docker.io/atlassian/confluence-server:6.13.3 linux/amd64

docker.io/atlassian/confluence-server:6.13.3 - Trivy安全扫描结果扫描时间: 2024-12-27 14:09

全部漏洞信息

低危漏洞:192

中危漏洞:524

高危漏洞:451

严重漏洞:182

系统OS: ubuntu 20.04 扫描引擎: Trivy 扫描时间: 2024-12-27 14:09

docker.io/atlassian/confluence-server:6.13.3 (ubuntu 20.04) (ubuntu)

低危漏洞:179

中危漏洞:331

高危漏洞:13

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libexpat1	CVE-2022-25235	高危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-02-16 01:15 修改: 2023-11-07 03:44
libexpat1	CVE-2022-25236	高危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-02-16 01:15 修改: 2023-11-07 03:44
libnghttp2-14	CVE-2023-44487	高危	1.40.0-1build1	1.40.0-1ubuntu0.2	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-10-10 14:15 修改: 2024-12-20 17:40
libsasl2-2	CVE-2022-24407	高危	2.1.27+dfsg-2	2.1.27+dfsg-2ubuntu0.1	cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-02-24 15:15 修改: 2023-11-07 03:44
libsasl2-modules-db	CVE-2022-24407	高危	2.1.27+dfsg-2	2.1.27+dfsg-2ubuntu0.1	cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-02-24 15:15 修改: 2023-11-07 03:44
libssl1.1	CVE-2021-3711	高危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.8	openssl: SM2 Decryption Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-24 15:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2022-0778	高危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.12	openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-03-15 17:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2023-0286	高危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.17	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libsystemd0	CVE-2021-33910	高危	245.4-4ubuntu3.7	245.4-4ubuntu3.10	systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2021-07-20 19:15 修改: 2023-11-07 03:35
libudev1	CVE-2021-33910	高危	245.4-4ubuntu3.7	245.4-4ubuntu3.10	systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2021-07-20 19:15 修改: 2023-11-07 03:35
openssl	CVE-2021-3711	高危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.8	openssl: SM2 Decryption Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-24 15:15 修改: 2024-06-21 19:15
openssl	CVE-2022-0778	高危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.12	openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-03-15 17:15 修改: 2024-06-21 19:15
openssl	CVE-2023-0286	高危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.17	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
curl	CVE-2022-32221	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.14	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-05 22:15 修改: 2024-03-27 15:00
curl	CVE-2022-43552	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.15	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-09 20:15 修改: 2024-10-27 15:35
curl	CVE-2023-23916	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.16	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:54
curl	CVE-2023-27535	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:47
curl	CVE-2023-46218	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.21	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-12-07 01:15 修改: 2024-01-25 14:15
curl	CVE-2024-2398	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.22	curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
curl	CVE-2024-7264	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.23	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-07-31 08:15 修改: 2024-10-30 20:35
curl	CVE-2024-8096	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.24	curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
dpkg	CVE-2022-1664	中危	1.19.7ubuntu3	1.19.7ubuntu3.2	Dpkg::Source::Archive in dpkg, the Debian package management system, b ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1664 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-05-26 14:15 修改: 2022-12-03 02:19
e2fsprogs	CVE-2022-1304	中危	1.45.5-2ubuntu1	1.45.5-2ubuntu1.1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-14 21:15 修改: 2024-11-22 12:15
fdisk	CVE-2021-3995	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-01-07 09:15
fdisk	CVE-2021-3996	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-10-15 16:35
fdisk	CVE-2024-28085	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.5	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
gpgv	CVE-2022-34903	中危	2.2.19-3ubuntu2.1	2.2.19-3ubuntu2.2	gpg: Signature spoofing via status line injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-07-01 22:15 修改: 2023-11-07 03:48
gzip	CVE-2022-1271	中危	1.10-0ubuntu4	1.10-0ubuntu4.1	gzip: arbitrary-file-write vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-31 16:15 修改: 2024-08-26 10:47
libasn1-8-heimdal	CVE-2021-44758	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-26 05:15 修改: 2023-10-08 09:15
libasn1-8-heimdal	CVE-2022-3116	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	CVE-2022-3116 affecting package heimdal for versions less than 7.7.1-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-27 22:15 修改: 2023-05-05 20:15
libasn1-8-heimdal	CVE-2022-3437	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-01-12 15:15 修改: 2024-10-28 19:35
libasn1-8-heimdal	CVE-2022-41916	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2	Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-11-15 23:15 修改: 2023-10-08 09:15
libasn1-8-heimdal	CVE-2022-42898	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libasn1-8-heimdal	CVE-2022-44640	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 05:15 修改: 2023-10-08 09:15
libasn1-8-heimdal	CVE-2022-45142	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4	samba: fix introduced a logic inversion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-06 23:15 修改: 2023-10-08 09:15
libblkid1	CVE-2021-3995	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-01-07 09:15
libblkid1	CVE-2021-3996	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-10-15 16:35
libblkid1	CVE-2024-28085	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.5	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libc-bin	CVE-2021-3999	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-24 16:15 修改: 2023-02-12 23:43
libc-bin	CVE-2024-2961	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.15	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33599	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33600	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33601	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33602	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2021-3999	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-24 16:15 修改: 2023-02-12 23:43
libc6	CVE-2024-2961	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.15	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33599	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33600	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33601	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33602	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libcom-err2	CVE-2022-1304	中危	1.45.5-2ubuntu1	1.45.5-2ubuntu1.1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-14 21:15 修改: 2024-11-22 12:15
libcurl4	CVE-2021-22924	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.6	curl: Bad connection reuse due to flawed path name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
libcurl4	CVE-2021-22925	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.6	curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
libcurl4	CVE-2021-22946	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.7	curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:12
libcurl4	CVE-2021-22947	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.7	curl: Server responses received before STARTTLS processed after TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:03
libcurl4	CVE-2022-22576	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.10	curl: OAUTH2 bearer bypass in connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-05-26 17:15 修改: 2024-03-27 15:02
libcurl4	CVE-2022-27774	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.10	curl: credential leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libcurl4	CVE-2022-27782	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.11	curl: TLS and SSH connection too eager reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
libcurl4	CVE-2022-32206	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.12	curl: HTTP compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libcurl4	CVE-2022-32208	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.12	curl: FTP-KRB bad message verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libcurl4	CVE-2022-32221	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.14	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-05 22:15 修改: 2024-03-27 15:00
libcurl4	CVE-2022-43552	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.15	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-09 20:15 修改: 2024-10-27 15:35
libcurl4	CVE-2023-23916	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.16	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:54
libcurl4	CVE-2023-27535	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:47
libcurl4	CVE-2023-46218	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.21	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-12-07 01:15 修改: 2024-01-25 14:15
libcurl4	CVE-2024-2398	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.22	curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libcurl4	CVE-2024-7264	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.23	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-07-31 08:15 修改: 2024-10-30 20:35
libcurl4	CVE-2024-8096	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.24	curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
bsdutils	CVE-2021-3995	中危	1:2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-01-07 09:15
bsdutils	CVE-2021-3996	中危	1:2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-10-15 16:35
libexpat1	CVE-2021-46143	中危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Integer overflow in doProlog in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-06 04:15 修改: 2022-10-06 19:11
libexpat1	CVE-2022-22822	中危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Integer overflow in addBinding in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-10 14:12 修改: 2022-10-06 15:29
libexpat1	CVE-2022-22823	中危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Integer overflow in build_model in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-10 14:12 修改: 2022-10-06 14:47
libexpat1	CVE-2022-22824	中危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Integer overflow in defineAttribute in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-10 14:12 修改: 2022-10-06 14:47
libexpat1	CVE-2022-22825	中危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Integer overflow in lookup in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-10 14:12 修改: 2022-10-06 14:47
libexpat1	CVE-2022-22826	中危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Integer overflow in nextScaffoldPart in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-10 14:12 修改: 2022-10-06 12:44
libexpat1	CVE-2022-22827	中危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Integer overflow in storeAtts in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-10 14:12 修改: 2022-10-06 12:52
libexpat1	CVE-2022-23852	中危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Integer overflow in function XML_GetBuffer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-24 02:15 修改: 2022-10-29 02:44
libexpat1	CVE-2022-23990	中危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: integer overflow in the doProlog function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-26 19:15 修改: 2023-11-07 03:44
libexpat1	CVE-2022-25313	中危	2.2.9-1build1	2.2.9-1ubuntu0.4	expat: Stack exhaustion in doctype parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-02-18 05:15 修改: 2023-11-07 03:44
libexpat1	CVE-2022-25314	中危	2.2.9-1build1	2.2.9-1ubuntu0.4	expat: Integer overflow in copyString() 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25314 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-02-18 05:15 修改: 2023-11-07 03:44
libexpat1	CVE-2022-25315	中危	2.2.9-1build1	2.2.9-1ubuntu0.4	expat: Integer overflow in storeRawNames() 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-02-18 05:15 修改: 2023-11-07 03:44
libexpat1	CVE-2022-40674	中危	2.2.9-1build1	2.2.9-1ubuntu0.5	expat: a use-after-free in the doContent function in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-09-14 11:15 修改: 2023-11-07 03:52
libexpat1	CVE-2022-43680	中危	2.2.9-1build1	2.2.9-1ubuntu0.6	expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-10-24 14:15 修改: 2024-01-21 02:08
libexpat1	CVE-2024-45490	中危	2.2.9-1build1	2.2.9-1ubuntu0.7	libexpat: Negative Length Parsing Vulnerability in libexpat 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-08-30 03:15 修改: 2024-10-18 12:24
libexpat1	CVE-2024-45491	中危	2.2.9-1build1	2.2.9-1ubuntu0.7	libexpat: Integer Overflow or Wraparound 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libexpat1	CVE-2024-45492	中危	2.2.9-1build1	2.2.9-1ubuntu0.7	libexpat: integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libext2fs2	CVE-2022-1304	中危	1.45.5-2ubuntu1	1.45.5-2ubuntu1.1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-14 21:15 修改: 2024-11-22 12:15
libfdisk1	CVE-2021-3995	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-01-07 09:15
libfdisk1	CVE-2021-3996	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-10-15 16:35
libfdisk1	CVE-2024-28085	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.5	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libfreetype6	CVE-2022-27404	中危	2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	FreeType: Buffer overflow in sfnt_init_face 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27404 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-04-22 14:15 修改: 2024-02-29 01:34
libfreetype6	CVE-2022-31782	中危	2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based bu ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31782 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2022-06-10 18:08
libgcrypt20	CVE-2021-40528	中危	1.8.5-5ubuntu1	1.8.5-5ubuntu1.1	libgcrypt: ElGamal implementation allows plaintext recovery 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40528 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-09-06 19:15 修改: 2023-11-07 03:38
libgnutls30	CVE-2022-2509	中危	3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	gnutls: Double free during gnutls_pkcs7_verify 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-01 14:15 修改: 2023-11-07 03:46
libgnutls30	CVE-2023-0361	中危	3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.8	gnutls: timing side-channel in the TLS RSA key exchange code 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-02-15 18:15 修改: 2023-11-07 04:00
libgnutls30	CVE-2023-5981	中危	3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.9	gnutls: timing side-channel in the RSA-PSK authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-11-28 12:15 修改: 2024-09-16 13:15
libgnutls30	CVE-2024-0553	中危	3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.10	gnutls: incomplete fix for CVE-2023-5981 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-01-16 12:15 修改: 2024-09-16 13:15
libgnutls30	CVE-2024-28834	中危	3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.11	gnutls: vulnerable to Minerva side-channel information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-21 14:15 修改: 2024-11-21 21:15
libgssapi-krb5-2	CVE-2021-36222	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.3	krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-07-22 18:15 修改: 2021-11-28 23:19
libgssapi-krb5-2	CVE-2021-37750	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.3	krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-23 05:15 修改: 2023-11-07 03:37
libgssapi-krb5-2	CVE-2022-42898	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.2	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libgssapi-krb5-2	CVE-2023-36054	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libgssapi-krb5-2	CVE-2024-26462	中危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/kdc/ndr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libgssapi-krb5-2	CVE-2024-37370	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libgssapi-krb5-2	CVE-2024-37371	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libgssapi3-heimdal	CVE-2021-44758	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-26 05:15 修改: 2023-10-08 09:15
libgssapi3-heimdal	CVE-2022-3116	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	CVE-2022-3116 affecting package heimdal for versions less than 7.7.1-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-27 22:15 修改: 2023-05-05 20:15
libgssapi3-heimdal	CVE-2022-3437	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-01-12 15:15 修改: 2024-10-28 19:35
libgssapi3-heimdal	CVE-2022-41916	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2	Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-11-15 23:15 修改: 2023-10-08 09:15
libgssapi3-heimdal	CVE-2022-42898	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libgssapi3-heimdal	CVE-2022-44640	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 05:15 修改: 2023-10-08 09:15
libgssapi3-heimdal	CVE-2022-45142	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4	samba: fix introduced a logic inversion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-06 23:15 修改: 2023-10-08 09:15
libhcrypto4-heimdal	CVE-2021-44758	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-26 05:15 修改: 2023-10-08 09:15
libhcrypto4-heimdal	CVE-2022-3116	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	CVE-2022-3116 affecting package heimdal for versions less than 7.7.1-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-27 22:15 修改: 2023-05-05 20:15
libhcrypto4-heimdal	CVE-2022-3437	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-01-12 15:15 修改: 2024-10-28 19:35
libhcrypto4-heimdal	CVE-2022-41916	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2	Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-11-15 23:15 修改: 2023-10-08 09:15
libhcrypto4-heimdal	CVE-2022-42898	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libhcrypto4-heimdal	CVE-2022-44640	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 05:15 修改: 2023-10-08 09:15
libhcrypto4-heimdal	CVE-2022-45142	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4	samba: fix introduced a logic inversion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-06 23:15 修改: 2023-10-08 09:15
libheimbase1-heimdal	CVE-2021-44758	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-26 05:15 修改: 2023-10-08 09:15
libheimbase1-heimdal	CVE-2022-3116	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	CVE-2022-3116 affecting package heimdal for versions less than 7.7.1-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-27 22:15 修改: 2023-05-05 20:15
libheimbase1-heimdal	CVE-2022-3437	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-01-12 15:15 修改: 2024-10-28 19:35
libheimbase1-heimdal	CVE-2022-41916	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2	Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-11-15 23:15 修改: 2023-10-08 09:15
libheimbase1-heimdal	CVE-2022-42898	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libheimbase1-heimdal	CVE-2022-44640	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 05:15 修改: 2023-10-08 09:15
libheimbase1-heimdal	CVE-2022-45142	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4	samba: fix introduced a logic inversion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-06 23:15 修改: 2023-10-08 09:15
libheimntlm0-heimdal	CVE-2021-44758	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-26 05:15 修改: 2023-10-08 09:15
libheimntlm0-heimdal	CVE-2022-3116	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	CVE-2022-3116 affecting package heimdal for versions less than 7.7.1-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-27 22:15 修改: 2023-05-05 20:15
libheimntlm0-heimdal	CVE-2022-3437	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-01-12 15:15 修改: 2024-10-28 19:35
libheimntlm0-heimdal	CVE-2022-41916	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2	Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-11-15 23:15 修改: 2023-10-08 09:15
libheimntlm0-heimdal	CVE-2022-42898	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libheimntlm0-heimdal	CVE-2022-44640	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 05:15 修改: 2023-10-08 09:15
libheimntlm0-heimdal	CVE-2022-45142	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4	samba: fix introduced a logic inversion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-06 23:15 修改: 2023-10-08 09:15
libhx509-5-heimdal	CVE-2021-44758	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-26 05:15 修改: 2023-10-08 09:15
libhx509-5-heimdal	CVE-2022-3116	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	CVE-2022-3116 affecting package heimdal for versions less than 7.7.1-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-27 22:15 修改: 2023-05-05 20:15
libhx509-5-heimdal	CVE-2022-3437	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-01-12 15:15 修改: 2024-10-28 19:35
libhx509-5-heimdal	CVE-2022-41916	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2	Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-11-15 23:15 修改: 2023-10-08 09:15
libhx509-5-heimdal	CVE-2022-42898	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libhx509-5-heimdal	CVE-2022-44640	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 05:15 修改: 2023-10-08 09:15
libhx509-5-heimdal	CVE-2022-45142	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4	samba: fix introduced a logic inversion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-06 23:15 修改: 2023-10-08 09:15
libk5crypto3	CVE-2021-36222	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.3	krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-07-22 18:15 修改: 2021-11-28 23:19
libk5crypto3	CVE-2021-37750	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.3	krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-23 05:15 修改: 2023-11-07 03:37
libk5crypto3	CVE-2022-42898	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.2	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libk5crypto3	CVE-2023-36054	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libk5crypto3	CVE-2024-26462	中危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/kdc/ndr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libk5crypto3	CVE-2024-37370	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libk5crypto3	CVE-2024-37371	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5-26-heimdal	CVE-2021-44758	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-26 05:15 修改: 2023-10-08 09:15
libkrb5-26-heimdal	CVE-2022-3116	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	CVE-2022-3116 affecting package heimdal for versions less than 7.7.1-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-27 22:15 修改: 2023-05-05 20:15
libkrb5-26-heimdal	CVE-2022-3437	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-01-12 15:15 修改: 2024-10-28 19:35
libkrb5-26-heimdal	CVE-2022-41916	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2	Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-11-15 23:15 修改: 2023-10-08 09:15
libkrb5-26-heimdal	CVE-2022-42898	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libkrb5-26-heimdal	CVE-2022-44640	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 05:15 修改: 2023-10-08 09:15
libkrb5-26-heimdal	CVE-2022-45142	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4	samba: fix introduced a logic inversion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-06 23:15 修改: 2023-10-08 09:15
libkrb5-3	CVE-2021-36222	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.3	krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-07-22 18:15 修改: 2021-11-28 23:19
libkrb5-3	CVE-2021-37750	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.3	krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-23 05:15 修改: 2023-11-07 03:37
libkrb5-3	CVE-2022-42898	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.2	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libkrb5-3	CVE-2023-36054	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libkrb5-3	CVE-2024-26462	中危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/kdc/ndr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5-3	CVE-2024-37370	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libkrb5-3	CVE-2024-37371	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5support0	CVE-2021-36222	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.3	krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-07-22 18:15 修改: 2021-11-28 23:19
libkrb5support0	CVE-2021-37750	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.3	krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-23 05:15 修改: 2023-11-07 03:37
libkrb5support0	CVE-2022-42898	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.2	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libkrb5support0	CVE-2023-36054	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libkrb5support0	CVE-2024-26462	中危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/kdc/ndr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5support0	CVE-2024-37370	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libkrb5support0	CVE-2024-37371	中危	1.17-6ubuntu4.1	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libldap-2.4-2	CVE-2022-29155	中危	2.4.49+dfsg-2ubuntu1.8	2.4.49+dfsg-2ubuntu1.9	openldap: OpenLDAP SQL injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-05-04 20:15 修改: 2022-10-06 15:56
libldap-common	CVE-2022-29155	中危	2.4.49+dfsg-2ubuntu1.8	2.4.49+dfsg-2ubuntu1.9	openldap: OpenLDAP SQL injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-05-04 20:15 修改: 2022-10-06 15:56
liblzma5	CVE-2022-1271	中危	5.2.4-1ubuntu1	5.2.4-1ubuntu1.1	gzip: arbitrary-file-write vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-31 16:15 修改: 2024-08-26 10:47
libmount1	CVE-2021-3995	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-01-07 09:15
libmount1	CVE-2021-3996	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-10-15 16:35
libmount1	CVE-2024-28085	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.5	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libncurses6	CVE-2023-29491	中危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libncursesw6	CVE-2023-29491	中危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
bsdutils	CVE-2024-28085	中危	1:2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.5	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libnghttp2-14	CVE-2020-11080	中危	1.40.0-1build1	1.40.0-1ubuntu0.1	nghttp2: overly large SETTINGS frames can lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11080 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2020-06-03 23:15 修改: 2023-11-07 03:14
libnghttp2-14	CVE-2024-28182	中危	1.40.0-1build1	1.40.0-1ubuntu0.3	nghttp2: CONTINUATION frames DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-04-04 15:15 修改: 2024-05-01 18:15
libpam-modules	CVE-2024-10041	中危	1.3.1-5ubuntu4.2		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15
libpam-modules	CVE-2024-10963	中危	1.3.1-5ubuntu4.2		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-11-07 16:15 修改: 2024-11-11 18:15
libpam-modules	CVE-2024-22365	中危	1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpam-modules-bin	CVE-2024-10041	中危	1.3.1-5ubuntu4.2		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15
libpam-modules-bin	CVE-2024-10963	中危	1.3.1-5ubuntu4.2		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-11-07 16:15 修改: 2024-11-11 18:15
libpam-modules-bin	CVE-2024-22365	中危	1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpam-runtime	CVE-2024-10041	中危	1.3.1-5ubuntu4.2		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15
libpam-runtime	CVE-2024-10963	中危	1.3.1-5ubuntu4.2		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-11-07 16:15 修改: 2024-11-11 18:15
libpam-runtime	CVE-2024-22365	中危	1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpam0g	CVE-2024-10041	中危	1.3.1-5ubuntu4.2		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15
libpam0g	CVE-2024-10963	中危	1.3.1-5ubuntu4.2		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-11-07 16:15 修改: 2024-11-11 18:15
libpam0g	CVE-2024-22365	中危	1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpython3.8-minimal	CVE-2021-29921	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.1	python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
libpython3.8-minimal	CVE-2021-3737	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.2	python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
libpython3.8-minimal	CVE-2022-0391	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.4	python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
libpython3.8-minimal	CVE-2022-37454	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.6	XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
libpython3.8-minimal	CVE-2022-45061	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.6	python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
libpython3.8-minimal	CVE-2023-24329	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.8	python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
libpython3.8-minimal	CVE-2023-27043	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
libpython3.8-minimal	CVE-2023-40217	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.9	python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
libpython3.8-minimal	CVE-2023-6597	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.10	python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.8-minimal	CVE-2024-0397	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
libpython3.8-minimal	CVE-2024-0450	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.10	python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.8-minimal	CVE-2024-11168	中危	3.8.10-0ubuntu1~20.04		python: Improper validation of IPv6 and IPvFuture addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15
libpython3.8-minimal	CVE-2024-6232	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
libpython3.8-minimal	CVE-2024-6923	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
libpython3.8-minimal	CVE-2024-8088	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
libpython3.8-minimal	CVE-2024-9287	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.13	python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
libpython3.8-stdlib	CVE-2021-29921	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.1	python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
libpython3.8-stdlib	CVE-2021-3737	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.2	python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
libpython3.8-stdlib	CVE-2022-0391	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.4	python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
libpython3.8-stdlib	CVE-2022-37454	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.6	XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
libpython3.8-stdlib	CVE-2022-45061	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.6	python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
libpython3.8-stdlib	CVE-2023-24329	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.8	python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
libpython3.8-stdlib	CVE-2023-27043	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
libpython3.8-stdlib	CVE-2023-40217	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.9	python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
libpython3.8-stdlib	CVE-2023-6597	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.10	python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.8-stdlib	CVE-2024-0397	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
libpython3.8-stdlib	CVE-2024-0450	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.10	python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.8-stdlib	CVE-2024-11168	中危	3.8.10-0ubuntu1~20.04		python: Improper validation of IPv6 and IPvFuture addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15
libpython3.8-stdlib	CVE-2024-6232	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
libpython3.8-stdlib	CVE-2024-6923	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
libpython3.8-stdlib	CVE-2024-8088	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
libpython3.8-stdlib	CVE-2024-9287	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.13	python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
libroken18-heimdal	CVE-2021-44758	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-26 05:15 修改: 2023-10-08 09:15
libroken18-heimdal	CVE-2022-3116	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	CVE-2022-3116 affecting package heimdal for versions less than 7.7.1-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-27 22:15 修改: 2023-05-05 20:15
libroken18-heimdal	CVE-2022-3437	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-01-12 15:15 修改: 2024-10-28 19:35
libroken18-heimdal	CVE-2022-41916	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2	Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-11-15 23:15 修改: 2023-10-08 09:15
libroken18-heimdal	CVE-2022-42898	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libroken18-heimdal	CVE-2022-44640	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 05:15 修改: 2023-10-08 09:15
libroken18-heimdal	CVE-2022-45142	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4	samba: fix introduced a logic inversion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-06 23:15 修改: 2023-10-08 09:15
ca-certificates	CVE-2022-23491	中危	20210119~20.04.1	20211016ubuntu0.20.04.1	python-certifi: untrusted root certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23491 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-07 22:15 修改: 2023-03-24 18:12
curl	CVE-2021-22924	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.6	curl: Bad connection reuse due to flawed path name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
libsmartcols1	CVE-2021-3995	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-01-07 09:15
libsmartcols1	CVE-2021-3996	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-10-15 16:35
libsmartcols1	CVE-2024-28085	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.5	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libsqlite3-0	CVE-2020-35525	中危	3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	sqlite: Null pointer derreference in src/select.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35525 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-09-01 18:15 修改: 2023-07-06 19:15
libsqlite3-0	CVE-2020-35527	中危	3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4	sqlite: Out of bounds access during table rename 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35527 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-09-01 18:15 修改: 2022-12-08 22:29
libsqlite3-0	CVE-2022-35737	中危	3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.5	sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-08-03 06:15 修改: 2024-03-27 16:05
libsqlite3-0	CVE-2023-7104	中危	3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.6	sqlite: heap-buffer-overflow at sessionfuzz 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-12-29 10:15 修改: 2024-05-17 02:34
libss2	CVE-2022-1304	中危	1.45.5-2ubuntu1	1.45.5-2ubuntu1.1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-14 21:15 修改: 2024-11-22 12:15
libssh-4	CVE-2021-3634	中危	0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.2	libssh: possible heap-based buffer overflow when rekeying 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3634 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-31 17:15 修改: 2023-12-22 10:15
libssh-4	CVE-2023-1667	中危	0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.3	libssh: NULL pointer dereference during rekeying with algorithm guessing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1667 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-26 18:15 修改: 2023-12-22 10:15
libssh-4	CVE-2023-2283	中危	0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.3	libssh: authorization bypass in pki_verify_data_signature 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2283 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-26 18:15 修改: 2024-02-01 17:15
libssh-4	CVE-2023-48795	中危	0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-12-18 16:15 修改: 2024-12-02 14:54
libssh-4	CVE-2023-6004	中危	0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5	libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6004 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-01-03 17:15 修改: 2024-09-16 18:15
libssh-4	CVE-2023-6918	中危	0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5	libssh: Missing checks for return values for digests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6918 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-12-19 00:15 修改: 2024-09-16 18:15
curl	CVE-2021-22925	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.6	curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
curl	CVE-2021-22946	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.7	curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:12
curl	CVE-2021-22947	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.7	curl: Server responses received before STARTTLS processed after TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:03
libssl1.1	CVE-2021-3712	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.8	openssl: Read buffer overruns processing ASN.1 strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-24 15:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2022-1292	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.13	openssl: c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-05-03 16:15 修改: 2023-11-07 03:41
libssl1.1	CVE-2022-2068	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.15	openssl: the c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-21 15:15 修改: 2023-11-07 03:46
libssl1.1	CVE-2022-2097	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.16	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-07-05 11:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2022-4304	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.17	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2022-4450	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.17	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0215	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.17	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-08 20:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2023-2650	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.19	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
curl	CVE-2022-22576	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.10	curl: OAUTH2 bearer bypass in connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-05-26 17:15 修改: 2024-03-27 15:02
libsystemd0	CVE-2021-3997	中危	245.4-4ubuntu3.7	245.4-4ubuntu3.15	systemd: Uncontrolled recursion in systemd-tmpfiles when removing files 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15
libsystemd0	CVE-2022-3821	中危	245.4-4ubuntu3.7	245.4-4ubuntu3.20	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libsystemd0	CVE-2022-4415	中危	245.4-4ubuntu3.7	245.4-4ubuntu3.20	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libtinfo6	CVE-2023-29491	中危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
curl	CVE-2022-27774	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.10	curl: credential leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libudev1	CVE-2021-3997	中危	245.4-4ubuntu3.7	245.4-4ubuntu3.15	systemd: Uncontrolled recursion in systemd-tmpfiles when removing files 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15
libudev1	CVE-2022-3821	中危	245.4-4ubuntu3.7	245.4-4ubuntu3.20	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libudev1	CVE-2022-4415	中危	245.4-4ubuntu3.7	245.4-4ubuntu3.20	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libuuid1	CVE-2021-3995	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-01-07 09:15
libuuid1	CVE-2021-3996	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-10-15 16:35
libuuid1	CVE-2024-28085	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.5	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libwind0-heimdal	CVE-2021-44758	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-26 05:15 修改: 2023-10-08 09:15
libwind0-heimdal	CVE-2022-3116	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	CVE-2022-3116 affecting package heimdal for versions less than 7.7.1-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-27 22:15 修改: 2023-05-05 20:15
libwind0-heimdal	CVE-2022-3437	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-01-12 15:15 修改: 2024-10-28 19:35
libwind0-heimdal	CVE-2022-41916	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.2	Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-11-15 23:15 修改: 2023-10-08 09:15
libwind0-heimdal	CVE-2022-42898	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libwind0-heimdal	CVE-2022-44640	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3	Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-12-25 05:15 修改: 2023-10-08 09:15
libwind0-heimdal	CVE-2022-45142	中危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.4	samba: fix introduced a logic inversion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-06 23:15 修改: 2023-10-08 09:15
locales	CVE-2021-3999	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-08-24 16:15 修改: 2023-02-12 23:43
locales	CVE-2024-2961	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.15	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
locales	CVE-2024-33599	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
locales	CVE-2024-33600	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
locales	CVE-2024-33601	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
locales	CVE-2024-33602	中危	2.31-0ubuntu9.2	2.31-0ubuntu9.16	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
logsave	CVE-2022-1304	中危	1.45.5-2ubuntu1	1.45.5-2ubuntu1.1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-14 21:15 修改: 2024-11-22 12:15
mount	CVE-2021-3995	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-01-07 09:15
mount	CVE-2021-3996	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-10-15 16:35
mount	CVE-2024-28085	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.5	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
ncurses-base	CVE-2023-29491	中危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
ncurses-bin	CVE-2023-29491	中危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
curl	CVE-2022-27782	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.11	curl: TLS and SSH connection too eager reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
curl	CVE-2022-32206	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.12	curl: HTTP compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
curl	CVE-2022-32208	中危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.12	curl: FTP-KRB bad message verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
openssl	CVE-2021-3712	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.8	openssl: Read buffer overruns processing ASN.1 strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-24 15:15 修改: 2024-06-21 19:15
openssl	CVE-2022-1292	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.13	openssl: c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-05-03 16:15 修改: 2023-11-07 03:41
openssl	CVE-2022-2068	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.15	openssl: the c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-21 15:15 修改: 2023-11-07 03:46
openssl	CVE-2022-2097	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.16	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-07-05 11:15 修改: 2024-06-21 19:15
openssl	CVE-2022-4304	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.17	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2022-4450	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.17	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0215	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.17	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-02-08 20:15 修改: 2024-06-21 19:15
openssl	CVE-2023-2650	中危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.19	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
perl-base	CVE-2020-16156	中危	5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.3	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
perl-base	CVE-2023-31484	中危	5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
perl-base	CVE-2023-47038	中危	5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-12-18 14:15 修改: 2024-09-16 16:15
python3-jinja2	CVE-2024-22195	中危	2.10.1-2	2.10.1-2ubuntu0.2	jinja2: HTML attribute injection when passing user input as keys to xmlattr filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22195 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-01-11 03:15 修改: 2024-01-27 03:15
python3-jinja2	CVE-2024-34064	中危	2.10.1-2	2.10.1-2ubuntu0.3	jinja2: accepts keys containing non-attribute characters 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34064 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-05-06 15:15 修改: 2024-06-10 18:15
python3.8	CVE-2021-29921	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.1	python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
python3.8	CVE-2021-3737	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.2	python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
python3.8	CVE-2022-0391	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.4	python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
python3.8	CVE-2022-37454	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.6	XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
python3.8	CVE-2022-45061	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.6	python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
python3.8	CVE-2023-24329	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.8	python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
python3.8	CVE-2023-27043	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
python3.8	CVE-2023-40217	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.9	python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
python3.8	CVE-2023-6597	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.10	python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.8	CVE-2024-0397	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
python3.8	CVE-2024-0450	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.10	python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.8	CVE-2024-11168	中危	3.8.10-0ubuntu1~20.04		python: Improper validation of IPv6 and IPvFuture addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15
python3.8	CVE-2024-6232	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
python3.8	CVE-2024-6923	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
python3.8	CVE-2024-8088	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
python3.8	CVE-2024-9287	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.13	python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
python3.8-minimal	CVE-2021-29921	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.1	python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
python3.8-minimal	CVE-2021-3737	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.2	python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
python3.8-minimal	CVE-2022-0391	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.4	python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
python3.8-minimal	CVE-2022-37454	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.6	XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
python3.8-minimal	CVE-2022-45061	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.6	python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
python3.8-minimal	CVE-2023-24329	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.8	python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
python3.8-minimal	CVE-2023-27043	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
python3.8-minimal	CVE-2023-40217	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.9	python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
python3.8-minimal	CVE-2023-6597	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.10	python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.8-minimal	CVE-2024-0397	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
python3.8-minimal	CVE-2024-0450	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.10	python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.8-minimal	CVE-2024-11168	中危	3.8.10-0ubuntu1~20.04		python: Improper validation of IPv6 and IPvFuture addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15
python3.8-minimal	CVE-2024-6232	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
python3.8-minimal	CVE-2024-6923	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
python3.8-minimal	CVE-2024-8088	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
python3.8-minimal	CVE-2024-9287	中危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.13	python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
tar	CVE-2022-48303	中危	1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.3	tar: heap buffer overflow at from_header() in list.c via specially crafted checksum 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-01-30 04:15 修改: 2023-05-30 17:16
tar	CVE-2023-39804	中危	1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.4	tar: Incorrectly handled extension attributes in PAX archives can lead to a crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 04:15 修改: 2024-11-12 19:35
util-linux	CVE-2021-3995	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-01-07 09:15
util-linux	CVE-2021-3996	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-23 20:15 修改: 2024-10-15 16:35
util-linux	CVE-2024-28085	中危	2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.5	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
zlib1g	CVE-2018-25032	中危	1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.3	zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-03-25 09:15 修改: 2023-11-07 02:56
zlib1g	CVE-2022-37434	中危	1:1.2.11.dfsg-2ubuntu1.2	1:1.2.11.dfsg-2ubuntu1.5	zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-05 07:15 修改: 2023-07-19 00:56
coreutils	CVE-2016-2781	低危	8.30-3ubuntu2		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2017-02-07 15:59 修改: 2023-11-07 02:32
bash	CVE-2019-18276	低危	5.0-6ubuntu1.1	5.0-6ubuntu1.2	bash: when effective UID is not equal to its real UID the saved UID is not dropped 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18276 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2019-11-28 01:15 修改: 2023-11-07 03:06
curl	CVE-2021-22898	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.6	curl: TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-06-11 16:15 修改: 2024-03-27 15:47
libgnutls30	CVE-2021-20231	低危	3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.6	gnutls: Use after free in client key_share extension 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20231 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-03-12 19:15 修改: 2023-11-07 03:29
libkrb5-3	CVE-2024-26458	低危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-12-06 21:15
libkrb5-3	CVE-2024-26461	低危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libgnutls30	CVE-2021-20232	低危	3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.6	gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20232 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-03-12 19:15 修改: 2023-11-07 03:29
libsqlite3-0	CVE-2021-36690	低危	3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.3	A segmentation fault can occur in the sqlite3.exe command-line compone ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36690 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-08-24 14:15 修改: 2024-08-04 01:15
libgnutls30	CVE-2021-4209	低危	3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.7	GnuTLS: Null pointer dereference in MD_UPDATE 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-08-24 16:15 修改: 2022-10-27 16:57
curl	CVE-2022-27775	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.10	curl: bad local IPv6 connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27775 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
curl	CVE-2022-27776	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.10	curl: auth/cookie leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
curl	CVE-2022-27781	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.11	curl: CERTINFO never-ending busy-loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
gpgv	CVE-2022-3219	低危	2.2.19-3ubuntu2.1		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
curl	CVE-2022-35252	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.13	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-09-23 14:15 修改: 2024-03-27 15:00
libkrb5support0	CVE-2024-26458	低危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-12-06 21:15
libkrb5support0	CVE-2024-26461	低危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libc-bin	CVE-2016-10228	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: iconv program can hang when invoked with the -c option 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2017-03-02 01:59 修改: 2023-11-07 02:29
libldap-2.4-2	CVE-2023-2953	低危	2.4.49+dfsg-2ubuntu1.8	2.4.49+dfsg-2ubuntu1.10	openldap: null pointer dereference in ber_memalloc_x function 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-30 22:15 修改: 2023-08-02 16:46
libc-bin	CVE-2016-20013	低危	2.31-0ubuntu9.2		漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20013 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-02-19 05:15 修改: 2022-03-03 16:43
libldap-common	CVE-2023-2953	低危	2.4.49+dfsg-2ubuntu1.8	2.4.49+dfsg-2ubuntu1.10	openldap: null pointer dereference in ber_memalloc_x function 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-30 22:15 修改: 2023-08-02 16:46
libgssapi-krb5-2	CVE-2024-26458	低危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-12-06 21:15
libgssapi-krb5-2	CVE-2024-26461	低危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libc-bin	CVE-2019-25013	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-01-04 18:15 修改: 2023-11-09 14:44
libc-bin	CVE-2020-27618	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-02-26 23:15 修改: 2022-10-28 20:06
libc-bin	CVE-2020-29562	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: assertion failure in iconv when converting invalid UCS4 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29562 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2020-12-04 07:15 修改: 2023-11-07 03:21
libncurses6	CVE-2021-39537	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
libssl1.1	CVE-2023-0464	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.18	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-22 17:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2023-0465	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.18	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0466	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.18	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-3446	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.20	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2023-3817	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.20	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2023-5678	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.21	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-0727	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.21	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-2511	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.23	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-4741	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.23	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-11-13 11:15 修改: 2024-11-13 17:01
libssl1.1	CVE-2024-5535	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.23	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libncurses6	CVE-2022-29458	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libncurses6	CVE-2023-45918	低危	6.2-0ubuntu2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
libncurses6	CVE-2023-50495	低危	6.2-0ubuntu2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libc-bin	CVE-2020-6096	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: signed comparison vulnerability in the ARMv7 memcpy function 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2020-04-01 22:15 修改: 2023-11-07 03:24
libsystemd0	CVE-2020-13529	低危	245.4-4ubuntu3.7	245.4-4ubuntu3.10	systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libsystemd0	CVE-2023-26604	低危	245.4-4ubuntu3.7		systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
libsystemd0	CVE-2023-7008	低危	245.4-4ubuntu3.7		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-12-23 13:15 修改: 2024-11-22 12:15
libncursesw6	CVE-2021-39537	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
libtinfo6	CVE-2021-39537	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
libtinfo6	CVE-2022-29458	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libtinfo6	CVE-2023-45918	低危	6.2-0ubuntu2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
libtinfo6	CVE-2023-50495	低危	6.2-0ubuntu2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libncursesw6	CVE-2022-29458	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libncursesw6	CVE-2023-45918	低危	6.2-0ubuntu2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
libncursesw6	CVE-2023-50495	低危	6.2-0ubuntu2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libc-bin	CVE-2021-27645	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-02-24 15:15 修改: 2023-11-07 03:31
libudev1	CVE-2020-13529	低危	245.4-4ubuntu3.7	245.4-4ubuntu3.10	systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libudev1	CVE-2023-26604	低危	245.4-4ubuntu3.7		systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
libudev1	CVE-2023-7008	低危	245.4-4ubuntu3.7		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-12-23 13:15 修改: 2024-11-22 12:15
libcurl4	CVE-2021-22898	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.6	curl: TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-06-11 16:15 修改: 2024-03-27 15:47
libcurl4	CVE-2022-27775	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.10	curl: bad local IPv6 connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27775 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libgssapi3-heimdal	CVE-2021-3671	低危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	samba: Null pointer dereference on missing sname in TGS-REQ 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-10-12 18:15 修改: 2023-11-07 03:38
libcurl4	CVE-2022-27776	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.10	curl: auth/cookie leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libcurl4	CVE-2022-27781	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.11	curl: CERTINFO never-ending busy-loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
libpam-modules	CVE-2022-28321	低危	1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.4	pam: authentication bypass for SSH logins 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28321 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-09-19 22:15 修改: 2023-08-08 14:21
libcurl4	CVE-2022-35252	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.13	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-09-23 14:15 修改: 2024-03-27 15:00
libcurl4	CVE-2023-27533	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libcurl4	CVE-2023-27534	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libpam-modules-bin	CVE-2022-28321	低危	1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.4	pam: authentication bypass for SSH logins 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28321 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-09-19 22:15 修改: 2023-08-08 14:21
libwind0-heimdal	CVE-2021-3671	低危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	samba: Null pointer dereference on missing sname in TGS-REQ 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-10-12 18:15 修改: 2023-11-07 03:38
libcurl4	CVE-2023-27536	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
libcurl4	CVE-2023-27538	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
libhcrypto4-heimdal	CVE-2021-3671	低危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	samba: Null pointer dereference on missing sname in TGS-REQ 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-10-12 18:15 修改: 2023-11-07 03:38
libpam-runtime	CVE-2022-28321	低危	1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.4	pam: authentication bypass for SSH logins 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28321 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-09-19 22:15 修改: 2023-08-08 14:21
libcurl4	CVE-2023-28321	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-26 21:15 修改: 2023-11-07 04:10
libcurl4	CVE-2023-28322	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-26 21:15 修改: 2023-12-22 16:15
locales	CVE-2016-10228	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: iconv program can hang when invoked with the -c option 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2017-03-02 01:59 修改: 2023-11-07 02:29
locales	CVE-2016-20013	低危	2.31-0ubuntu9.2		漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20013 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-02-19 05:15 修改: 2022-03-03 16:43
locales	CVE-2019-25013	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-01-04 18:15 修改: 2023-11-09 14:44
locales	CVE-2020-27618	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-02-26 23:15 修改: 2022-10-28 20:06
locales	CVE-2020-29562	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: assertion failure in iconv when converting invalid UCS4 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29562 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2020-12-04 07:15 修改: 2023-11-07 03:21
locales	CVE-2020-6096	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: signed comparison vulnerability in the ARMv7 memcpy function 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2020-04-01 22:15 修改: 2023-11-07 03:24
locales	CVE-2021-27645	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-02-24 15:15 修改: 2023-11-07 03:31
locales	CVE-2021-3326	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-01-27 20:15 修改: 2023-11-07 03:37
locales	CVE-2021-35942	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Arbitrary read in wordexp() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-07-22 18:15 修改: 2023-11-07 03:36
locales	CVE-2022-23218	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Stack-based buffer overflow in svcunix_create via long pathnames 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:37
locales	CVE-2022-23219	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:32
locales	CVE-2023-4806	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.14	glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
locales	CVE-2023-4813	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.14	glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
login	CVE-2013-4235	低危	1:4.8.1-1ubuntu5.20.04		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
login	CVE-2023-29383	低危	1:4.8.1-1ubuntu5.20.04		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
login	CVE-2023-4641	低危	1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.5	shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
libcurl4	CVE-2023-38546	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.20	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-10-18 04:15 修改: 2024-07-09 14:15
libpam0g	CVE-2022-28321	低危	1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.4	pam: authentication bypass for SSH logins 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28321 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-09-19 22:15 修改: 2023-08-08 14:21
libpcre2-8-0	CVE-2022-1586	低危	10.34-7	10.34-7ubuntu0.1	pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1586 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-05-16 21:15 修改: 2023-11-07 03:42
libpcre2-8-0	CVE-2022-1587	低危	10.34-7	10.34-7ubuntu0.1	pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1587 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-05-16 21:15 修改: 2023-11-07 03:42
libpcre2-8-0	CVE-2022-41409	低危	10.34-7		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-07-18 14:15 修改: 2023-07-27 03:46
ncurses-base	CVE-2021-39537	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
ncurses-base	CVE-2022-29458	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
ncurses-base	CVE-2023-45918	低危	6.2-0ubuntu2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
ncurses-base	CVE-2023-50495	低危	6.2-0ubuntu2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libpcre3	CVE-2017-11164	低危	2:8.39-12build1		pcre: OP_KETRMAX feature in the match function in pcre_exec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2017-07-11 03:29 修改: 2023-11-07 02:38
ncurses-bin	CVE-2021-39537	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
ncurses-bin	CVE-2022-29458	低危	6.2-0ubuntu2	6.2-0ubuntu2.1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
ncurses-bin	CVE-2023-45918	低危	6.2-0ubuntu2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
ncurses-bin	CVE-2023-50495	低危	6.2-0ubuntu2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libpcre3	CVE-2019-20838	低危	2:8.39-12build1	2:8.39-12ubuntu0.1	pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20838 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2020-06-15 17:15 修改: 2024-03-27 16:05
libpcre3	CVE-2020-14155	低危	2:8.39-12build1	2:8.39-12ubuntu0.1	pcre: Integer overflow when parsing callout numeric arguments 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2020-06-15 17:15 修改: 2024-03-27 16:04
libprocps8	CVE-2023-4016	低危	2:3.3.16-1ubuntu2.2	2:3.3.16-1ubuntu2.4	procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
libcurl4	CVE-2024-11053	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25	curl: curl netrc password leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-12-11 08:15 修改: 2024-12-15 17:15
libc-bin	CVE-2021-3326	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-01-27 20:15 修改: 2023-11-07 03:37
libc-bin	CVE-2021-35942	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Arbitrary read in wordexp() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-07-22 18:15 修改: 2023-11-07 03:36
libc-bin	CVE-2022-23218	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Stack-based buffer overflow in svcunix_create via long pathnames 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:37
libheimbase1-heimdal	CVE-2021-3671	低危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	samba: Null pointer dereference on missing sname in TGS-REQ 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-10-12 18:15 修改: 2023-11-07 03:38
libc-bin	CVE-2022-23219	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:32
libc-bin	CVE-2023-4806	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.14	glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
libc-bin	CVE-2023-4813	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.14	glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
openssl	CVE-2023-0464	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.18	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-22 17:15 修改: 2024-06-21 19:15
openssl	CVE-2023-0465	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.18	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0466	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.18	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
openssl	CVE-2023-3446	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.20	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
openssl	CVE-2023-3817	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.20	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
openssl	CVE-2023-5678	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.21	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
openssl	CVE-2024-0727	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.21	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
openssl	CVE-2024-2511	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.23	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
openssl	CVE-2024-4741	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.23	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-11-13 11:15 修改: 2024-11-13 17:01
openssl	CVE-2024-5535	低危	1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.23	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
passwd	CVE-2013-4235	低危	1:4.8.1-1ubuntu5.20.04		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
passwd	CVE-2023-29383	低危	1:4.8.1-1ubuntu5.20.04		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
passwd	CVE-2023-4641	低危	1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.5	shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
curl	CVE-2023-27533	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
curl	CVE-2023-27534	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
curl	CVE-2023-27536	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
procps	CVE-2023-4016	低危	2:3.3.16-1ubuntu2.2	2:3.3.16-1ubuntu2.4	procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
curl	CVE-2023-27538	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
libheimntlm0-heimdal	CVE-2021-3671	低危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	samba: Null pointer dereference on missing sname in TGS-REQ 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-10-12 18:15 修改: 2023-11-07 03:38
python3-jinja2	CVE-2020-28493	低危	2.10.1-2	2.10.1-2ubuntu0.2	python-jinja2: ReDoS vulnerability in the urlize filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28493 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2021-02-01 20:15 修改: 2023-11-07 03:21
curl	CVE-2023-28321	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-26 21:15 修改: 2023-11-07 04:10
curl	CVE-2023-28322	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-05-26 21:15 修改: 2023-12-22 16:15
libc6	CVE-2016-10228	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: iconv program can hang when invoked with the -c option 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2017-03-02 01:59 修改: 2023-11-07 02:29
libpython3.8-minimal	CVE-2015-20107	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.5	python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
libpython3.8-minimal	CVE-2024-4032	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
libpython3.8-minimal	CVE-2024-7592	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
libc6	CVE-2016-20013	低危	2.31-0ubuntu9.2		漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20013 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-02-19 05:15 修改: 2022-03-03 16:43
libc6	CVE-2019-25013	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-01-04 18:15 修改: 2023-11-09 14:44
libc6	CVE-2020-27618	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-02-26 23:15 修改: 2022-10-28 20:06
libc6	CVE-2020-29562	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: assertion failure in iconv when converting invalid UCS4 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29562 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2020-12-04 07:15 修改: 2023-11-07 03:21
libhx509-5-heimdal	CVE-2021-3671	低危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	samba: Null pointer dereference on missing sname in TGS-REQ 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-10-12 18:15 修改: 2023-11-07 03:38
libc6	CVE-2020-6096	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: signed comparison vulnerability in the ARMv7 memcpy function 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2020-04-01 22:15 修改: 2023-11-07 03:24
libc6	CVE-2021-27645	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-02-24 15:15 修改: 2023-11-07 03:31
libexpat1	CVE-2021-45960	低危	2.2.9-1build1	2.2.9-1ubuntu0.2	expat: Large number of prefixed XML attributes on a single tag can crash libexpat 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-01-01 19:15 修改: 2022-10-06 19:08
libc6	CVE-2021-3326	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-01-27 20:15 修改: 2023-11-07 03:37
libc6	CVE-2021-35942	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Arbitrary read in wordexp() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-07-22 18:15 修改: 2023-11-07 03:36
python3.8	CVE-2015-20107	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.5	python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
python3.8	CVE-2024-4032	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
python3.8	CVE-2024-7592	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
libc6	CVE-2022-23218	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Stack-based buffer overflow in svcunix_create via long pathnames 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:37
libc6	CVE-2022-23219	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.7	glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:32
libk5crypto3	CVE-2024-26458	低危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-12-06 21:15
libk5crypto3	CVE-2024-26461	低危	1.17-6ubuntu4.1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libc6	CVE-2023-4806	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.14	glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
libc6	CVE-2023-4813	低危	2.31-0ubuntu9.2	2.31-0ubuntu9.14	glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
libpython3.8-stdlib	CVE-2015-20107	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.5	python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
libpython3.8-stdlib	CVE-2024-4032	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
libpython3.8-stdlib	CVE-2024-7592	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
libfreetype6	CVE-2022-27405	低危	2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	FreeType: Segmentation violation via FNT_Size_Request 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27405 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-04-22 14:15 修改: 2024-02-29 01:34
libfreetype6	CVE-2022-27406	低危	2.10.1-2ubuntu0.1	2.10.1-2ubuntu0.2	Freetype: Segmentation violation via FT_Request_Size 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27406 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2022-04-22 14:15 修改: 2024-02-29 01:34
curl	CVE-2023-38546	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.20	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2023-10-18 04:15 修改: 2024-07-09 14:15
libgcrypt20	CVE-2021-33560	低危	1.8.5-5ubuntu1	1.8.5-5ubuntu1.1	libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-06-08 11:15 修改: 2023-11-07 03:35
libgcrypt20	CVE-2024-2236	低危	1.8.5-5ubuntu1		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2024-03-06 22:15 修改: 2024-11-12 18:15
libkrb5-26-heimdal	CVE-2021-3671	低危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	samba: Null pointer dereference on missing sname in TGS-REQ 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-10-12 18:15 修改: 2023-11-07 03:38
libgmp10	CVE-2021-43618	低危	2:6.2.0+dfsg-4	2:6.2.0+dfsg-4ubuntu0.1	gmp: Integer overflow and resultant buffer overflow via crafted input 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-11-15 04:15 修改: 2023-09-29 15:15
python3.8-minimal	CVE-2015-20107	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.5	python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
python3.8-minimal	CVE-2024-4032	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
python3.8-minimal	CVE-2024-7592	低危	3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.12	cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:f1eaa146cdec64291c3cb4c6ba9d00e81d867d0d7fc0c1f8748cec3d7d3fafad 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
libroken18-heimdal	CVE-2021-3671	低危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	samba: Null pointer dereference on missing sname in TGS-REQ 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-10-12 18:15 修改: 2023-11-07 03:38
libasn1-8-heimdal	CVE-2021-3671	低危	7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.1	samba: Null pointer dereference on missing sname in TGS-REQ 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2021-10-12 18:15 修改: 2023-11-07 03:38
tar	CVE-2021-20193	低危	1.30+dfsg-7ubuntu0.20.04.1	1.30+dfsg-7ubuntu0.20.04.2	tar: Memory leak in read_header() in list.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20193 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-03-26 17:15 修改: 2024-10-24 18:15
curl	CVE-2024-11053	低危	7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25	curl: curl netrc password leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053 镜像层: sha256:e09bb0b542180b2e4983ce02a9278e0cfa53dc1fe08469d7902df57bf59a5458 发布日期: 2024-12-11 08:15 修改: 2024-12-15 17:15
libsepol1	CVE-2021-36084	低危	3.0-1	3.0-1ubuntu0.1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36085	低危	3.0-1	3.0-1ubuntu0.1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36086	低危	3.0-1	3.0-1ubuntu0.1	libsepol: use-after-free in cil_reset_classpermission() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36087	低危	3.0-1	3.0-1ubuntu0.1	libsepol: heap-based buffer overflow in ebitmap_match_any() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087 镜像层: sha256:feef05f055c989eea0367f5d3a2cba79896dd6d8a8b72bea2c729548a4ca5aef 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36

Java (jar)

低危漏洞:13

中危漏洞:193

高危漏洞:438

严重漏洞:182

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.6.7.1	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.6.7.1	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.6.7.1	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.6.7.1	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.6.7.1	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.6.7.1	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.6.7.1	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.6.7.1	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.6.7.1	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.6.7.1	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.6.7.1	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.6.7.1	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.6.7.1	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.6.7.1	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.6.7.1	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.6.7.1	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.6.7.1	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.6.7.1	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.7.1	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.7.1	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2017-7525	严重	2.7.1	2.6.7.1, 2.7.9.1, 2.8.9	jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7525 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.7.1	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.7.1	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.7.1	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14720	严重	2.7.1	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: exfiltration/XXE in some JDK classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14721	严重	2.7.1	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19360	严重	2.7.1	2.9.8, 2.8.11.3, 2.7.9.5	jackson-databind: improper polymorphic deserialization in axis2-transport-jms class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19361	严重	2.7.1	2.7.9.5, 2.9.8, 2.8.11.3	jackson-databind: improper polymorphic deserialization in openjpa class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.7.1	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.7.1	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.7.1	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.7.1	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.7.1	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.7.1	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.7.1	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.7.1	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.7.1	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.7.1	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.7.1	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.7.1	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.7.1	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.7.6	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.7.6	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2017-7525	严重	2.7.6	2.6.7.1, 2.7.9.1, 2.8.9	jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7525 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.7.6	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.7.6	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.7.6	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14720	严重	2.7.6	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: exfiltration/XXE in some JDK classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14721	严重	2.7.6	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19360	严重	2.7.6	2.9.8, 2.8.11.3, 2.7.9.5	jackson-databind: improper polymorphic deserialization in axis2-transport-jms class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19361	严重	2.7.6	2.7.9.5, 2.9.8, 2.8.11.3	jackson-databind: improper polymorphic deserialization in openjpa class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.7.6	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.7.6	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.7.6	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.7.6	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.7.6	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.7.6	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.7.6	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.7.6	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.7.6	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.7.6	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.7.6	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.7.6	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.7.6	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.9.3	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.9.3	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.9.3	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.9.3	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.9.3	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14720	严重	2.9.3	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: exfiltration/XXE in some JDK classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14721	严重	2.9.3	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19360	严重	2.9.3	2.9.8, 2.8.11.3, 2.7.9.5	jackson-databind: improper polymorphic deserialization in axis2-transport-jms class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19361	严重	2.9.3	2.7.9.5, 2.9.8, 2.8.11.3	jackson-databind: improper polymorphic deserialization in openjpa class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.9.3	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.9.3	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.9.3	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.9.3	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.9.3	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.9.3	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.9.3	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.9.3	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.9.3	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.9.3	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.9.3	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9546	严重	2.9.3	2.9.10.4	jackson-databind: Serialization gadgets in shaded-hikari-config 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.9.3	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.9.3	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.9.6	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.9.6	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.9.6	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.9.6	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14720	严重	2.9.6	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: exfiltration/XXE in some JDK classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14720	严重	2.9.6	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: exfiltration/XXE in some JDK classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14721	严重	2.9.6	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14721	严重	2.9.6	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19360	严重	2.9.6	2.9.8, 2.8.11.3, 2.7.9.5	jackson-databind: improper polymorphic deserialization in axis2-transport-jms class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19360	严重	2.9.6	2.9.8, 2.8.11.3, 2.7.9.5	jackson-databind: improper polymorphic deserialization in axis2-transport-jms class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19361	严重	2.9.6	2.7.9.5, 2.9.8, 2.8.11.3	jackson-databind: improper polymorphic deserialization in openjpa class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19361	严重	2.9.6	2.7.9.5, 2.9.8, 2.8.11.3	jackson-databind: improper polymorphic deserialization in openjpa class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.9.6	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.9.6	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.9.6	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.9.6	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.9.6	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.9.6	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.9.6	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.9.6	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.9.6	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.9.6	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.9.6	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.9.6	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.9.6	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.9.6	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.9.6	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.9.6	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.9.6	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.9.6	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.9.6	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.9.6	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9546	严重	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in shaded-hikari-config 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9546	严重	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in shaded-hikari-config 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.9.6	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.9.6	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.9.6	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.9.6	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.h2database:h2	CVE-2021-42392	严重	1.4.196	2.0.206	h2: Remote Code Execution in Console 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42392 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-10 14:10 修改: 2023-02-24 22:15
com.h2database:h2	CVE-2022-23221	严重	1.4.196	2.1.210	h2: Loading of custom classes from remote servers through JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23221 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-19 17:15 修改: 2023-08-18 14:15
com.hazelcast:hazelcast	CVE-2022-36437	严重	3.8.6	3.12.13, 4.1.10, 4.2.6, 5.0.4, 5.1.3	hazelcast: Hazelcast connection caching 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36437 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-29 23:15 修改: 2023-01-09 18:33
com.hazelcast:hazelcast	CVE-2022-36437	严重	3.8.6	3.12.13, 4.1.10, 4.2.6, 5.0.4, 5.1.3	hazelcast: Hazelcast connection caching 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36437 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-29 23:15 修改: 2023-01-09 18:33
com.mchange:c3p0	CVE-2018-20433	严重	0.9.5.1	0.9.5.3	c3p0: XML external entity processing in extractXmlConfigFromInputStream 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20433 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-12-24 13:29 修改: 2023-11-07 02:56
com.nimbusds:nimbus-jose-jwt	CVE-2019-17195	严重	2.16	7.9	nimbus-jose-jwt: Uncaught exceptions while parsing a JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-15 14:15 修改: 2023-11-07 03:06
com.nimbusds:nimbus-jose-jwt	CVE-2019-17195	严重	2.16	7.9	nimbus-jose-jwt: Uncaught exceptions while parsing a JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-15 14:15 修改: 2023-11-07 03:06
com.nimbusds:nimbus-jose-jwt	CVE-2019-17195	严重	2.16	7.9	nimbus-jose-jwt: Uncaught exceptions while parsing a JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-15 14:15 修改: 2023-11-07 03:06
com.nimbusds:nimbus-jose-jwt	CVE-2019-17195	严重	4.9	7.9	nimbus-jose-jwt: Uncaught exceptions while parsing a JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-15 14:15 修改: 2023-11-07 03:06
com.nimbusds:nimbus-jose-jwt	CVE-2019-17195	严重	4.9	7.9	nimbus-jose-jwt: Uncaught exceptions while parsing a JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-15 14:15 修改: 2023-11-07 03:06
com.thoughtworks.xstream:xstream	CVE-2013-7285	严重	1.1.1	1.4.7, 1.4.11	XStream: remote code execution due to insecure XML deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7285 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-15 17:29 修改: 2023-11-07 02:18
com.thoughtworks.xstream:xstream	CVE-2019-10173	严重	1.1.1	1.4.11	xstream: remote code execution due to insecure XML deserialization (regression of CVE-2013-7285) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10173 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-23 13:15 修改: 2022-10-05 20:38
com.thoughtworks.xstream:xstream	CVE-2013-7285	严重	1.2	1.4.7, 1.4.11	XStream: remote code execution due to insecure XML deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7285 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-15 17:29 修改: 2023-11-07 02:18
com.thoughtworks.xstream:xstream	CVE-2019-10173	严重	1.2	1.4.11	xstream: remote code execution due to insecure XML deserialization (regression of CVE-2013-7285) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10173 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-23 13:15 修改: 2022-10-05 20:38
com.thoughtworks.xstream:xstream	CVE-2013-7285	严重	1.4.10	1.4.7, 1.4.11	XStream: remote code execution due to insecure XML deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7285 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-15 17:29 修改: 2023-11-07 02:18
com.thoughtworks.xstream:xstream	CVE-2019-10173	严重	1.4.10	1.4.11	xstream: remote code execution due to insecure XML deserialization (regression of CVE-2013-7285) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10173 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-23 13:15 修改: 2022-10-05 20:38
commons-fileupload:commons-fileupload	CVE-2016-1000031	严重	1.3.1	1.3.3	FileUpload: DiskFileItem file manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000031 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-10-25 14:29 修改: 2023-11-07 02:29
commons-fileupload:commons-fileupload	CVE-2016-1000031	严重	1.3.2	1.3.3	FileUpload: DiskFileItem file manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000031 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-10-25 14:29 修改: 2023-11-07 02:29
dom4j:dom4j	CVE-2020-10683	严重	1.6.1		dom4j: XML External Entity vulnerability in default SAX parser 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10683 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-05-01 19:15 修改: 2023-11-07 03:14
dom4j:dom4j	CVE-2020-10683	严重	1.6.1		dom4j: XML External Entity vulnerability in default SAX parser 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10683 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-05-01 19:15 修改: 2023-11-07 03:14
log4j:log4j	CVE-2019-17571	严重	1.2.16		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2022-23305	严重	1.2.16		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23307	严重	1.2.16		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
log4j:log4j	CVE-2019-17571	严重	1.2.17		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2019-17571	严重	1.2.17		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2019-17571	严重	1.2.17		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2019-17571	严重	1.2.17		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2019-17571	严重	1.2.17		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2022-23305	严重	1.2.17		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23305	严重	1.2.17		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23305	严重	1.2.17		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23305	严重	1.2.17		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23305	严重	1.2.17		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23307	严重	1.2.17		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
log4j:log4j	CVE-2022-23307	严重	1.2.17		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
log4j:log4j	CVE-2022-23307	严重	1.2.17		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
log4j:log4j	CVE-2022-23307	严重	1.2.17		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
log4j:log4j	CVE-2022-23307	严重	1.2.17		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-10-03 11:15 修改: 2024-10-21 09:15
org.apache.tomcat:tomcat-catalina	CVE-2024-52316	严重	9.0.12	9.0.96, 10.1.30, 11.0.1	tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52316 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-11-18 12:15 修改: 2024-11-18 17:11
org.apache.xmlbeans:xmlbeans	CVE-2021-23926	严重	2.3.0	3.0.0	xmlbeans: allowed malicious XML input may lead to XML Entity Expansion attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23926 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-14 15:15 修改: 2023-11-07 03:31
org.clojure:clojure	CVE-2017-20189	严重	1.9.0-alpha14	1.9.0	In Clojure before 1.9.0, classes can be used to construct a serialized ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-20189 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-01-22 06:15 修改: 2024-01-30 23:01
org.eclipse.jetty:jetty-server	CVE-2017-7657	严重	8.1.9.v20130131	9.2.25.v20180606, 9.3.24.v20180605	jetty: HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7657 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-06-26 16:29 修改: 2023-11-07 02:50
org.eclipse.jetty:jetty-server	CVE-2017-7658	严重	8.1.9.v20130131	9.2.25.v20180606, 9.3.24.v20180605, 9.4.11.v20180605	jetty: Incorrect header handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7658 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-06-26 17:29 修改: 2023-11-07 02:50
org.hsqldb:hsqldb	CVE-2022-41853	严重	2.3.0	2.7.1	hsqldb: Untrusted input may lead to RCE attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41853 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-06 18:17 修改: 2023-02-03 23:43
org.liquibase:liquibase-core	CVE-2022-0839	严重	3.6.2	4.8.0	liquibase: Improper Restriction of XML External Entity 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0839 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-03-04 15:15 修改: 2023-02-22 17:45
org.postgresql:postgresql	CVE-2024-1597	严重	42.1.1	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2	pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1597 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-19 13:15 修改: 2024-06-10 17:16
org.quartz-scheduler:quartz	CVE-2019-13990	严重	1.8.6	2.3.2	libquartz: XXE attacks via job description 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13990 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-26 19:15 修改: 2024-10-15 19:35
org.springframework.security:spring-security-core	CVE-2022-22978	严重	3.2.5.RELEASE	5.5.7, 5.6.4, 5.4.11	springframework: Authorization Bypass in RegexRequestMatcher 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22978 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-05-19 15:15 修改: 2023-04-11 23:15
org.springframework:spring-beans	CVE-2022-22965	严重	4.2.5.RELEASE	5.2.20.RELEASE, 5.3.18	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-01 23:15 修改: 2024-10-18 19:52
org.springframework:spring-beans	CVE-2022-22965	严重	4.3.20.RELEASE	5.2.20.RELEASE, 5.3.18	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-01 23:15 修改: 2024-10-18 19:52
org.springframework:spring-core	CVE-2018-1270	严重	4.2.5.RELEASE	5.0.5, 4.3.16	spring-framework: Possible RCE via spring messaging 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1270 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-04-06 13:29 修改: 2023-11-07 02:55
org.springframework:spring-core	CVE-2018-1275	严重	4.2.5.RELEASE	4.3.16, 5.0.5	spring-framework: Address partial fix for CVE-2018-1270 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1275 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-04-11 13:29 修改: 2023-11-07 02:55
org.springframework:spring-web	CVE-2016-1000027	严重	4.2.5.RELEASE	6.0.0	spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-01-02 23:15 修改: 2023-04-20 09:15
org.springframework:spring-web	CVE-2016-1000027	严重	4.3.20.RELEASE	6.0.0	spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-01-02 23:15 修改: 2023-04-20 09:15
org.springframework:spring-webmvc	CVE-2022-22965	严重	4.2.5.RELEASE	5.2.20.RELEASE, 5.3.18	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-01 23:15 修改: 2024-10-18 19:52
org.springframework:spring-webmvc	CVE-2022-22965	严重	4.3.20.RELEASE	5.2.20.RELEASE, 5.3.18	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-01 23:15 修改: 2024-10-18 19:52
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.9.3	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14893	高危	2.9.3	2.9.10	jackson-databind: Serialization gadgets in classes of the xalan package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 21:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.9.3	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10672	高危	2.9.3	2.9.10.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.9.3	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10968	高危	2.9.3	2.9.10.4	jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10969	高危	2.9.3	2.9.10.4	jackson-databind: Serialization gadgets in javax.swing.JEditorPane 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11111	高危	2.9.3	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11112	高危	2.9.3	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11113	高危	2.9.3	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11619	高危	2.9.3	2.9.10.4	jackson-databind: Serialization gadgets in org.springframework:spring-aop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11620	高危	2.9.3	2.9.10.4	jackson-databind: Serialization gadgets in commons-jelly:commons-jelly 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14060	高危	2.9.3	2.9.10.5	jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-14 21:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14061	高危	2.9.3	2.9.10.5	jackson-databind: serialization in weblogic/oracle-aqjms 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14062	高危	2.9.3	2.9.10.5	jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14195	高危	2.9.3	2.9.10.5	jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-16 16:15 修改: 2021-11-17 20:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.9.3	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.9.3	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.9.3	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.9.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.9.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.9.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.9.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.9.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.9.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.9.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.9.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.9.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.9.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.9.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.9.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.9.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.9.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.9.3	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.9.3	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.9.3	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.9.3	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.7.1	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.7.1	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.7.1	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.7.1	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.6.7.1	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.6.7.1	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.6.7.1	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.6.7.1	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.amazonaws:aws-java-sdk-s3	CVE-2022-31159	高危	1.11.155	1.12.261	Partial Path Traversal in com.amazonaws:aws-java-sdk-s3 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31159 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-07-15 18:15 修改: 2022-07-22 16:27
com.amazonaws:aws-java-sdk-s3	CVE-2022-31159	高危	1.11.310	1.12.261	Partial Path Traversal in com.amazonaws:aws-java-sdk-s3 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31159 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-07-15 18:15 修改: 2022-07-22 16:27
ch.qos.logback:logback-classic	CVE-2023-6378	高危	1.2.1	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-11-29 12:15 修改: 2024-11-29 12:15
ch.qos.logback:logback-core	CVE-2023-6378	高危	1.2.1	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-11-29 12:15 修改: 2024-11-29 12:15
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.6.7.1	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.6.7.1	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.6.7.1	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.6.7.1	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.6.7.1	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.6.7.1	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.6.7.1	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.6.7.1	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.6.7.1	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.6.7.1	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.9.6	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.9.6	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.9.6	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.9.6	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.9.6	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.9.6	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14893	高危	2.9.6	2.9.10	jackson-databind: Serialization gadgets in classes of the xalan package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 21:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14893	高危	2.9.6	2.9.10	jackson-databind: Serialization gadgets in classes of the xalan package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 21:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.9.6	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.9.6	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10672	高危	2.9.6	2.9.10.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10672	高危	2.9.6	2.9.10.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.9.6	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.9.6	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10968	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10968	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10969	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in javax.swing.JEditorPane 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10969	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in javax.swing.JEditorPane 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11111	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11111	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11112	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11112	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11113	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11113	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11619	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.springframework:spring-aop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11619	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in org.springframework:spring-aop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11620	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in commons-jelly:commons-jelly 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11620	高危	2.9.6	2.9.10.4	jackson-databind: Serialization gadgets in commons-jelly:commons-jelly 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14060	高危	2.9.6	2.9.10.5	jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-14 21:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14060	高危	2.9.6	2.9.10.5	jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-14 21:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14061	高危	2.9.6	2.9.10.5	jackson-databind: serialization in weblogic/oracle-aqjms 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14061	高危	2.9.6	2.9.10.5	jackson-databind: serialization in weblogic/oracle-aqjms 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14062	高危	2.9.6	2.9.10.5	jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14062	高危	2.9.6	2.9.10.5	jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14195	高危	2.9.6	2.9.10.5	jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-16 16:15 修改: 2021-11-17 20:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14195	高危	2.9.6	2.9.10.5	jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-16 16:15 修改: 2021-11-17 20:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.9.6	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.9.6	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.9.6	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.9.6	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.9.6	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.9.6	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.9.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.9.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.9.6	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.9.6	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.9.6	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.9.6	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.9.6	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.9.6	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.9.6	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.9.6	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.google.code.gson:gson	CVE-2022-25647	高危	2.3.1	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-05-01 16:15 修改: 2022-11-28 17:33
com.google.code.gson:gson	CVE-2022-25647	高危	2.7	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-05-01 16:15 修改: 2022-11-28 17:33
com.google.code.gson:gson	CVE-2022-25647	高危	2.8.2	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-05-01 16:15 修改: 2022-11-28 17:33
com.google.code.gson:gson	CVE-2022-25647	高危	2.8.2	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-05-01 16:15 修改: 2022-11-28 17:33
com.graphql-java:graphql-java	CVE-2022-37734	高危	9.2	17.4, 18.3	graphql-java: DoS by malicious query 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37734 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-12 14:15 修改: 2023-08-08 14:22
com.graphql-java:graphql-java	CVE-2023-28867	高危	9.2	0.0.0-2023-03-20T01-49-44-80e3135, 17.5, 18.4, 19.4, 20.1	graphql-java: crafted GraphQL query causes stack consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28867 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-27 01:15 修改: 2023-04-03 14:01
com.graphql-java:graphql-java	CVE-2024-40094	高危	9.2	19.11, 20.9, 21.5	graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40094 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-07-30 07:15 修改: 2024-07-30 13:32
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.7.6	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12023	高危	2.7.6	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12023 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.7.6	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.7.6	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.hazelcast:hazelcast	CVE-2016-10750	高危	3.8.6	3.11	hazelcast: java deserialization in join cluster procedure leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-22 14:29 修改: 2019-08-08 13:15
com.hazelcast:hazelcast	CVE-2016-10750	高危	3.8.6	3.11	hazelcast: java deserialization in join cluster procedure leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-22 14:29 修改: 2019-08-08 13:15
com.hazelcast:hazelcast	CVE-2023-33265	高危	3.8.6	5.2.4, 5.1.7, 5.0.5	Hazelcast Executor Services don't check client permissions properly 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33265 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-07-18 16:15 修改: 2023-07-28 13:20
com.hazelcast:hazelcast	CVE-2023-33265	高危	3.8.6	5.2.4, 5.1.7, 5.0.5	Hazelcast Executor Services don't check client permissions properly 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33265 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-07-18 16:15 修改: 2023-07-28 13:20
com.hazelcast:hazelcast	CVE-2023-45859	高危	3.8.6	5.2.5, 5.3.5	Missing permission checks on Hazelcast client protocol 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45859 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-28 22:15 修改: 2024-11-29 17:15
com.hazelcast:hazelcast	CVE-2023-45859	高危	3.8.6	5.2.5, 5.3.5	Missing permission checks on Hazelcast client protocol 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45859 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-28 22:15 修改: 2024-11-29 17:15
com.hazelcast:hazelcast	CVE-2023-45860	高危	3.8.6	5.3.5, 5.2.5	Hazelcast: Permission checking in CSV File Source connector 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45860 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-16 10:15 修改: 2024-11-06 17:35
com.hazelcast:hazelcast	CVE-2023-45860	高危	3.8.6	5.3.5, 5.2.5	Hazelcast: Permission checking in CSV File Source connector 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45860 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-16 10:15 修改: 2024-11-06 17:35
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.7.6	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.mchange:c3p0	CVE-2019-5427	高危	0.9.5.1	0.9.5.4	c3p0: loading XML configuration leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5427 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-04-22 21:29 修改: 2023-11-07 03:11
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.7.6	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.7.6	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.7.6	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.nimbusds:nimbus-jose-jwt	CVE-2017-12972	高危	2.16	4.39	Nimbus JOSE+JWT missing overflow check 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12972 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2017-12972	高危	2.16	4.39	Nimbus JOSE+JWT missing overflow check 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12972 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2017-12972	高危	2.16	4.39	Nimbus JOSE+JWT missing overflow check 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12972 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2017-12974	高危	2.16	4.36	Improper Verification of Cryptographic Signature in Nimbus JOSE+JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12974 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2017-12974	高危	2.16	4.36	Improper Verification of Cryptographic Signature in Nimbus JOSE+JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12974 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2017-12974	高危	2.16	4.36	Improper Verification of Cryptographic Signature in Nimbus JOSE+JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12974 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	2.16	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-11 05:15 修改: 2024-10-30 20:35
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	2.16	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-11 05:15 修改: 2024-10-30 20:35
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	2.16	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-11 05:15 修改: 2024-10-30 20:35
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.7.6	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.7.6	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.nimbusds:nimbus-jose-jwt	CVE-2017-12972	高危	4.9	4.39	Nimbus JOSE+JWT missing overflow check 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12972 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2017-12972	高危	4.9	4.39	Nimbus JOSE+JWT missing overflow check 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12972 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2017-12974	高危	4.9	4.36	Improper Verification of Cryptographic Signature in Nimbus JOSE+JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12974 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2017-12974	高危	4.9	4.36	Improper Verification of Cryptographic Signature in Nimbus JOSE+JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12974 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2023-11-07 02:38
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	4.9	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-11 05:15 修改: 2024-10-30 20:35
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	4.9	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-11 05:15 修改: 2024-10-30 20:35
com.taoensso:nippy	CVE-2020-24164	高危	2.12.0	2.14.2	Gadget chain attack in Nippy 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24164 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-09-11 06:15 修改: 2020-09-15 14:38
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.7.6	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.7.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.thoughtworks.xstream:xstream	CVE-2016-3674	高危	1.1.1	1.4.9	XStream: enabled processing of external entities 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3674 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-05-17 14:08 修改: 2018-03-26 18:47
com.thoughtworks.xstream:xstream	CVE-2017-7957	高危	1.1.1	1.4.10	XStream: DoS when unmarshalling void type 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7957 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-04-29 19:59 修改: 2019-03-26 17:15
com.thoughtworks.xstream:xstream	CVE-2020-26217	高危	1.1.1	1.4.14-jdk7	XStream: remote code execution due to insecure XML deserialization when relying on blocklists 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26217 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-11-16 21:15 修改: 2023-11-07 03:20
com.thoughtworks.xstream:xstream	CVE-2020-26258	高危	1.1.1	1.4.15	XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26258 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-16 01:15 修改: 2023-11-07 03:20
com.thoughtworks.xstream:xstream	CVE-2021-21341	高危	1.1.1	1.4.16	XStream: allow a remote attacker to cause DoS only by manipulating the processed input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21341 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-29505	高危	1.1.1	1.4.17	XStream: remote command execution attack by manipulating the processed input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29505 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-05-28 21:15 修改: 2023-11-07 03:32
com.thoughtworks.xstream:xstream	CVE-2021-39139	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39139 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39141	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.xml.internal.ws.client.sei.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39141 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39144	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39144 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2024-06-28 13:42
com.thoughtworks.xstream:xstream	CVE-2021-39145	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39145 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39146	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39146 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39147	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapSearchEnumeration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39147 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39148	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.toolkit.dir.ContextEnumerator 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39148 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39149	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.corba.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39149 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39150	高危	1.1.1	1.4.18	xstream: Server-side request forgery (SSRF) via unsafe deserialization of com.sun.xml.internal.ws.client.sei.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39150 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 19:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39151	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39151 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39152	高危	1.1.1	1.4.18	xstream: Server-side request forgery (SSRF) via unsafe deserialization of jdk.nashorn.internal.runtime.Source$URLData 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39152 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 19:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39153	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39153 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39154	高危	1.1.1	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39154 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-43859	高危	1.1.1	1.4.19	xstream: Injecting highly recursive collections or maps can cause a DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43859 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-02-01 12:15 修改: 2023-11-07 03:39
com.thoughtworks.xstream:xstream	CVE-2022-40151	高危	1.1.1	1.4.20	xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40151 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-16 10:15 修改: 2022-09-20 18:11
com.thoughtworks.xstream:xstream	CVE-2022-41966	高危	1.1.1	1.4.20	xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41966 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-28 00:15 修改: 2023-06-27 14:04
com.thoughtworks.xstream:xstream	CVE-2024-47072	高危	1.1.1	1.4.21	com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-11-08 00:15 修改: 2024-11-08 19:01
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.7.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.7.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.thoughtworks.xstream:xstream	CVE-2016-3674	高危	1.2	1.4.9	XStream: enabled processing of external entities 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3674 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-05-17 14:08 修改: 2018-03-26 18:47
com.thoughtworks.xstream:xstream	CVE-2017-7957	高危	1.2	1.4.10	XStream: DoS when unmarshalling void type 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7957 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-04-29 19:59 修改: 2019-03-26 17:15
com.thoughtworks.xstream:xstream	CVE-2020-26217	高危	1.2	1.4.14-jdk7	XStream: remote code execution due to insecure XML deserialization when relying on blocklists 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26217 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-11-16 21:15 修改: 2023-11-07 03:20
com.thoughtworks.xstream:xstream	CVE-2020-26258	高危	1.2	1.4.15	XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26258 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-16 01:15 修改: 2023-11-07 03:20
com.thoughtworks.xstream:xstream	CVE-2021-21341	高危	1.2	1.4.16	XStream: allow a remote attacker to cause DoS only by manipulating the processed input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21341 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-29505	高危	1.2	1.4.17	XStream: remote command execution attack by manipulating the processed input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29505 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-05-28 21:15 修改: 2023-11-07 03:32
com.thoughtworks.xstream:xstream	CVE-2021-39139	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39139 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39141	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.xml.internal.ws.client.sei.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39141 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39144	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39144 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2024-06-28 13:42
com.thoughtworks.xstream:xstream	CVE-2021-39145	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39145 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39146	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39146 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39147	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapSearchEnumeration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39147 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39148	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.toolkit.dir.ContextEnumerator 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39148 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39149	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.corba.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39149 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39150	高危	1.2	1.4.18	xstream: Server-side request forgery (SSRF) via unsafe deserialization of com.sun.xml.internal.ws.client.sei.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39150 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 19:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39151	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39151 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39152	高危	1.2	1.4.18	xstream: Server-side request forgery (SSRF) via unsafe deserialization of jdk.nashorn.internal.runtime.Source$URLData 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39152 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 19:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39153	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39153 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39154	高危	1.2	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39154 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-43859	高危	1.2	1.4.19	xstream: Injecting highly recursive collections or maps can cause a DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43859 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-02-01 12:15 修改: 2023-11-07 03:39
com.thoughtworks.xstream:xstream	CVE-2022-40151	高危	1.2	1.4.20	xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40151 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-16 10:15 修改: 2022-09-20 18:11
com.thoughtworks.xstream:xstream	CVE-2022-41966	高危	1.2	1.4.20	xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41966 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-28 00:15 修改: 2023-06-27 14:04
com.thoughtworks.xstream:xstream	CVE-2024-47072	高危	1.2	1.4.21	com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-11-08 00:15 修改: 2024-11-08 19:01
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.7.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.7.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.thoughtworks.xstream:xstream	CVE-2020-26217	高危	1.4.10	1.4.14-jdk7	XStream: remote code execution due to insecure XML deserialization when relying on blocklists 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26217 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-11-16 21:15 修改: 2023-11-07 03:20
com.thoughtworks.xstream:xstream	CVE-2020-26258	高危	1.4.10	1.4.15	XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26258 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-16 01:15 修改: 2023-11-07 03:20
com.thoughtworks.xstream:xstream	CVE-2021-21341	高危	1.4.10	1.4.16	XStream: allow a remote attacker to cause DoS only by manipulating the processed input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21341 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-29505	高危	1.4.10	1.4.17	XStream: remote command execution attack by manipulating the processed input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29505 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-05-28 21:15 修改: 2023-11-07 03:32
com.thoughtworks.xstream:xstream	CVE-2021-39139	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39139 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39141	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.xml.internal.ws.client.sei.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39141 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39144	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39144 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2024-06-28 13:42
com.thoughtworks.xstream:xstream	CVE-2021-39145	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39145 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39146	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39146 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39147	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapSearchEnumeration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39147 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39148	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.toolkit.dir.ContextEnumerator 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39148 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39149	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.corba.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39149 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39150	高危	1.4.10	1.4.18	xstream: Server-side request forgery (SSRF) via unsafe deserialization of com.sun.xml.internal.ws.client.sei.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39150 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 19:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39151	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39151 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39152	高危	1.4.10	1.4.18	xstream: Server-side request forgery (SSRF) via unsafe deserialization of jdk.nashorn.internal.runtime.Source$URLData 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39152 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 19:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39153	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39153 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-39154	高危	1.4.10	1.4.18	xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39154 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 18:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-43859	高危	1.4.10	1.4.19	xstream: Injecting highly recursive collections or maps can cause a DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43859 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-02-01 12:15 修改: 2023-11-07 03:39
com.thoughtworks.xstream:xstream	CVE-2022-40151	高危	1.4.10	1.4.20	xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40151 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-16 10:15 修改: 2022-09-20 18:11
com.thoughtworks.xstream:xstream	CVE-2022-41966	高危	1.4.10	1.4.20	xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41966 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-28 00:15 修改: 2023-06-27 14:04
com.thoughtworks.xstream:xstream	CVE-2024-47072	高危	1.4.10	1.4.21	com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-11-08 00:15 修改: 2024-11-08 19:01
commons-beanutils:commons-beanutils	CVE-2014-0114	高危	1.9.3	1.9.4	1: Class Loader manipulation via request parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0114 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2014-04-30 10:49 修改: 2023-02-13 00:32
commons-beanutils:commons-beanutils	CVE-2019-10086	高危	1.9.3	1.9.4	apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10086 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-08-20 21:15 修改: 2023-11-07 03:02
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.7.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
commons-fileupload:commons-fileupload	CVE-2016-3092	高危	1.3.1	1.3.2	tomcat: Usage of vulnerable FileUpload package can result in denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3092 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-07-04 22:59 修改: 2023-12-08 16:41
commons-fileupload:commons-fileupload	CVE-2023-24998	高危	1.3.1	1.5	FileUpload: FileUpload DoS with excessive parts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-02-20 16:15 修改: 2024-02-16 19:11
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.7.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
commons-fileupload:commons-fileupload	CVE-2023-24998	高危	1.3.2	1.5	FileUpload: FileUpload DoS with excessive parts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-02-20 16:15 修改: 2024-02-16 19:11
commons-fileupload:commons-fileupload	CVE-2023-24998	高危	1.3.3	1.5	FileUpload: FileUpload DoS with excessive parts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-02-20 16:15 修改: 2024-02-16 19:11
commons-fileupload:commons-fileupload	CVE-2023-24998	高危	1.3.3	1.5	FileUpload: FileUpload DoS with excessive parts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-02-20 16:15 修改: 2024-02-16 19:11
commons-io:commons-io	CVE-2024-47554	高危	2.4	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-10-03 12:15 修改: 2024-12-04 15:15
commons-io:commons-io	CVE-2024-47554	高危	2.4	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-10-03 12:15 修改: 2024-12-04 15:15
commons-io:commons-io	CVE-2024-47554	高危	2.5	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-10-03 12:15 修改: 2024-12-04 15:15
commons-io:commons-io	CVE-2024-47554	高危	2.6	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-10-03 12:15 修改: 2024-12-04 15:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.7.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.7.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
dom4j:dom4j	CVE-2018-1000632	高危	1.6.1		dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000632 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-08-20 19:31 修改: 2023-11-07 02:51
dom4j:dom4j	CVE-2018-1000632	高危	1.6.1		dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000632 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-08-20 19:31 修改: 2023-11-07 02:51
io.netty:netty-all	CVE-2019-16869	高危	4.1.9.Final	4.1.42.Final	netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16869 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-09-26 16:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.7.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.7.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.7.6	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
log4j:log4j	CVE-2021-4104	高危	1.2.16		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2022-23302	高危	1.2.16		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.7.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.7.6	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.7.6	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.7.6	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.7.6	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.7.6	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
log4j:log4j	CVE-2021-4104	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2021-4104	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2021-4104	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2021-4104	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2021-4104	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2022-23302	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23302	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23302	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23302	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23302	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
net.minidev:json-smart	CVE-2023-1370	高危	1.1.1	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2023-1370	高危	1.1.1	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2023-1370	高危	1.1.1	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2021-31684	高危	1.3.1	1.3.3, 2.4.4	json-smart: Denial of Service in JSONParserByteArray function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31684 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-06-01 20:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2021-31684	高危	1.3.1	1.3.3, 2.4.4	json-smart: Denial of Service in JSONParserByteArray function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31684 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-06-01 20:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2023-1370	高危	1.3.1	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2023-1370	高危	1.3.1	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.7.1	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-09-29 17:15 修改: 2024-06-21 19:15
org.apache.commons:commons-compress	CVE-2021-35515	高危	1.8	1.21	apache-commons-compress: infinite loop when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35516	高危	1.8	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35517	高危	1.8	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-36090	高危	1.8	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2024-25710	高危	1.8	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-19 09:15 修改: 2024-03-07 17:15
org.apache.poi:poi	CVE-2017-12626	高危	3.5-FINAL	3.17	poi: Parsing of multiple file types can cause a denial of service via infinite loop or out of memory exception 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12626 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-01-29 17:29 修改: 2023-11-07 02:38
org.apache.sanselan:sanselan	CVE-2018-17201	高危	0.97-incubator		Improper Input Validation in Apache Sanselan 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17201 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-06 18:29 修改: 2023-11-07 02:54
org.apache.sanselan:sanselan	CVE-2018-17201	高危	0.97-incubator		Improper Input Validation in Apache Sanselan 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17201 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-06 18:29 修改: 2023-11-07 02:54
org.apache.sanselan:sanselan	CVE-2018-17202	高危	0.97-incubator		Infinite Loop in Apache Sanselan 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17202 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-06 18:29 修改: 2023-11-07 02:54
org.apache.sanselan:sanselan	CVE-2018-17202	高危	0.97-incubator		Infinite Loop in Apache Sanselan 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17202 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-06 18:29 修改: 2023-11-07 02:54
org.apache.santuario:xmlsec	CVE-2021-40690	高危	2.0.7	2.2.3, 2.1.7	xml-security: XPath Transform abuse allows for information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40690 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-09-19 18:15 修改: 2023-11-07 03:38
org.apache.thrift:libthrift	CVE-2018-1320	高危	0.9.0	0.9.3-1, 0.12.0	thrift: SASL negotiation isComplete validation bypass in the org.apache.thrift.transport.TSaslTransport class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1320 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-01-07 17:29 修改: 2023-11-07 02:55
org.apache.thrift:libthrift	CVE-2019-0205	高危	0.9.0	0.13.0	thrift: Endless loop when feed with specific input data 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0205 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-29 19:15 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12023	高危	2.7.1	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12023 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
org.apache.tomcat:tomcat-catalina	CVE-2020-9484	高危	9.0.12	10.0.0-M5, 9.0.35, 8.5.55, 7.0.104	tomcat: deserialization flaw in session persistence storage leading to RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9484 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-05-20 19:15 修改: 2023-11-07 03:26
org.apache.tomcat:tomcat-catalina	CVE-2023-46589	高危	9.0.12	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96	tomcat: HTTP request smuggling via malformed trailer headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-11-28 16:15 修改: 2024-07-12 16:11
org.apache.tomcat:tomcat-catalina	CVE-2024-50379	高危	9.0.12	11.0.2, 10.1.34, 9.0.98	tomcat: RCE due to TOCTOU issue in JSP compilation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-17 13:15 修改: 2024-12-19 18:15
org.apache.tomcat:tomcat-catalina	CVE-2024-56337	高危	9.0.12	11.0.2, 10.1.34, 9.0.98	tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-20 16:15 修改: 2024-12-20 16:15
org.apache.tomcat:tomcat-coyote	CVE-2020-17527	高危	9.0.12	10.0.0-M10, 9.0.40, 8.5.60	tomcat: HTTP/2 request header mix-up 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17527 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-03 19:15 修改: 2023-11-07 03:19
org.apache.tomcat:tomcat-coyote	CVE-2022-42252	高危	9.0.12	9.0.68, 10.0.27, 10.1.1	tomcat: request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-11-01 09:15 修改: 2023-05-30 06:15
org.apache.tomcat:tomcat-coyote	CVE-2023-24998	高危	9.0.12	10.1.5, 11.0.0-M5, 8.5.88, 9.0.71	FileUpload: FileUpload DoS with excessive parts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-02-20 16:15 修改: 2024-02-16 19:11
org.apache.tomcat:tomcat-coyote	CVE-2024-34750	高危	9.0.12	11.0.0-M21, 10.1.25, 9.0.90	tomcat: Improper Handling of Exceptional Conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-07-03 20:15 修改: 2024-07-09 16:22
org.apache.velocity:velocity	CVE-2020-13936	高危	1.6.4-atlassian-9		velocity: arbitrary code execution when attacker is able to modify templates 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13936 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-10 08:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.7.1	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
org.apache.xmlgraphics:batik-bridge	CVE-2022-44729	高危	1.9	1.17	batik: Server-Side Request Forgery vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44729 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-08-22 19:16 修改: 2024-01-07 11:15
org.apache.xmlgraphics:batik-bridge	CVE-2022-44729	高危	1.9	1.17	batik: Server-Side Request Forgery vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44729 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-08-22 19:16 修改: 2024-01-07 11:15
org.apache.xmlgraphics:batik-transcoder	CVE-2022-44729	高危	1.9	1.17	batik: Server-Side Request Forgery vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44729 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-08-22 19:16 修改: 2024-01-07 11:15
org.apache.xmlgraphics:batik-transcoder	CVE-2022-44729	高危	1.9	1.17	batik: Server-Side Request Forgery vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44729 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-08-22 19:16 修改: 2024-01-07 11:15
org.apache.xmlgraphics:xmlgraphics-commons	CVE-2020-11988	高危	2.2	2.6	xmlgraphics-commons: SSRF due to improper input validation by the XMPParser 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11988 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-02-24 18:15 修改: 2023-11-07 03:15
org.bitbucket.b_c:jose4j	CVE-2023-31582	高危	0.4.2	0.9.3	jose4j: Insecure iteration count setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31582 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-25 18:17 修改: 2023-10-31 15:18
org.bitbucket.b_c:jose4j	CVE-2023-31582	高危	0.6.3	0.9.3	jose4j: Insecure iteration count setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31582 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-25 18:17 修改: 2023-10-31 15:18
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.7.1	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
org.clojure:clojure	CVE-2024-22871	高危	1.9.0-alpha14	1.11.2, 1.12.0-alpha9	An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22871 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-29 02:15 修改: 2024-08-13 19:35
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.1	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-16 10:15 修改: 2023-07-13 17:24
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.1	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-16 10:15 修改: 2023-07-13 17:24
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.1	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-16 10:15 修改: 2023-07-13 17:24
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.1	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-13 15:15 修改: 2023-01-30 17:57
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.1	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-13 15:15 修改: 2023-01-30 17:57
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.1	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-13 15:15 修改: 2023-01-30 17:57
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.1	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-13 15:15 修改: 2023-01-26 17:35
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.1	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-13 15:15 修改: 2023-01-26 17:35
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.1	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-13 15:15 修改: 2023-01-26 17:35
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.1	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-22 06:15 修改: 2023-11-07 04:03
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.1	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-22 06:15 修改: 2023-11-07 04:03
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.1	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-22 06:15 修改: 2023-11-07 04:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.7.1	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.7.1	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
org.eclipse.jetty:jetty-server	CVE-2015-2080	高危	8.1.9.v20130131	9.2.9.v20150224	jetty: remote unauthenticated credential exposure 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2080 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-10-07 14:59 修改: 2019-03-08 11:29
org.eclipse.jetty:jetty-server	CVE-2017-7656	高危	8.1.9.v20130131	9.3.24.v20180605, 9.4.11.v20180605	jetty: HTTP request smuggling using the range header 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7656 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-06-26 15:29 修改: 2023-11-07 02:50
org.eclipse.jetty:jetty-server	CVE-2017-9735	高危	8.1.9.v20130131	9.4.6.v20170531, 9.3.20.v20170531, 9.2.22.v20170606	jetty: Timing channel attack in util/security/Password.java 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9735 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-06-16 21:29 修改: 2023-11-07 02:50
org.eclipse.jetty:jetty-server	CVE-2021-28165	高危	8.1.9.v20130131	9.4.39, 10.0.2, 11.0.2	jetty: Resource exhaustion when receiving an invalid large TLS frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28165 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-04-01 15:15 修改: 2023-11-07 03:32
org.hibernate:hibernate-core	CVE-2020-25638	高危	5.2.8.Final	5.4.24.Final, 5.3.20.Final	hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25638 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-02 15:15 修改: 2023-11-07 03:20
org.hibernate:hibernate-core	CVE-2020-25638	高危	5.3.2.Final	5.4.24.Final, 5.3.20.Final	hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25638 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-02 15:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.7.1	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
org.json:json	CVE-2022-45688	高危	20070829	20230227	json stack overflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-13 15:15 修改: 2023-03-09 15:16
org.json:json	CVE-2022-45688	高危	20070829	20230227	json stack overflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-13 15:15 修改: 2023-03-09 15:16
org.json:json	CVE-2023-5072	高危	20070829	20231013	JSON-java: parser confusion leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5072 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-12 17:15 修改: 2024-06-21 19:15
org.json:json	CVE-2023-5072	高危	20070829	20231013	JSON-java: parser confusion leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5072 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-12 17:15 修改: 2024-06-21 19:15
org.jsoup:jsoup	CVE-2021-37714	高危	1.7.1	1.14.2	jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37714 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-18 15:15 修改: 2023-11-07 03:37
org.jsoup:jsoup	CVE-2021-37714	高危	1.9.2	1.14.2	jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37714 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-18 15:15 修改: 2023-11-07 03:37
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.7.1	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.7.1	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
org.postgresql:postgresql	CVE-2020-13692	高危	42.1.1	42.2.13	postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13692 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-06-04 16:15 修改: 2023-11-07 03:16
org.postgresql:postgresql	CVE-2022-21724	高危	42.1.1	42.2.25, 42.3.2	jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21724 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-02-02 12:15 修改: 2023-11-07 03:43
org.postgresql:postgresql	CVE-2022-31197	高危	42.1.1	42.2.26, 42.4.1, 42.3.7	postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31197 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-08-03 19:15 修改: 2023-11-07 03:47
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.7.1	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
org.springframework.ldap:spring-ldap-core	CVE-2017-8028	高危	2.2.1.RELEASE	2.3.2	spring-ldap: Authentication with userSearch and STARTTLS allows authentication with arbitrary password 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8028 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-11-27 10:29 修改: 2021-01-20 15:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.7.1	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
org.springframework.security:spring-security-core	CVE-2016-5007	高危	3.2.5.RELEASE	4.1.1	spring: Path matching inconsistency 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5007 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-05-25 17:29 修改: 2022-04-11 17:18
org.springframework.security:spring-security-core	CVE-2016-9879	高危	3.2.5.RELEASE	3.2.10.RELEASE, 4.1.4.RELEASE, 4.2.1.RELEASE	Security: Improper handling of path parameters allows bypassing the security constraint 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9879 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-01-06 22:59 修改: 2021-06-08 18:22
org.springframework.security:spring-security-core	CVE-2019-11272	高危	3.2.5.RELEASE	4.2.13	spring-security-core: mishandling of user passwords allows logging in with a password of NULL 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11272 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-26 14:15 修改: 2021-06-08 18:21
org.springframework.security:spring-security-core	CVE-2024-22257	高危	3.2.5.RELEASE	5.7.12, 5.8.11, 6.1.8, 6.2.3	spring-security: Broken Access Control With Direct Use of AuthenticatedVoter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22257 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-03-18 15:15 修改: 2024-11-12 16:35
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
org.springframework:spring-beans	CVE-2022-22970	高危	4.2.5.RELEASE	5.2.22.RELEASE, 5.3.20	springframework: DoS via data binding to multipartFile or servlet part 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-05-12 20:15 修改: 2022-10-07 13:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
org.springframework:spring-beans	CVE-2022-22970	高危	4.3.20.RELEASE	5.2.22.RELEASE, 5.3.20	springframework: DoS via data binding to multipartFile or servlet part 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-05-12 20:15 修改: 2022-10-07 13:17
org.springframework:spring-context	CVE-2022-22968	高危	4.2.5.RELEASE	5.3.19, 5.2.21.RELEASE	Framework: Data Binding Rules Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-14 21:15 修改: 2022-10-19 15:15
org.springframework:spring-context	CVE-2022-22968	高危	4.3.20.RELEASE	5.3.19, 5.2.21.RELEASE	Framework: Data Binding Rules Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-14 21:15 修改: 2022-10-19 15:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.9.3	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
org.springframework:spring-core	CVE-2016-5007	高危	4.2.5.RELEASE	4.3.1	spring: Path matching inconsistency 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5007 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-05-25 17:29 修改: 2022-04-11 17:18
org.springframework:spring-core	CVE-2018-1272	高危	4.2.5.RELEASE	4.3.15, 5.0.5	spring-framework: Multipart content pollution 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1272 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-04-06 13:29 修改: 2022-06-23 16:33
org.springframework:spring-core	CVE-2018-15756	高危	4.2.5.RELEASE	5.1.1.RELEASE, 5.0.10.RELEASE, 4.3.20.RELEASE	springframework: DoS Attack via Range Requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15756 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-10-18 22:29 修改: 2023-11-07 02:53
org.springframework:spring-expression	CVE-2023-20863	高危	4.2.5.RELEASE	6.0.8, 5.3.27, 5.2.24.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-04-13 20:15 修改: 2024-06-10 17:16
org.springframework:spring-expression	CVE-2023-20863	高危	4.3.20.RELEASE	6.0.8, 5.3.27, 5.2.24.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-04-13 20:15 修改: 2024-06-10 17:16
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12023	高危	2.9.3	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12023 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
org.springframework:spring-web	CVE-2024-22243	高危	4.2.5.RELEASE	6.1.4, 6.0.17, 5.3.32	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-23 05:15 修改: 2024-08-22 15:35
org.springframework:spring-web	CVE-2024-22259	高危	4.2.5.RELEASE	6.1.5, 6.0.18, 5.3.33	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-03-16 05:15 修改: 2024-07-03 01:47
org.springframework:spring-web	CVE-2024-22262	高危	4.2.5.RELEASE	5.3.34, 6.0.19, 6.1.6	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-04-16 06:15 修改: 2024-08-27 14:35
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.9.3	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
org.springframework:spring-web	CVE-2024-22243	高危	4.3.20.RELEASE	6.1.4, 6.0.17, 5.3.32	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-23 05:15 修改: 2024-08-22 15:35
org.springframework:spring-web	CVE-2024-22259	高危	4.3.20.RELEASE	6.1.5, 6.0.18, 5.3.33	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-03-16 05:15 修改: 2024-07-03 01:47
org.springframework:spring-web	CVE-2024-22262	高危	4.3.20.RELEASE	5.3.34, 6.0.19, 6.1.6	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-04-16 06:15 修改: 2024-08-27 14:35
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.9.3	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
org.springframework:spring-webmvc	CVE-2016-9878	高危	4.2.5.RELEASE	3.2.18, 4.2.9, 4.3.5	Framework: Directory Traversal in the Spring Framework ResourceServlet 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9878 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-12-29 09:59 修改: 2022-04-11 17:18
org.springframework:spring-webmvc	CVE-2024-38819	高危	4.2.5.RELEASE	6.1.14	org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-19 18:15 修改: 2024-12-19 18:15
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.9.3	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
org.springframework:spring-webmvc	CVE-2024-38819	高危	4.3.20.RELEASE	6.1.14	org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-19 18:15 修改: 2024-12-19 18:15
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.1.0.1	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-15 18:15 修改: 2024-02-01 14:17
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.1.0.1	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-09-25 20:15 修改: 2023-09-26 15:46
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.1.1.7	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-15 18:15 修改: 2024-02-01 14:17
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.1.1.7	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-15 18:15 修改: 2024-02-01 14:17
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.1.1.7	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-09-25 20:15 修改: 2023-09-26 15:46
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.1.1.7	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-09-25 20:15 修改: 2023-09-26 15:46
org.yaml:snakeyaml	CVE-2017-18640	高危	1.12	1.26	snakeyaml: Billion laughs attack via alias feature 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-12-12 03:15 修改: 2023-11-07 02:41
org.yaml:snakeyaml	CVE-2022-1471	高危	1.12	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-01 11:15 修改: 2024-06-21 19:15
org.yaml:snakeyaml	CVE-2022-25857	高危	1.12	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-08-30 05:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2017-18640	高危	1.22	1.26	snakeyaml: Billion laughs attack via alias feature 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-12-12 03:15 修改: 2023-11-07 02:41
org.yaml:snakeyaml	CVE-2022-1471	高危	1.22	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-12-01 11:15 修改: 2024-06-21 19:15
org.yaml:snakeyaml	CVE-2022-25857	高危	1.22	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-08-30 05:15 修改: 2024-03-15 11:15
software.amazon.ion:ion-java	CVE-2024-21634	高危	1.0.2	1.10.5	ion-java: ion-java: Ion Java StackOverflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21634 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-01-03 23:15 修改: 2024-01-10 16:38
software.amazon.ion:ion-java	CVE-2024-21634	高危	1.0.2	1.10.5	ion-java: ion-java: Ion Java StackOverflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21634 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-01-03 23:15 修改: 2024-01-10 16:38
xalan:xalan	CVE-2022-34169	高危	2.7.2	2.7.3	OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34169 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-07-19 18:15 修改: 2024-06-21 19:15
org.apache.tomcat:tomcat-catalina	CVE-2023-28708	中危	9.0.12	11.0.0-M3, 10.1.6, 9.0.72, 8.5.86	tomcat: not including the secure attribute causes information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28708 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-22 11:15 修改: 2023-11-07 04:10
org.apache.tomcat:tomcat-catalina	CVE-2024-54677	中危	9.0.12	11.0.2, 10.1.34, 9.0.98	tomcat: Apache Tomcat: DoS in examples web application 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-54677 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-17 13:15 修改: 2024-12-18 17:15
com.thoughtworks.xstream:xstream	CVE-2021-21344	中危	1.2	1.4.16	XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21344 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21345	中危	1.2	1.4.16	XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21345 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21346	中危	1.2	1.4.16	XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21346 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21347	中危	1.2	1.4.16	XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21347 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.apache.tomcat:tomcat-coyote	CVE-2020-13943	中危	9.0.12	10.0.0-M8, 9.0.38, 8.5.58	tomcat: Apache Tomcat HTTP/2 Request mix-up 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13943 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-10-12 14:15 修改: 2023-01-31 21:44
org.apache.tomcat:tomcat-coyote	CVE-2023-44487	中危	9.0.12	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-10 14:15 修改: 2024-12-20 17:40
org.apache.tomcat:tomcat-coyote	CVE-2024-21733	中危	9.0.12	9.0.44	tomcat: Leaking of unrelated request bodies in default error page 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21733 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-01-19 11:15 修改: 2024-02-16 13:15
org.apache.tomcat:tomcat-coyote	CVE-2024-24549	中危	9.0.12	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99	Tomcat: HTTP/2 header handling DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-03-13 16:15 修改: 2024-11-04 22:35
org.apache.tomcat:tomcat-websocket	CVE-2024-23672	中危	9.0.12	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99	Tomcat: WebSocket DoS with incomplete closing handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-03-13 16:15 修改: 2024-11-18 22:35
com.thoughtworks.xstream:xstream	CVE-2021-21348	中危	1.2	1.4.16	XStream: ReDoS vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21348 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21349	中危	1.2	1.4.16	XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21349 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21350	中危	1.2	1.4.16	XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21350 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21351	中危	1.2	1.4.16	XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21351 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.apache.xmlgraphics:batik-script	CVE-2022-44730	中危	1.9	1.17	batik: Server-Side Request Forgery vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44730 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-08-22 19:16 修改: 2024-01-07 11:15
org.apache.xmlgraphics:batik-script	CVE-2022-44730	中危	1.9	1.17	batik: Server-Side Request Forgery vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44730 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-08-22 19:16 修改: 2024-01-07 11:15
com.thoughtworks.xstream:xstream	CVE-2021-39140	中危	1.2	1.4.18	xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39140 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 19:15 修改: 2023-11-07 03:37
com.thoughtworks.xstream:xstream	CVE-2021-21345	中危	1.1.1	1.4.16	XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21345 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21346	中危	1.1.1	1.4.16	XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21346 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21347	中危	1.1.1	1.4.16	XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21347 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.bitbucket.b_c:jose4j	CVE-2023-51775	中危	0.4.2	0.9.4	jose4j: denial of service via specially crafted JWE 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51775 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-29 01:42 修改: 2024-08-14 19:35
org.bitbucket.b_c:jose4j	GHSA-jgvc-jfgh-rjvv	中危	0.4.2	0.9.3	Chosen Ciphertext Attack in Jose4j 漏洞详情: https://github.com/advisories/GHSA-jgvc-jfgh-rjvv 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
com.thoughtworks.xstream:xstream	CVE-2021-21348	中危	1.1.1	1.4.16	XStream: ReDoS vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21348 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.bitbucket.b_c:jose4j	CVE-2023-51775	中危	0.6.3	0.9.4	jose4j: denial of service via specially crafted JWE 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51775 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-29 01:42 修改: 2024-08-14 19:35
org.bitbucket.b_c:jose4j	GHSA-jgvc-jfgh-rjvv	中危	0.6.3	0.9.3	Chosen Ciphertext Attack in Jose4j 漏洞详情: https://github.com/advisories/GHSA-jgvc-jfgh-rjvv 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.bouncycastle:bcprov-jdk15on	CVE-2020-15522	中危	1.60	1.66	bouncycastle: Timing issue within the EC math library 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15522 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-05-20 12:15 修改: 2021-06-22 09:15
org.bouncycastle:bcprov-jdk15on	CVE-2020-26939	中危	1.60	1.61	In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26939 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-11-02 22:15 修改: 2023-11-07 03:20
org.bouncycastle:bcprov-jdk15on	CVE-2023-33201	中危	1.60		bouncycastle: potential blind LDAP injection attack using a self-signed certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-07-05 03:15 修改: 2023-08-24 19:15
org.bouncycastle:bcprov-jdk15on	CVE-2023-33202	中危	1.60	1.70	bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-11-23 16:15 修改: 2024-09-09 13:53
org.bouncycastle:bcprov-jdk15on	CVE-2024-29857	中危	1.60	1.78	org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-05-14 15:17 修改: 2024-12-06 14:15
org.bouncycastle:bcprov-jdk15on	CVE-2024-30171	中危	1.60	1.78	bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-05-14 15:21 修改: 2024-08-19 18:35
com.thoughtworks.xstream:xstream	CVE-2021-21349	中危	1.1.1	1.4.16	XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21349 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21350	中危	1.1.1	1.4.16	XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21350 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21351	中危	1.1.1	1.4.16	XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21351 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-39140	中危	1.1.1	1.4.18	xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39140 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 19:15 修改: 2023-11-07 03:37
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.6.7.1	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.7.6	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.9.6	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.9.6	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.9.6	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.9.6	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.7.6	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.7.1	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.9.3	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.9.3	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.1	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-16 10:15 修改: 2023-03-01 16:32
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.1	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-16 10:15 修改: 2023-03-01 16:32
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.1	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-16 10:15 修改: 2023-03-01 16:32
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	8.1.9.v20130131	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-10-14 16:15 修改: 2024-11-08 21:15
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.3.15.v20161220	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-09-15 20:15 修改: 2023-10-13 01:59
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	9.3.15.v20161220	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-10-14 16:15 修改: 2024-11-08 21:15
com.google.guava:guava	CVE-2018-10237	中危	18.0	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
com.hazelcast:hazelcast	CVE-2023-33264	中危	3.8.6	5.3.0	hazelcast: Improper password mask 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33264 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-05-22 01:15 修改: 2023-06-02 17:41
com.hazelcast:hazelcast	CVE-2023-33264	中危	3.8.6	5.3.0	hazelcast: Improper password mask 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33264 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-05-22 01:15 修改: 2023-06-02 17:41
com.google.guava:guava	CVE-2023-2976	中危	18.0	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.google.guava:guava	CVE-2018-10237	中危	20.0	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
com.thoughtworks.xstream:xstream	CVE-2020-26259	中危	1.4.10	1.4.15	XStream: arbitrary file deletion on the local host when unmarshalling 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26259 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-16 01:15 修改: 2023-11-07 03:20
org.eclipse.jetty:jetty-server	CVE-2019-10241	中危	8.1.9.v20130131	9.2.27.v20190403, 9.3.26.v20190403, 9.4.16.v20190411	jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10241 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2019-10247	中危	8.1.9.v20130131	9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418	jetty: error path information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10247 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2023-26048	中危	8.1.9.v20130131	9.4.51.v20230217, 10.0.14, 11.0.14	jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-04-18 21:15 修改: 2023-09-30 15:15
com.thoughtworks.xstream:xstream	CVE-2021-21342	中危	1.4.10	1.4.16	XStream: SSRF via crafted input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21342 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.hibernate:hibernate-core	CVE-2019-14900	中危	5.2.8.Final	5.3.18, 5.4.18, 5.5.0.Beta1	hibernate: SQL injection issue in Hibernate ORM 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14900 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-07-06 19:15 修改: 2023-11-07 03:05
com.thoughtworks.xstream:xstream	CVE-2021-21343	中危	1.4.10	1.4.16	XStream: arbitrary file deletion on the local host via crafted input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21343 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.hibernate:hibernate-core	CVE-2019-14900	中危	5.3.2.Final	5.3.18, 5.4.18, 5.5.0.Beta1	hibernate: SQL injection issue in Hibernate ORM 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14900 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-07-06 19:15 修改: 2023-11-07 03:05
com.thoughtworks.xstream:xstream	CVE-2021-21344	中危	1.4.10	1.4.16	XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21344 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.iq80.snappy:snappy	CVE-2024-36124	中危	0.4	0.5	snappy: tries to read outside the bounds of the given byte arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36124 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-06-03 15:15 修改: 2024-06-03 19:23
com.thoughtworks.xstream:xstream	CVE-2021-21345	中危	1.4.10	1.4.16	XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21345 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21346	中危	1.4.10	1.4.16	XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21346 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
net.minidev:json-smart	CVE-2021-27568	中危	1.1.1	1.3.2, 2.4.1, 2.3.1	json-smart: uncaught exception may lead to crash or information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-02-23 02:15 修改: 2023-11-07 03:31
net.minidev:json-smart	CVE-2021-27568	中危	1.1.1	1.3.2, 2.4.1, 2.3.1	json-smart: uncaught exception may lead to crash or information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-02-23 02:15 修改: 2023-11-07 03:31
net.minidev:json-smart	CVE-2021-27568	中危	1.1.1	1.3.2, 2.4.1, 2.3.1	json-smart: uncaught exception may lead to crash or information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-02-23 02:15 修改: 2023-11-07 03:31
org.jsoup:jsoup	CVE-2015-6748	中危	1.7.1	1.8.3	jsoup: XSS vulnerability related to incomplete tags at EOF 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-6748 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-09-25 17:29 修改: 2024-08-16 16:09
org.jsoup:jsoup	CVE-2022-36033	中危	1.7.1	1.15.3	jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if SafeList.preserveRelativeLinks is enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36033 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-08-29 17:15 修改: 2022-12-08 03:48
com.thoughtworks.xstream:xstream	CVE-2021-21347	中危	1.4.10	1.4.16	XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21347 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.jsoup:jsoup	CVE-2022-36033	中危	1.9.2	1.15.3	jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if SafeList.preserveRelativeLinks is enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36033 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-08-29 17:15 修改: 2022-12-08 03:48
com.thoughtworks.xstream:xstream	CVE-2021-21348	中危	1.4.10	1.4.16	XStream: ReDoS vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21348 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.owasp.antisamy:antisamy	CVE-2016-10006	中危	1.4.2-atlassian-13	1.5.5	In OWASP AntiSamy before 1.5.5, by submitting a specially crafted inpu ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10006 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-12-24 18:59 修改: 2019-11-14 13:22
org.owasp.antisamy:antisamy	CVE-2017-14735	中危	1.4.2-atlassian-13	1.5.7	OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14735 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-09-25 21:29 修改: 2021-07-20 23:15
org.owasp.antisamy:antisamy	CVE-2022-28367	中危	1.4.2-atlassian-13	1.6.6	OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28367 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-21 23:15 修改: 2022-05-03 20:49
org.owasp.antisamy:antisamy	CVE-2022-29577	中危	1.4.2-atlassian-13	1.6.7	Cross-site Scripting in OWASP AntiSamy 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29577 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-21 23:15 修改: 2023-02-23 18:47
org.owasp.antisamy:antisamy	CVE-2023-43643	中危	1.4.2-atlassian-13	1.7.4	AntiSamy is a library for performing fast, configurable cleansing of H ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43643 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-09 14:15 修改: 2023-10-13 17:35
org.owasp.antisamy:antisamy	CVE-2024-23635	中危	1.4.2-atlassian-13	1.7.5	AntiSamy is a library for performing fast, configurable cleansing of H ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23635 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-02 17:15 修改: 2024-02-10 01:38
org.owasp.antisamy:antisamy	CVE-2016-10006	中危	1.4.4	1.5.5	In OWASP AntiSamy before 1.5.5, by submitting a specially crafted inpu ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10006 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-12-24 18:59 修改: 2019-11-14 13:22
org.owasp.antisamy:antisamy	CVE-2016-10006	中危	1.4.4	1.5.5	In OWASP AntiSamy before 1.5.5, by submitting a specially crafted inpu ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10006 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-12-24 18:59 修改: 2019-11-14 13:22
org.owasp.antisamy:antisamy	CVE-2017-14735	中危	1.4.4	1.5.7	OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14735 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-09-25 21:29 修改: 2021-07-20 23:15
org.owasp.antisamy:antisamy	CVE-2017-14735	中危	1.4.4	1.5.7	OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14735 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-09-25 21:29 修改: 2021-07-20 23:15
org.owasp.antisamy:antisamy	CVE-2022-28367	中危	1.4.4	1.6.6	OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28367 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-21 23:15 修改: 2022-05-03 20:49
org.owasp.antisamy:antisamy	CVE-2022-28367	中危	1.4.4	1.6.6	OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28367 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-21 23:15 修改: 2022-05-03 20:49
org.owasp.antisamy:antisamy	CVE-2022-29577	中危	1.4.4	1.6.7	Cross-site Scripting in OWASP AntiSamy 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29577 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-21 23:15 修改: 2023-02-23 18:47
org.owasp.antisamy:antisamy	CVE-2022-29577	中危	1.4.4	1.6.7	Cross-site Scripting in OWASP AntiSamy 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29577 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-21 23:15 修改: 2023-02-23 18:47
org.owasp.antisamy:antisamy	CVE-2023-43643	中危	1.4.4	1.7.4	AntiSamy is a library for performing fast, configurable cleansing of H ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43643 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-09 14:15 修改: 2023-10-13 17:35
org.owasp.antisamy:antisamy	CVE-2023-43643	中危	1.4.4	1.7.4	AntiSamy is a library for performing fast, configurable cleansing of H ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43643 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-09 14:15 修改: 2023-10-13 17:35
org.owasp.antisamy:antisamy	CVE-2024-23635	中危	1.4.4	1.7.5	AntiSamy is a library for performing fast, configurable cleansing of H ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23635 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-02 17:15 修改: 2024-02-10 01:38
org.owasp.antisamy:antisamy	CVE-2024-23635	中危	1.4.4	1.7.5	AntiSamy is a library for performing fast, configurable cleansing of H ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23635 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-02 17:15 修改: 2024-02-10 01:38
org.owasp.antisamy:antisamy	CVE-2016-10006	中危	1.5.3-atlassian-2	1.5.5	In OWASP AntiSamy before 1.5.5, by submitting a specially crafted inpu ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10006 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2016-12-24 18:59 修改: 2019-11-14 13:22
org.owasp.antisamy:antisamy	CVE-2017-14735	中危	1.5.3-atlassian-2	1.5.7	OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14735 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-09-25 21:29 修改: 2021-07-20 23:15
org.owasp.antisamy:antisamy	CVE-2022-28367	中危	1.5.3-atlassian-2	1.6.6	OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28367 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-21 23:15 修改: 2022-05-03 20:49
org.owasp.antisamy:antisamy	CVE-2022-29577	中危	1.5.3-atlassian-2	1.6.7	Cross-site Scripting in OWASP AntiSamy 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29577 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-21 23:15 修改: 2023-02-23 18:47
org.owasp.antisamy:antisamy	CVE-2023-43643	中危	1.5.3-atlassian-2	1.7.4	AntiSamy is a library for performing fast, configurable cleansing of H ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43643 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-09 14:15 修改: 2023-10-13 17:35
org.owasp.antisamy:antisamy	CVE-2024-23635	中危	1.5.3-atlassian-2	1.7.5	AntiSamy is a library for performing fast, configurable cleansing of H ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23635 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-02-02 17:15 修改: 2024-02-10 01:38
com.thoughtworks.xstream:xstream	CVE-2021-21349	中危	1.4.10	1.4.16	XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21349 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21350	中危	1.4.10	1.4.16	XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21350 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
net.minidev:json-smart	CVE-2021-27568	中危	1.3.1	1.3.2, 2.4.1, 2.3.1	json-smart: uncaught exception may lead to crash or information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-02-23 02:15 修改: 2023-11-07 03:31
net.minidev:json-smart	CVE-2021-27568	中危	1.3.1	1.3.2, 2.4.1, 2.3.1	json-smart: uncaught exception may lead to crash or information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-02-23 02:15 修改: 2023-11-07 03:31
org.postgresql:postgresql	GHSA-673j-qm5f-xpv8	中危	42.1.1	42.3.3	pgjdbc Arbitrary File Write Vulnerability 漏洞详情: https://github.com/advisories/GHSA-673j-qm5f-xpv8 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.apache.ant:ant	CVE-2020-1945	中危	1.10.4	1.9.15, 1.10.8	ant: insecure temporary file vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1945 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-05-14 16:15 修改: 2023-11-07 03:19
org.apache.ant:ant	CVE-2021-36373	中危	1.10.4	1.9.16, 1.10.11	ant: excessive memory allocation when reading a specially crafted TAR archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36373 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-07-14 07:15 修改: 2023-11-07 03:36
org.springframework.ldap:spring-ldap-core	CVE-2024-38829	中危	2.2.1.RELEASE	3.2.8, 2.4.4	spring-ldap: Spring LDAP sensitive data exposure for case-sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38829 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-04 21:15 修改: 2024-12-10 15:15
org.apache.ant:ant	CVE-2021-36374	中危	1.10.4	1.9.16, 1.10.11	ant: excessive memory allocation when reading a specially crafted ZIP archive or a derived formats 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36374 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-07-14 07:15 修改: 2023-11-07 03:36
com.thoughtworks.xstream:xstream	CVE-2021-21351	中危	1.4.10	1.4.16	XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21351 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-39140	中危	1.4.10	1.4.18	xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39140 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-08-23 19:15 修改: 2023-11-07 03:37
com.squareup.okio:okio	CVE-2023-3635	中危	1.14.1	3.4.0, 1.17.6	okio: GzipSource class improper exception handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-07-12 19:15 修改: 2023-10-25 15:17
com.google.guava:guava	CVE-2023-2976	中危	20.0	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
org.springframework.security:spring-security-core	CVE-2020-5408	中危	3.2.5.RELEASE	5.3.2, 5.2.4, 5.1.10, 5.0.16, 4.2.16	Insufficient Entropy in Spring Security 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-5408 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-05-14 18:15 修改: 2021-06-14 18:15
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.7.1	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
ch.qos.logback:logback-core	CVE-2021-42550	中危	1.2.1	1.2.9	logback: remote code execution through JNDI call from within its configuration file 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-12-16 19:15 修改: 2022-12-12 21:13
org.springframework:spring-beans	CVE-2024-38827	中危	4.2.5.RELEASE	6.1.14	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-02 15:15 修改: 2024-12-02 15:15
ch.qos.logback:logback-core	CVE-2024-12798	中危	1.2.1	1.5.13	logback-core: arbitrary code execution via JaninoEventEvaluator 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-19 16:15 修改: 2024-12-19 16:15
org.apache.commons:commons-compress	CVE-2018-11771	中危	1.8	1.18	apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11771 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-08-16 15:29 修改: 2023-11-07 02:51
org.springframework:spring-beans	CVE-2024-38827	中危	4.3.20.RELEASE	6.1.14	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-02 15:15 修改: 2024-12-02 15:15
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-03-21 09:15 修改: 2024-12-13 14:15
org.springframework:spring-context	CVE-2024-38820	中危	4.2.5.RELEASE	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-10-18 06:15 修改: 2024-11-29 12:15
org.springframework:spring-context	CVE-2024-38827	中危	4.2.5.RELEASE	6.1.14	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-02 15:15 修改: 2024-12-02 15:15
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-03-21 09:15 修改: 2024-11-04 17:35
org.springframework:spring-context	CVE-2024-38820	中危	4.3.20.RELEASE	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-10-18 06:15 修改: 2024-11-29 12:15
org.springframework:spring-context	CVE-2024-38827	中危	4.3.20.RELEASE	6.1.14	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-02 15:15 修改: 2024-12-02 15:15
org.apache.httpcomponents:httpclient	CVE-2015-5262	中危	4.3.5	4.3.6	httpcomponents-core: missing HTTPS connection timeout 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5262 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2015-10-27 16:59 修改: 2023-02-13 00:52
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.3.5	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.4.1	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.4.1	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.3	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
org.springframework:spring-core	CVE-2018-1257	中危	4.2.5.RELEASE	5.0.6, 4.3.17	spring-framework: ReDoS Attack with spring-messaging 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1257 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-05-11 20:29 修改: 2022-06-23 16:31
org.springframework:spring-core	CVE-2018-1271	中危	4.2.5.RELEASE	5.0.5, 4.3.15	spring-framework: Directory traversal vulnerability with static resources on Windows filesystems 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1271 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-04-06 13:29 修改: 2022-06-23 16:33
org.springframework:spring-core	CVE-2024-38827	中危	4.2.5.RELEASE	6.1.14	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-02 15:15 修改: 2024-12-02 15:15
org.springframework:spring-core	CVE-2024-38827	中危	4.3.20.RELEASE	6.1.14	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-02 15:15 修改: 2024-12-02 15:15
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.5	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
org.springframework:spring-expression	CVE-2022-22950	中危	4.2.5.RELEASE	5.3.17, 5.2.20.RELEASE	spring-expression: Denial of service via specially crafted SpEL expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-01 23:15 修改: 2022-06-22 13:53
org.springframework:spring-expression	CVE-2023-20861	中危	4.2.5.RELEASE	6.0.7, 5.3.26, 5.2.23.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-23 21:15 修改: 2023-04-20 09:15
org.springframework:spring-expression	CVE-2024-38808	中危	4.2.5.RELEASE	5.3.39	spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-08-20 08:15 修改: 2024-10-30 19:35
org.springframework:spring-expression	CVE-2024-38827	中危	4.2.5.RELEASE	6.1.14	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-02 15:15 修改: 2024-12-02 15:15
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.5	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
org.springframework:spring-expression	CVE-2022-22950	中危	4.3.20.RELEASE	5.3.17, 5.2.20.RELEASE	spring-expression: Denial of service via specially crafted SpEL expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-04-01 23:15 修改: 2022-06-22 13:53
org.springframework:spring-expression	CVE-2023-20861	中危	4.3.20.RELEASE	6.0.7, 5.3.26, 5.2.23.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-03-23 21:15 修改: 2023-04-20 09:15
org.springframework:spring-expression	CVE-2024-38808	中危	4.3.20.RELEASE	5.3.39	spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-08-20 08:15 修改: 2024-10-30 19:35
org.springframework:spring-expression	CVE-2024-38827	中危	4.3.20.RELEASE	6.1.14	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-02 15:15 修改: 2024-12-02 15:15
org.springframework:spring-jdbc	CVE-2024-38827	中危	4.3.20.RELEASE	6.1.14	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-02 15:15 修改: 2024-12-02 15:15
org.apache.pdfbox:pdfbox	CVE-2018-11797	中危	2.0.6	1.8.16, 2.0.12	pdfbox: unbounded computation in parser resulting in a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11797 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-10-05 20:29 修改: 2023-11-07 02:51
org.apache.pdfbox:pdfbox	CVE-2018-8036	中危	2.0.6	1.8.15, 2.0.11	pdfbox: Infinite loop in AFMParser.java allows for out of memory erros via crafted PDF 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8036 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2018-07-03 20:29 修改: 2023-11-07 03:01
org.apache.pdfbox:pdfbox	CVE-2021-27807	中危	2.0.6	2.0.23	pdfbox: infinite loop while loading a crafted PDF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27807 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-19 16:15 修改: 2023-11-07 03:32
org.apache.pdfbox:pdfbox	CVE-2021-27906	中危	2.0.6	2.0.23	pdfbox: OutOfMemory-Exception while loading a crafted PDF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27906 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-19 16:15 修改: 2023-11-07 03:32
org.springframework:spring-web	CVE-2024-38809	中危	4.2.5.RELEASE	5.3.38, 6.0.23, 6.1.12	org.springframework:spring-web: Spring Framework DoS via conditional HTTP request 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-09-27 17:15 修改: 2024-09-30 12:45
org.apache.pdfbox:pdfbox	CVE-2021-31811	中危	2.0.6	2.0.24	pdfbox: OutOfMemory-Exception while loading a crafted PDF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31811 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-06-12 10:15 修改: 2023-11-07 03:35
org.apache.pdfbox:pdfbox	CVE-2021-31812	中危	2.0.6	2.0.24	pdfbox: infinite loop while loading a crafted PDF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31812 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-06-12 10:15 修改: 2023-11-07 03:35
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.6.7.1	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
org.apache.poi:poi	CVE-2012-0213	中危	3.5-FINAL	3.10-beta1	jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-0213 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2012-08-07 21:55 修改: 2017-02-11 02:59
org.springframework:spring-web	CVE-2024-38809	中危	4.3.20.RELEASE	5.3.38, 6.0.23, 6.1.12	org.springframework:spring-web: Spring Framework DoS via conditional HTTP request 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-09-27 17:15 修改: 2024-09-30 12:45
org.apache.poi:poi	CVE-2014-3529	中危	3.5-FINAL	3.10.1	apache-poi: XML eXternal Entity (XXE) flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3529 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2014-09-04 17:55 修改: 2017-08-29 01:34
org.apache.poi:poi	CVE-2014-3574	中危	3.5-FINAL	3.10.1, 3.11-beta2	apache-poi: entity expansion (billion laughs) flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3574 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2014-09-04 17:55 修改: 2017-08-29 01:34
org.apache.poi:poi	CVE-2014-9527	中危	3.5-FINAL	3.11	apache-poi: denial of service in HSLFSlideShow via corrupted PPT file 漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9527 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2015-01-06 15:59 修改: 2017-02-11 02:59
org.apache.poi:poi	CVE-2017-5644	中危	3.5-FINAL	3.15	Apache POI in versions prior to release 3.15 allows remote attackers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5644 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-03-24 14:59 修改: 2020-10-20 22:15
org.apache.poi:poi	CVE-2019-12415	中危	3.5-FINAL	4.1.1	poi: a specially crafted Microsoft Excel document allows attacker to read files from the local filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12415 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-10-23 20:15 修改: 2023-11-07 03:03
org.apache.poi:poi-scratchpad	CVE-2012-0213	中危	3.5-FINAL	3.10-beta1	jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-0213 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2012-08-07 21:55 修改: 2017-02-11 02:59
com.thoughtworks.xstream:xstream	CVE-2020-26259	中危	1.1.1	1.4.15	XStream: arbitrary file deletion on the local host when unmarshalling 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26259 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-16 01:15 修改: 2023-11-07 03:20
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.1.0.1	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-15 17:15 修改: 2023-06-27 15:59
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.1.0.1	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-15 17:15 修改: 2024-12-12 17:15
com.thoughtworks.xstream:xstream	CVE-2021-21342	中危	1.1.1	1.4.16	XStream: SSRF via crafted input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21342 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
com.thoughtworks.xstream:xstream	CVE-2021-21343	中危	1.1.1	1.4.16	XStream: arbitrary file deletion on the local host via crafted input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21343 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
commons-httpclient:commons-httpclient	CVE-2012-5783	中危	3.1-atlassian-2	4.0	jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-5783 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2012-11-04 22:55 修改: 2021-04-23 17:28
com.thoughtworks.xstream:xstream	CVE-2021-21344	中危	1.1.1	1.4.16	XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21344 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.1.1.7	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-15 17:15 修改: 2023-06-27 15:59
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.1.1.7	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-15 17:15 修改: 2023-06-27 15:59
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.1.1.7	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-15 17:15 修改: 2024-12-12 17:15
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.1.1.7	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-06-15 17:15 修改: 2024-12-12 17:15
org.apache.santuario:xmlsec	CVE-2019-12400	中危	2.0.7	2.1.4	xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12400 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2019-08-23 21:15 修改: 2023-11-07 03:03
org.apache.santuario:xmlsec	CVE-2023-44483	中危	2.0.7	2.3.4, 2.2.6, 3.0.3	santuario: Private Key disclosure in debug-log output 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44483 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-10-20 10:15 修改: 2023-10-27 18:49
com.thoughtworks.xstream:xstream	CVE-2020-26259	中危	1.2	1.4.15	XStream: arbitrary file deletion on the local host when unmarshalling 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26259 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-16 01:15 修改: 2023-11-07 03:20
org.yaml:snakeyaml	CVE-2022-38749	中危	1.12	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38750	中危	1.12	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38751	中危	1.12	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38752	中危	1.12	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-41854	中危	1.12	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-11-11 13:15 修改: 2024-06-21 19:15
commons-io:commons-io	CVE-2021-29425	中危	2.4	2.7	apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-04-13 07:15 修改: 2023-11-07 03:32
commons-io:commons-io	CVE-2021-29425	中危	2.4	2.7	apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-04-13 07:15 修改: 2023-11-07 03:32
com.thoughtworks.xstream:xstream	CVE-2021-21342	中危	1.2	1.4.16	XStream: SSRF via crafted input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21342 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
org.yaml:snakeyaml	CVE-2022-38749	中危	1.22	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38750	中危	1.22	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38751	中危	1.22	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38752	中危	1.22	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-41854	中危	1.22	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-11-11 13:15 修改: 2024-06-21 19:15
commons-io:commons-io	CVE-2021-29425	中危	2.5	2.7	apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-04-13 07:15 修改: 2023-11-07 03:32
com.thoughtworks.xstream:xstream	CVE-2021-21343	中危	1.2	1.4.16	XStream: arbitrary file deletion on the local host via crafted input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21343 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-03-23 00:15 修改: 2023-11-07 03:29
commons-io:commons-io	CVE-2021-29425	中危	2.6	2.7	apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-04-13 07:15 修改: 2023-11-07 03:32
com.nimbusds:nimbus-jose-jwt	CVE-2017-12973	低危	2.16	4.39	Nimbus JOSE+JWT vulnerable to padding oracle attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12973 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2019-10-03 00:03
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	8.1.9.v20130131	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-07-07 21:15 修改: 2022-10-25 19:10
com.nimbusds:nimbus-jose-jwt	CVE-2017-12973	低危	2.16	4.39	Nimbus JOSE+JWT vulnerable to padding oracle attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12973 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2019-10-03 00:03
org.postgresql:postgresql	CVE-2022-26520	低危	42.1.1	42.3.3	postgresql-jdbc: Arbitrary File Write Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26520 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-03-10 17:47 修改: 2024-08-03 05:16
com.nimbusds:nimbus-jose-jwt	CVE-2017-12973	低危	2.16	4.39	Nimbus JOSE+JWT vulnerable to padding oracle attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12973 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2019-10-03 00:03
org.eclipse.jetty:jetty-server	CVE-2021-34428	低危	8.1.9.v20130131	9.4.41, 10.0.3, 11.0.3	jetty: SessionListener can prevent a session from being invalidated breaking logout 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34428 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2021-06-22 15:15 修改: 2023-11-07 03:35
org.eclipse.jetty:jetty-server	CVE-2023-26049	低危	8.1.9.v20130131	9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0	jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2023-04-18 21:15 修改: 2024-02-01 15:36
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	9.3.15.v20161220	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2022-07-07 21:15 修改: 2022-10-25 19:10
com.google.guava:guava	CVE-2020-8908	低危	18.0	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
com.google.guava:guava	CVE-2020-8908	低危	20.0	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
com.nimbusds:nimbus-jose-jwt	CVE-2017-12973	低危	4.9	4.39	Nimbus JOSE+JWT vulnerable to padding oracle attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12973 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2019-10-03 00:03
com.nimbusds:nimbus-jose-jwt	CVE-2017-12973	低危	4.9	4.39	Nimbus JOSE+JWT vulnerable to padding oracle attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12973 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2017-08-20 16:29 修改: 2019-10-03 00:03
ch.qos.logback:logback-core	CVE-2024-12801	低危	1.2.1	1.5.13	logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801 镜像层: sha256:7325b8e75811087dcba4026341cefe621cd9f11cd56dde646c32962c2212b283 发布日期: 2024-12-19 17:15 修改: 2024-12-19 17:15