docker.io/atlassian/jira-software:9.12.17 linux/arm64

docker.io/atlassian/jira-software:9.12.17 - Trivy安全扫描结果 扫描时间: 2026-09-15 10:42 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:32 中危漏洞:248 高危漏洞:102 严重漏洞:11

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-15 10:42

docker.io/atlassian/jira-software:9.12.17 (ubuntu 24.04) (ubuntu)
低危漏洞:20 中危漏洞:100 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
binutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
binutils-aarch64-linux-gnu CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-aarch64-linux-gnu CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-aarch64-linux-gnu CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-aarch64-linux-gnu CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-aarch64-linux-gnu CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-aarch64-linux-gnu CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-aarch64-linux-gnu CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-common CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-common CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
curl CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
curl CVE-2026-18924 中危 8.5.0-2ubuntu10.13 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
curl CVE-2026-19931 中危 8.5.0-2ubuntu10.13 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
curl CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
curl CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libbinutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libbinutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libbinutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.9 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:16e8e3e6cdb19e0e77e87b91324a18769a5aa00e1c36a32bf8f9cff37642b457

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-18374 中危 2.39-0ubuntu8.9 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:16e8e3e6cdb19e0e77e87b91324a18769a5aa00e1c36a32bf8f9cff37642b457

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libctf-nobfd0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libcurl4t64 CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
libcurl4t64 CVE-2026-18924 中危 8.5.0-2ubuntu10.13 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl4t64 CVE-2026-19931 中危 8.5.0-2ubuntu10.13 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl4t64 CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
libcurl4t64 CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libexpat1 CVE-2025-59375 中危 2.6.1-2ubuntu0.4 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libexpat1 CVE-2026-32776 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32777 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32778 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-41080 中危 2.6.1-2ubuntu0.4 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libexpat1 CVE-2026-45186 中危 2.6.1-2ubuntu0.4 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19
libexpat1 CVE-2026-50219 中危 2.6.1-2ubuntu0.4 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat1 CVE-2026-56131 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56132 中危 2.6.1-2ubuntu0.4 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56403 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56404 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56405 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat1 CVE-2026-56406 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat1 CVE-2026-56407 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1 CVE-2026-56408 中危 2.6.1-2ubuntu0.4 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libexpat1 CVE-2026-56409 中危 2.6.1-2ubuntu0.4 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat1 CVE-2026-56410 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1 CVE-2026-56411 中危 2.6.1-2ubuntu0.4 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1 CVE-2026-56412 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libexpat1 CVE-2026-66046 中危 2.6.1-2ubuntu0.4 Expat through 2.8.3 contains a denial of service vulnerability caused ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17
libexpat1 CVE-2026-72522 中危 2.6.1-2ubuntu0.4 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33
libexpat1 CVE-2026-76641 中危 2.6.1-2ubuntu0.4 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17
libexpat1 CVE-2026-76957 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56
libgprofng0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libsqlite3-0 CVE-2026-39113 中危 3.45.1-1ubuntu2.7 Buffer Overflow vulnerability in SQLite affected version source snapsh ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2026-08-25 21:17 修改: 2026-09-09 16:04
locales CVE-2026-18374 中危 2.39-0ubuntu8.9 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:16e8e3e6cdb19e0e77e87b91324a18769a5aa00e1c36a32bf8f9cff37642b457

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
perl-base CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:01c818468a75d080ea22eed90a9fa08caeb68931c680c3023b01a0b0427a8641

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
perl-base CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:01c818468a75d080ea22eed90a9fa08caeb68931c680c3023b01a0b0427a8641

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:01c818468a75d080ea22eed90a9fa08caeb68931c680c3023b01a0b0427a8641

发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:01c818468a75d080ea22eed90a9fa08caeb68931c680c3023b01a0b0427a8641

发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17
wget CVE-2021-31879 中危 1.21.4-1ubuntu4.5 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
zlib1g CVE-2026-85091 中危 1:1.3.dfsg-3.1ubuntu2.2 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:01c818468a75d080ea22eed90a9fa08caeb68931c680c3023b01a0b0427a8641

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
libctf-nobfd0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libctf-nobfd0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
binutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
binutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
binutils-aarch64-linux-gnu CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
binutils-common CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libsframe1 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libsframe1 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
binutils-common CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:01c818468a75d080ea22eed90a9fa08caeb68931c680c3023b01a0b0427a8641

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:01c818468a75d080ea22eed90a9fa08caeb68931c680c3023b01a0b0427a8641

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libbinutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:01c818468a75d080ea22eed90a9fa08caeb68931c680c3023b01a0b0427a8641

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:01c818468a75d080ea22eed90a9fa08caeb68931c680c3023b01a0b0427a8641

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libbinutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libctf0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libctf0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libgprofng0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libgprofng0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
binutils-aarch64-linux-gnu CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4c8dcdaa788f396fa2a30a265aaeb8f69b43dde887adb2d265c1eade48f88174

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
Java (jar)
低危漏洞:12 中危漏洞:148 高危漏洞:102 严重漏洞:11
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-handler CVE-2026-75595 严重 4.1.108.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75595 严重 4.1.108.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
org.apache.tika:tika-core CVE-2025-66516 严重 2.7.0 3.2.2 tika-core: tika-parsers: tika-parser-pdf-module: Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66516

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-04 17:15 修改: 2026-06-17 09:56
org.apache.tomcat:tomcat-catalina CVE-2025-24813 严重 9.0.98 11.0.3, 10.1.35, 9.0.99 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59
org.apache.tomcat:tomcat-catalina CVE-2026-43512 严重 9.0.98 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat:tomcat-catalina CVE-2026-43515 严重 9.0.98 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat:tomcat-catalina CVE-2026-65182 严重 9.0.98 11.0.25, 10.1.58, 9.0.121 Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27
org.apache.tomcat:tomcat-catalina CVE-2026-65905 严重 9.0.98 11.0.25, 10.1.58, 9.0.121 tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17
org.apache.tomcat:tomcat-catalina CVE-2026-68525 严重 9.0.98 11.0.25, 10.1.58, 9.0.121 org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15
org.apache.tomcat:tomcat-coyote CVE-2026-41293 严重 9.0.98 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat:tomcat-coyote-ffm CVE-2026-29145 严重 9.0.98 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Authentication bypass due to CLIENT_CERT soft fail misconfiguration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29145

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:29
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.14.1 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.14.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.15.3 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.15.3 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.15.3 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.15.3 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.15.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.15.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.15.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.15.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.15.4 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.15.4 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.15.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.15.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
com.h2database:h2 CVE-2022-45868 高危 2.1.214 2.2.220 The web-based admin console in H2 Database Engine before 2.2.220 can b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45868

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2022-11-23 21:15 修改: 2026-06-17 05:10
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 9.2.1 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 9.2.1.jre8 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.squareup.okhttp3:okhttp CVE-2021-0341 高危 3.14.9 4.9.2 okhttp: information disclosure via improperly used cryptographic function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-0341

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2021-02-10 17:15 修改: 2026-06-17 03:29
com.thoughtworks.xstream:xstream CVE-2024-47072 高危 1.4.20 1.4.21 com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-11-08 00:15 修改: 2026-06-17 07:56
com.thoughtworks.xstream:xstream CVE-2024-47072 高危 1.4.20 1.4.21 com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-11-08 00:15 修改: 2026-06-17 07:56
commons-beanutils:commons-beanutils CVE-2025-48734 高危 1.9.4 1.11.0 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils CVE-2025-48734 高危 1.9.4 1.11.0 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils CVE-2025-48734 高危 1.9.4 1.11.0 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils CVE-2025-48734 高危 1.9.4 1.11.0 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-fileupload:commons-fileupload CVE-2025-48976 高危 1.5 1.6.0 apache-commons-fileupload: Apache Commons FileUpload DoS via part headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48976

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
commons-fileupload:commons-fileupload CVE-2025-48976 高危 1.5 1.6.0 apache-commons-fileupload: Apache Commons FileUpload DoS via part headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48976

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
commons-io:commons-io CVE-2024-47554 高危 2.8.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
commons-io:commons-io CVE-2024-47554 高危 2.8.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
io.micrometer:micrometer-core CVE-2026-40984 高危 1.8.2 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-09 05:16 修改: 2026-09-11 13:17
io.netty:netty-codec CVE-2026-42583 高危 4.1.108.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec CVE-2026-42583 高危 4.1.108.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec CVE-2026-59901 高危 4.1.108.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec CVE-2026-59901 高危 4.1.108.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-http CVE-2026-33870 高危 4.1.108.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-03-27 20:16 修改: 2026-09-09 13:19
io.netty:netty-codec-http CVE-2026-33870 高危 4.1.108.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-03-27 20:16 修改: 2026-09-09 13:19
io.netty:netty-codec-http CVE-2026-42584 高危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http CVE-2026-42584 高危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http CVE-2026-42587 高危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http CVE-2026-42587 高危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http CVE-2026-55831 高危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55831 高危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.1.108.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-55833 高危 4.1.108.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.1.108.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http CVE-2026-56745 高危 4.1.108.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.108.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.108.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.108.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-03-27 20:16 修改: 2026-09-11 13:17
io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.108.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-03-27 20:16 修改: 2026-09-11 13:17
io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.14.1 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.14.1 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
io.netty:netty-handler CVE-2025-24970 高危 4.1.108.Final 4.1.118.Final io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24970

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-02-10 22:15 修改: 2026-06-17 08:59
io.netty:netty-handler CVE-2025-24970 高危 4.1.108.Final 4.1.118.Final io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24970

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-02-10 22:15 修改: 2026-06-17 08:59
io.netty:netty-handler CVE-2026-44249 高危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-11 22:16 修改: 2026-09-11 13:18
io.netty:netty-handler CVE-2026-44249 高危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-11 22:16 修改: 2026-09-11 13:18
io.netty:netty-handler CVE-2026-45416 高危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 15:16 修改: 2026-09-11 13:18
io.netty:netty-handler CVE-2026-45416 高危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 15:16 修改: 2026-09-11 13:18
io.netty:netty-handler CVE-2026-50010 高危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 16:16 修改: 2026-09-11 13:18
io.netty:netty-handler CVE-2026-50010 高危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 16:16 修改: 2026-09-11 13:18
net.minidev:json-smart CVE-2024-57699 高危 2.5.0 2.5.2 json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57699

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-02-05 22:15 修改: 2026-06-17 08:13
net.minidev:json-smart CVE-2024-57699 高危 2.5.0 2.5.2 json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57699

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-02-05 22:15 修改: 2026-06-17 08:13
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.1.3 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.1.3 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.1.3 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.1.3 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.15.3 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.15.3 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.15.3 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.15.3 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.15.4 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.15.4 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.16.0 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
org.apache.tomcat:tomcat-catalina CVE-2025-48988 高危 9.0.98 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat DoS in multipart upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat:tomcat-catalina CVE-2025-52520 高危 9.0.98 11.0.9, 10.1.43, 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat:tomcat-catalina CVE-2025-55752 高危 9.0.98 11.0.11, 10.1.45, 9.0.109 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.apache.tomcat:tomcat-catalina CVE-2026-34483 高危 9.0.98 9.0.116, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34483

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
org.apache.tomcat:tomcat-catalina CVE-2026-41284 高危 9.0.98 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat:tomcat-catalina CVE-2026-42498 高危 9.0.98 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
org.apache.tomcat:tomcat-catalina CVE-2026-43513 高危 9.0.98 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.12.7.1 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
org.apache.tomcat:tomcat-coyote CVE-2025-48989 高危 9.0.98 11.0.10, 10.1.44, 9.0.108 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30
org.apache.tomcat:tomcat-coyote CVE-2025-53506 高危 9.0.98 11.0.9, 10.1.43, 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38
org.apache.tomcat:tomcat-coyote CVE-2026-24734 高危 9.0.98 11.0.18, 10.1.52, 9.0.115 tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24734

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-02-17 19:21 修改: 2026-07-15 14:17
org.apache.tomcat:tomcat-coyote CVE-2026-24880 高危 9.0.98 9.0.116, 10.1.52, 11.0.20 Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.12.7.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
org.apache.tomcat:tomcat-tribes CVE-2026-29146 高危 9.0.98 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29146

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-09 20:16 修改: 2026-08-04 13:18
org.apache.tomcat:tomcat-tribes CVE-2026-34487 高危 9.0.98 9.0.117, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34487

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
org.apache.velocity:velocity CVE-2020-13936 高危 1.6.4-atlassian-25 velocity: arbitrary code execution when attacker is able to modify templates

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13936

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2021-03-10 08:15 修改: 2026-06-17 02:53
org.codehaus.jettison:jettison CVE-2022-40150 高危 1.1 1.5.2 jettison: memory exhaustion via user-supplied XML or JSON data

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.codehaus.jettison:jettison CVE-2022-45685 高危 1.1 1.5.2 jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison CVE-2022-45693 高危 1.1 1.5.2 jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison CVE-2023-1436 高危 1.1 1.5.4 jettison: Uncontrolled Recursion in JSONArray

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
org.lz4:lz4-java CVE-2025-12183 高危 1.8.0 1.8.1 lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31
org.lz4:lz4-java CVE-2025-66566 高危 1.8.0 lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57
org.postgresql:postgresql CVE-2026-42198 高危 42.7.2 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-29 16:16 修改: 2026-09-11 13:17
org.springframework.data:spring-data-commons CVE-2026-41716 高危 2.1.10.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.ldap:spring-ldap-core CVE-2026-41720 高危 2.4.0 4.0.4, 3.3.8 Spring LDAP has Authentication Bypass with Empty Password

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41720

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework.security:spring-security-crypto CVE-2025-22228 高危 5.7.13 6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16 spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22228

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-03-20 06:15 修改: 2026-06-17 08:45
io.netty:netty-codec-http CVE-2026-56746 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http CVE-2026-59898 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http CVE-2026-59898 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http CVE-2026-59899 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http CVE-2026-59899 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.108.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.108.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http CVE-2026-59921 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
io.netty:netty-codec-http CVE-2026-59921 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.15.3 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.16.0 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 9.37.3 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 9.37.3 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 9.37.3 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 9.37.3 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 9.37.3 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.15.3 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.108.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 16:16 修改: 2026-09-11 13:18
io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.108.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 16:16 修改: 2026-09-11 13:18
io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-common CVE-2024-47535 中危 4.1.108.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common CVE-2024-47535 中危 4.1.108.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common CVE-2025-25193 中危 4.1.108.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-common CVE-2025-25193 中危 4.1.108.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
com.squareup.okio:okio CVE-2023-3635 中危 1.17.2 3.4.0, 1.17.6 okio: GzipSource class improper exception handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14
com.sun.mail:jakarta.mail CVE-2025-7962 中危 1.6.5-atlassian-2 1.6.8, 2.0.2 com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7962

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-21 18:15 修改: 2026-06-23 12:16
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.15.3 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.12.7.1 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.12.7.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.12.7.1 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.15.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.15.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.15.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.15.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
io.netty:netty-handler CVE-2026-75596 中危 4.1.108.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75596 中危 4.1.108.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
commons-httpclient:commons-httpclient CVE-2012-5783 中危 3.1-jenkins-3 4.0 jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-5783

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2012-11-04 22:55 修改: 2026-04-29 01:13
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.15.3 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
org.apache.commons:commons-compress CVE-2024-25710 中危 1.24.0 1.26.0 commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:16
org.apache.commons:commons-compress CVE-2024-26308 中危 1.24.0 1.26.0 commons-compress: OutOfMemoryError unpacking broken Pack200 file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26308

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:17
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.1 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.11 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.12.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.5 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.6 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.6 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.6 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.8 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.9 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.1.3 5.6.3 org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.1.3 5.6.3 org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.15.3 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
commons-lang:commons-lang CVE-2025-48924 中危 2.4 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-lang:commons-lang CVE-2025-48924 中危 2.5 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.logging.log4j:log4j-1.2-api CVE-2026-34479 中危 2.17.2 2.25.4 org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34479

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-1.2-api CVE-2026-34479 中危 2.17.2 2.25.4 org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34479

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.17.2 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.17.2 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.17.2 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.18.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.22.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.17.2 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.17.2 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.17.2 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.17.2 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.17.2 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.17.2 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.17.2 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.17.2 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.17.2 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.18.0 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.18.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.18.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.22.0 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.22.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34478 中危 2.22.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34478

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.22.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.15.3 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.15.3 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.15.3 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.15.3 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.15.3 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
io.netty:netty-codec CVE-2025-58057 中危 4.1.108.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
io.netty:netty-codec CVE-2025-58057 中危 4.1.108.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.15.3 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.15.3 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.15.4 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.14.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.14.1 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.15.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.apache.tomcat:tomcat-catalina CVE-2025-49124 中危 9.0.98 11.0.8, 10.1.42, 9.0.106 Apache Tomcat installer for Windows has an untrusted search path vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat:tomcat-catalina CVE-2025-49125 中危 9.0.98 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat:tomcat-catalina CVE-2025-55668 中危 9.0.98 11.0.8, 10.1.42, 9.0.106 org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41
org.apache.tomcat:tomcat-catalina CVE-2026-25854 中危 9.0.98 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.15.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.15.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.15.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.15.4 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.15.4 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
org.apache.tomcat:tomcat-coyote CVE-2025-31650 中危 9.0.98 9.0.104, 10.1.40, 11.0.6 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31650

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
org.apache.tomcat:tomcat-coyote CVE-2025-52434 中危 9.0.98 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat:tomcat-coyote CVE-2025-66614 中危 9.0.98 11.0.15, 10.1.50, 9.0.113 tomcat: Client certificate verification bypass due to virtual host mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.15.4 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
org.apache.tomcat:tomcat-coyote-ffm CVE-2026-34500 中危 9.0.98 9.0.117, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Authentication bypass via client certificate misconfiguration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34500

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
io.netty:netty-codec-http CVE-2025-67735 中危 4.1.108.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http CVE-2025-67735 中危 4.1.108.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http CVE-2026-41417 中危 4.1.108.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
org.apache.velocity:velocity-tools CVE-2020-13959 中危 1.3 velocity: XSS in the default error page for VelocityView

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13959

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2021-03-10 08:15 修改: 2026-06-17 02:54
org.bouncycastle:bcprov-jdk15on CVE-2023-33201 中危 1.69 bouncycastle: potential blind LDAP injection attack using a self-signed certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on CVE-2023-33202 中危 1.69 1.70 bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2023-11-23 16:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on CVE-2024-29857 中危 1.69 1.78 org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23
org.bouncycastle:bcprov-jdk15on CVE-2024-30171 中危 1.69 1.78 bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk15on CVE-2024-34447 中危 1.69 1.78 org.bouncycastle: Use of Incorrectly-Resolved Name or Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34447

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-05-03 16:15 修改: 2026-06-17 07:33
org.bouncycastle:bcprov-jdk15on CVE-2023-33201 中危 1.70 bouncycastle: potential blind LDAP injection attack using a self-signed certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on CVE-2024-29857 中危 1.70 1.78 org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23
org.bouncycastle:bcprov-jdk15on CVE-2024-30171 中危 1.70 1.78 bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk15on CVE-2024-34447 中危 1.70 1.78 org.bouncycastle: Use of Incorrectly-Resolved Name or Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34447

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-05-03 16:15 修改: 2026-06-17 07:33
io.netty:netty-codec-http CVE-2026-41417 中危 4.1.108.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http CVE-2026-42580 中危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http CVE-2026-42580 中危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http CVE-2026-42581 中危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
org.codehaus.jettison:jettison CVE-2022-40149 中危 1.1 1.5.1 jettison: parser crash by stackoverflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.jsoup:jsoup CVE-2026-71497 中危 1.15.3 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-06 22:18 修改: 2026-09-10 20:41
org.jsoup:jsoup CVE-2026-71497 中危 1.15.3 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-06 22:18 修改: 2026-09-10 20:41
org.jsoup:jsoup CVE-2026-71497 中危 1.15.3 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-06 22:18 修改: 2026-09-10 20:41
org.jsoup:jsoup CVE-2026-71497 中危 1.15.3 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-06 22:18 修改: 2026-09-10 20:41
io.netty:netty-codec-http CVE-2026-42581 中危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http CVE-2026-42585 中危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
org.lz4:lz4-java CVE-2026-59949 中危 1.8.0 lz4-java: lz4-java: Denial of Service via insufficient validation in XXHash JNI implementations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-08-18 15:16 修改: 2026-08-18 18:18
org.owasp.antisamy:antisamy CVE-2023-43643 中危 1.6.8-atlassian-11 1.7.4 AntiSamy is a library for performing fast, configurable cleansing of H ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43643

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2023-10-09 14:15 修改: 2026-06-17 06:26
org.owasp.antisamy:antisamy CVE-2023-43643 中危 1.6.8-atlassian-11 1.7.4 AntiSamy is a library for performing fast, configurable cleansing of H ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43643

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2023-10-09 14:15 修改: 2026-06-17 06:26
org.owasp.antisamy:antisamy CVE-2024-23635 中危 1.6.8-atlassian-11 1.7.5 AntiSamy is a library for performing fast, configurable cleansing of H ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23635

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-02-02 17:15 修改: 2026-06-17 07:13
org.owasp.antisamy:antisamy CVE-2024-23635 中危 1.6.8-atlassian-11 1.7.5 AntiSamy is a library for performing fast, configurable cleansing of H ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23635

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-02-02 17:15 修改: 2026-06-17 07:13
io.netty:netty-codec-http CVE-2026-42585 中危 4.1.108.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http CVE-2026-50020 中危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.springframework.data:spring-data-commons CVE-2026-41711 中危 2.1.10.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41721 中危 2.1.10.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
io.netty:netty-codec-http CVE-2026-50020 中危 4.1.108.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.springframework.ldap:spring-ldap-core CVE-2024-38829 中危 2.4.0 3.2.8, 2.4.4 spring-ldap: Spring LDAP sensitive data exposure for case-sensitive comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38829

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-12-04 21:15 修改: 2026-06-17 07:41
org.springframework.security:spring-security-core CVE-2024-38827 中危 5.7.13 5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 spring-security: authorization bypass for case sensitive comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2024-12-02 15:15 修改: 2026-06-17 07:41
io.netty:netty-codec-http CVE-2026-56746 中危 4.1.108.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
commons-configuration:commons-configuration CVE-2025-46392 低危 1.0 apache-commons-configuration: Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46392

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-05-09 10:15 修改: 2026-06-17 09:26
io.netty:netty-codec-http CVE-2025-58056 低危 4.1.108.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
org.apache.tomcat:tomcat-catalina CVE-2025-31651 低危 9.0.98 9.0.104, 10.1.40, 11.0.6 tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31651

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
org.apache.tomcat:tomcat-catalina CVE-2025-46701 低危 9.0.98 9.0.105, 10.1.41, 11.0.7 tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26
org.apache.tomcat:tomcat-catalina CVE-2025-55754 低危 9.0.98 11.0.11, 10.1.45, 9.0.109 org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55754

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.apache.tomcat:tomcat-catalina CVE-2025-61795 低危 9.0.98 11.0.12, 10.1.47, 9.0.110 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50
org.apache.tomcat:tomcat-catalina CVE-2026-43514 低危 9.0.98 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat:tomcat-coyote CVE-2026-24733 低危 9.0.98 11.0.15, 10.1.50, 9.0.113 tomcat: security constraint bypass with HTTP/0.9

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24733

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-02-17 19:21 修改: 2026-06-17 10:23
org.mozilla:rhino CVE-2025-66453 低危 1.7.14 1.7.14.1, 1.7.15.1, 1.8.1 Rhino is an open-source implementation of JavaScript written entirely ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66453

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:56
org.mozilla:rhino CVE-2025-66453 低危 1.7.14 1.7.14.1, 1.7.15.1, 1.8.1 Rhino is an open-source implementation of JavaScript written entirely ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66453

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:56
org.springframework.security:spring-security-core CVE-2026-22746 低危 5.7.13 6.5.10, 7.0.5 Spring Security: Spring Security: Timing attack defense bypass allows information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22746

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2026-04-22 06:16 修改: 2026-06-17 10:20
io.netty:netty-codec-http CVE-2025-58056 低危 4.1.108.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:14b8f8465568c3a7add9f6316398fe9401b4a8f9ef7dcb5c116ab97fd7907b94

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
Node.js (node-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×