 14:15 修改: 2023-07-27 03:46
libpcre3	CVE-2017-11164	低危	2:8.39-13		pcre: OP_KETRMAX feature in the match function in pcre_exec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2017-07-11 03:29 修改: 2023-11-07 02:38
libpcre3	CVE-2017-16231	低危	2:8.39-13		pcre: self-recursive call in match() in pcre_exec.c leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16231 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-03-21 15:59 修改: 2024-08-05 21:15
libpcre3	CVE-2017-7245	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2017-03-23 21:59 修改: 2018-08-17 10:29
libpcre3	CVE-2017-7246	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2017-03-23 21:59 修改: 2018-08-17 10:29
libpcre3	CVE-2019-20838	低危	2:8.39-13		pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20838 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2020-06-15 17:15 修改: 2024-03-27 16:05
libprocps8	CVE-2023-4016	低危	2:3.3.17-5		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
libkadm5clnt-mit12	CVE-2018-5709	低危	1.18.3-6+deb11u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libkadm5clnt-mit12	CVE-2024-26458	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libsepol1	CVE-2021-36084	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
openssl	CVE-2024-2511	低危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
openssl	CVE-2024-9143	低危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u6	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35
libsepol1	CVE-2021-36085	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
passwd	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45
passwd	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
passwd	CVE-2023-29383	低危	1:4.8.1-1		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
passwd	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsepol1	CVE-2021-36086	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in cil_reset_classpermission() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36087	低危	3.1-1	3.1-1+deb11u1	libsepol: heap-based buffer overflow in ebitmap_match_any() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libkadm5clnt-mit12	CVE-2024-26461	低危	1.18.3-6+deb11u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
perl-base	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
perl-base	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
procps	CVE-2023-4016	低危	2:3.3.17-5		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
sysvinit-utils	TEMP-0517018-A83CE6	低危	2.96-7+deb11u1		[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tar	CVE-2005-2541	低危	1.34+dfsg-1		tar: does not properly warn the user when extracting setuid or setgid files 漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2005-08-10 04:00 修改: 2023-11-07 01:57
tar	CVE-2022-48303	低危	1.34+dfsg-1	1.34+dfsg-1+deb11u1	tar: heap buffer overflow at from_header() in list.c via specially crafted checksum 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2023-01-30 04:15 修改: 2023-05-30 17:16
tar	CVE-2023-39804	低危	1.34+dfsg-1	1.34+dfsg-1+deb11u1	tar: Incorrectly handled extension attributes in PAX archives can lead to a crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2024-03-27 04:15 修改: 2024-03-27 12:29
tar	TEMP-0290435-0B57B5	低危	1.34+dfsg-1		[tar's rmt command may have undesired side effects] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
util-linux	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libc6	CVE-2019-9192	低危	2.31-13+deb11u5		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:9ab655a721766bded3cc651f38258e6b368322e328e4ae7387729e91364c0d80 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
apt	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08
libssl1.1	DLA-3942-2	未知	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl - regression update 漏洞详情: 镜像层: sha256:92a4e8a3140f7a04a0e5a15793adef2d0e8889ed306a8f95a6cfb67cecb5f212 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl	DLA-3942-2	未知	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl - regression update 漏洞详情: 镜像层: sha256:eafe6e032dbd1979848a323c4c84071be765d175661d6ea2ac148dbd673c6713 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Java (jar)

低危漏洞:10

中危漏洞:36

高危漏洞:85

严重漏洞:31

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.4.0	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.4.0	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2017-7525	严重	2.4.0	2.6.7.1, 2.7.9.1, 2.8.9	jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7525 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.4.0	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.4.0	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.4.0	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
log4j:log4j	CVE-2019-17571	严重	1.2.17		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2022-23305	严重	1.2.17		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23307	严重	1.2.17		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
org.apache.avro:avro	CVE-2024-47561	严重	1.10.2	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-10-03 11:15 修改: 2024-10-21 09:15
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-10-03 11:15 修改: 2024-10-21 09:15
org.apache.derby:derby	CVE-2022-46337	严重	10.14.2.0	10.14.3, 10.15.2.1, 10.16.1.2, 10.17.1.0	A cleverly devised username might bypass LDAP authentication checks. I ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46337 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-11-20 09:15 修改: 2024-04-26 16:08
org.apache.hadoop:hadoop-common	CVE-2021-37404	严重	3.3.1	3.3.2, 3.2.3, 2.10.2	hadoop-hdfs: Heap buffer overflow in Apache Hadoop libhdfs 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37404 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-06-13 07:15 修改: 2023-06-27 15:15
org.apache.hadoop:hadoop-common	CVE-2022-25168	严重	3.3.1	2.10.2, 3.2.4, 3.3.3	hadoop: Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25168 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-08-04 15:15 修改: 2023-06-26 11:15
org.apache.ivy:ivy	CVE-2022-37865	严重	2.5.0	2.5.1	apache-ivy: Directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37865 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-11-07 11:15 修改: 2023-11-07 03:49
org.apache.spark:spark-core_2.12	CVE-2023-22946	严重	3.2.3	3.3.3	Apache Spark vulnerable to Improper Privilege Management 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22946 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-04-17 08:15 修改: 2023-04-26 23:00
org.apache.zookeeper:zookeeper	CVE-2023-44981	严重	3.6.2	3.7.2, 3.8.3, 3.9.1	zookeeper: Authorization Bypass in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-10-11 12:15 修改: 2024-06-21 19:15
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10202	严重	1.9.13		codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10202 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-10-01 15:15 修改: 2023-02-12 23:33
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.4.0	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.4.0	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.4.0	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.4.0	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.4.0	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.4.0	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.4.0	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.4.0	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.4.0	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.4.0	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.4.0	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.google.code.gson:gson	CVE-2022-25647	高危	2.2.4	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-05-01 16:15 修改: 2022-11-28 17:33
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	2.5.0	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-01-10 14:10 修改: 2023-04-18 09:15
com.google.protobuf:protobuf-java	CVE-2021-22570	高危	2.5.0	3.15.0	protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22570 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-01-26 14:15 修改: 2023-11-07 03:30
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-12 13:15 修改: 2022-12-15 16:57
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-12 13:15 修改: 2023-11-07 03:51
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	2.5.0	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	3.3.0	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-01-10 14:10 修改: 2023-04-18 09:15
com.google.protobuf:protobuf-java	CVE-2021-22570	高危	3.3.0	3.15.0	protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22570 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-01-26 14:15 修改: 2023-11-07 03:30
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.3.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-12 13:15 修改: 2022-12-15 16:57
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.3.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-12 13:15 修改: 2023-11-07 03:51
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.3.0	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	3.7.1	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-01-10 14:10 修改: 2023-04-18 09:15
com.google.protobuf:protobuf-java	CVE-2021-22570	高危	3.7.1	3.15.0	protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22570 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-01-26 14:15 修改: 2023-11-07 03:30
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.7.1	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-12 13:15 修改: 2022-12-15 16:57
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.7.1	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-12 13:15 修改: 2023-11-07 03:51
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.7.1	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.8.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-02-11 05:15 修改: 2024-10-30 20:35
commons-io:commons-io	CVE-2024-47554	高危	2.8.0	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-10-03 12:15 修改: 2024-10-04 13:50
commons-io:commons-io	CVE-2024-47554	高危	2.8.0	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-10-03 12:15 修改: 2024-10-04 13:50
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-07-22 14:15 修改: 2024-09-04 15:15
io.airlift:aircompressor	CVE-2024-36114	高危	0.21	0.27	Decompressors can crash the JVM and leak memory content in Aircompressor 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36114 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-05-29 21:15 修改: 2024-05-30 13:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.11.4	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.12.3	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-46877	高危	2.12.3	2.12.6, 2.13.1	jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-03-18 22:15 修改: 2023-08-08 14:21
log4j:log4j	CVE-2021-4104	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2022-23302	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
net.minidev:json-smart	CVE-2021-31684	高危	1.3.2	1.3.3, 2.4.4	json-smart: Denial of Service in JSONParserByteArray function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31684 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-06-01 20:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2023-1370	高危	1.3.2	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.12.3	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
org.apache.avro:avro	CVE-2023-39410	高危	1.10.2	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-09-29 17:15 修改: 2024-06-21 19:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.12.3	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-09-29 17:15 修改: 2024-06-21 19:15
org.apache.commons:commons-compress	CVE-2021-35515	高危	1.19	1.21	apache-commons-compress: infinite loop when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35516	高危	1.19	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35517	高危	1.19	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-36090	高危	1.19	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2024-25710	高危	1.19	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-02-19 09:15 修改: 2024-03-07 17:15
org.apache.commons:commons-compress	CVE-2024-25710	高危	1.21	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-02-19 09:15 修改: 2024-03-07 17:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.10.5.1	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-46877	高危	2.10.5.1	2.12.6, 2.13.1	jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-03-18 22:15 修改: 2023-08-08 14:21
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.10.5.1	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.10.5.1	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
org.apache.ivy:ivy	CVE-2022-37866	高危	2.5.0	2.5.1	Ivy: Ivy Path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37866 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-11-07 14:15 修改: 2023-11-07 03:49
org.apache.ivy:ivy	CVE-2022-46751	高危	2.5.0	2.5.2	apache-ivy: XML External Entity vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46751 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-08-21 07:15 修改: 2024-09-27 21:35
org.apache.mesos:mesos	CVE-2018-11793	高危	1.4.0	1.4.3, 1.5.2, 1.6.2, 1.7.1	mesos: stack overflow vulnerability in parser 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11793 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-03-05 21:29 修改: 2023-11-07 02:51
org.apache.mesos:mesos	CVE-2018-1330	高危	1.4.0	1.6.0	Crash when decoding malformed HTTP requests or malformed JSON payload 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1330 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2018-09-13 19:29 修改: 2023-11-07 02:55
org.apache.mesos:mesos	CVE-2019-0204	高危	1.4.0	1.4.3, 1.5.3, 1.6.2, 1.7.2	mesos: docker image code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0204 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-03-25 22:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.11.4	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
org.apache.thrift:libthrift	CVE-2019-0205	高危	0.12.0	0.13.0	thrift: Endless loop when feed with specific input data 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0205 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-10-29 19:15 修改: 2023-11-07 03:01
org.apache.thrift:libthrift	CVE-2020-13949	高危	0.12.0	0.14.0	libthrift: potential DoS when processing untrusted payloads 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13949 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-02-12 20:15 修改: 2023-11-07 03:17
org.apache.velocity:velocity	CVE-2020-13936	高危	1.5		velocity: arbitrary code execution when attacker is able to modify templates 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13936 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-03-10 08:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2021-46877	高危	2.11.4	2.12.6, 2.13.1	jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-03-18 22:15 修改: 2023-08-08 14:21
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.11.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10172	高危	1.9.13		jackson-mapper-asl: XML external entity similar to CVE-2016-3720 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10172 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-11-18 17:15 修改: 2023-02-12 23:33
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.1.8.4	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-06-15 18:15 修改: 2024-02-01 14:17
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.1.8.4	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-09-25 20:15 修改: 2023-09-26 15:46
org.yaml:snakeyaml	CVE-2022-1471	高危	1.27	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-01 11:15 修改: 2024-06-21 19:15
org.yaml:snakeyaml	CVE-2022-25857	高危	1.27	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-08-30 05:15 修改: 2024-03-15 11:15
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.google.guava:guava	CVE-2018-10237	中危	14.0.1	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
com.google.guava:guava	CVE-2018-10237	中危	14.0.1	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	2.5.0	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-12 23:15 修改: 2023-11-07 03:50
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.7.1	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-12 23:15 修改: 2023-11-07 03:50
com.google.guava:guava	CVE-2023-2976	中危	14.0.1	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.squareup.okio:okio	CVE-2023-3635	中危	1.14.0	3.4.0, 1.17.6	okio: GzipSource class improper exception handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-07-12 19:15 修改: 2023-10-25 15:17
com.squareup.okio:okio	CVE-2023-3635	中危	1.6.0	3.4.0, 1.17.6	okio: GzipSource class improper exception handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-07-12 19:15 修改: 2023-10-25 15:17
org.apache.mesos:mesos	CVE-2018-8023	中危	1.4.0	1.4.2, 1.5.2, 1.6.1	mesos: Exposure of HMAC value via timing vulnerability in JWT validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8023 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2018-09-21 13:29 修改: 2023-11-07 03:01
com.google.guava:guava	CVE-2023-2976	中危	14.0.1	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.google.guava:guava	CVE-2023-2976	中危	30.1.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
commons-net:commons-net	CVE-2021-37533	中危	3.1	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-03 15:15 修改: 2023-01-10 19:29
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-12-03 15:15 修改: 2023-01-10 19:29
com.google.guava:guava	CVE-2023-2976	中危	30.1.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
org.apache.zookeeper:zookeeper	CVE-2024-23944	中危	3.6.2	3.8.4, 3.9.2	Information disclosure in persistent watchers handling in Apache ZooKe ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23944 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-03-15 11:15 修改: 2024-05-01 17:15
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.3.0	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-10-12 23:15 修改: 2023-11-07 03:50
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.4.40.v20210413	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-09-15 20:15 修改: 2023-10-13 01:59
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	9.4.40.v20210413	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-10-14 16:15 修改: 2024-11-08 21:15
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.4.44.v20210927	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-09-15 20:15 修改: 2023-10-13 01:59
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	9.4.44.v20210927	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-10-14 16:15 修改: 2024-11-08 21:15
org.eclipse.jetty:jetty-server	CVE-2023-26048	中危	9.4.44.v20210927	9.4.51.v20230217, 10.0.14, 11.0.14	jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-04-18 21:15 修改: 2023-09-30 15:15
org.eclipse.jetty:jetty-server	CVE-2024-8184	中危	9.4.44.v20210927	12.0.9, 10.0.24, 11.0.24, 9.4.56	org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-10-14 16:15 修改: 2024-11-08 21:00
org.eclipse.jetty:jetty-servlets	CVE-2024-9823	中危	9.4.44.v20210927	9.4.54, 10.0.18, 11.0.18	org.eclipse.jetty:jetty-servlets: jetty: Jetty DOS vulnerability on DosFilter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9823 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-10-14 15:15 修改: 2024-10-15 12:57
org.eclipse.jetty:jetty-webapp	CVE-2021-34429	中危	9.4.40.v20210413	9.4.43, 10.0.6, 11.0.6	jetty: crafted URIs allow bypassing security constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34429 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2021-07-15 17:15 修改: 2023-11-07 03:35
org.apache.commons:commons-compress	CVE-2024-26308	中危	1.21	1.26.0	commons-compress: OutOfMemoryError unpacking broken Pack200 file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26308 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-02-19 09:15 修改: 2024-03-21 19:54
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-03-21 09:15 修改: 2024-08-28 15:35
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.1.8.4	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-06-15 17:15 修改: 2023-06-27 15:59
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.1.8.4	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-06-15 17:15 修改: 2023-06-27 16:04
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-03-21 09:15 修改: 2024-11-04 17:35
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.3.0	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-09-16 10:15 修改: 2023-02-09 01:36
org.yaml:snakeyaml	CVE-2022-38749	中危	1.27	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38750	中危	1.27	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38751	中危	1.27	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38752	中危	1.27	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-41854	中危	1.27	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-11-11 13:15 修改: 2024-06-21 19:15
com.google.guava:guava	CVE-2020-8908	低危	14.0.1	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	9.4.44.v20210927	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-07-07 21:15 修改: 2022-10-25 19:10
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.3.1	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2024-09-25 08:15 修改: 2024-11-05 20:35
com.google.guava:guava	CVE-2020-8908	低危	30.1.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
org.eclipse.jetty:jetty-server	CVE-2023-26049	低危	9.4.44.v20210927	9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0	jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-04-18 21:15 修改: 2024-02-01 15:36
com.google.guava:guava	CVE-2020-8908	低危	30.1.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
org.eclipse.jetty:jetty-servlets	CVE-2023-36479	低危	9.4.44.v20210927	9.4.52, 10.0.16, 11.0.16	jetty: Improper addition of quotation marks to user inputs in CgiServlet 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36479 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2023-09-15 19:15 修改: 2023-10-16 19:20
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	9.4.40.v20210413	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2022-07-07 21:15 修改: 2022-10-25 19:10
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.4.40.v20210413	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
com.google.guava:guava	CVE-2020-8908	低危	14.0.1	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:1581591738f2bd0b91eb6892f94dcf86009ea281c1094b0700acdf192b773240 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30