docker.io/bde2020/spark-worker:3.0.0-hadoop3.2 linux/amd64

docker.io/bde2020/spark-worker:3.0.0-hadoop3.2 - Trivy安全扫描结果 扫描时间: 2026-08-14 17:05
全部漏洞信息
低危漏洞:34 中危漏洞:95 高危漏洞:124 严重漏洞:38

系统OS: alpine 3.10.5 扫描引擎: Trivy 扫描时间: 2026-08-14 17:05

docker.io/bde2020/spark-worker:3.0.0-hadoop3.2 (alpine 3.10.5) (alpine)
低危漏洞:22 中危漏洞:35 高危漏洞:29 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
apk-tools CVE-2021-36159 严重 2.10.4-r2 2.10.7-r0 libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36159

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-08-03 14:15 修改: 2026-06-17 03:58
freetype CVE-2020-15999 严重 2.10.0-r0 2.10.0-r1 freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15999

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-11-03 03:15 修改: 2026-06-17 02:57
libbsd CVE-2019-20367 严重 0.9.1-r0 0.9.1-r1 nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a com ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20367

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-01-08 17:15 修改: 2026-06-17 02:30
libx11 CVE-2021-31535 严重 1.6.10-r0 1.6.12-r1 libX11: missing request length checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31535

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-05-27 13:15 修改: 2026-06-17 03:51
python3 CVE-2021-3177 严重 3.7.7-r1 3.7.7-r2 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-19 06:15 修改: 2026-06-17 04:04
curl CVE-2020-8231 高危 7.66.0-r0 7.66.0-r2 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
curl CVE-2020-8285 高危 7.66.0-r0 7.66.0-r3 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
curl CVE-2020-8286 高危 7.66.0-r0 7.66.0-r3 curl: Inferior OCSP verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
apk-tools CVE-2021-30139 高危 2.10.4-r2 2.10.6-r0

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-30139

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-04-21 16:15 修改: 2026-06-17 03:49
krb5-libs CVE-2020-28196 高危 1.17-r0 1.17.2-r0 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10
busybox CVE-2021-28831 高危 1.30.1-r3 1.30.1-r5 busybox: invalid free or segmentation fault via malformed gzip data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28831

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-03-19 05:15 修改: 2026-06-17 03:46
libcrypto1.1 CVE-2021-23840 高危 1.1.1g-r0 1.1.1j-r0 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libcrypto1.1 CVE-2021-3450 高危 1.1.1g-r0 1.1.1k-r0 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libcurl CVE-2020-8169 高危 7.66.0-r0 7.66.0-r1 libcurl: partial password leak over DNS on HTTP redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8169

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25
libcurl CVE-2020-8177 高危 7.66.0-r0 7.66.0-r1 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25
libcurl CVE-2020-8231 高危 7.66.0-r0 7.66.0-r2 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
libcurl CVE-2020-8285 高危 7.66.0-r0 7.66.0-r3 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
libcurl CVE-2020-8286 高危 7.66.0-r0 7.66.0-r3 curl: Inferior OCSP verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
libssl1.1 CVE-2021-23840 高危 1.1.1g-r0 1.1.1j-r0 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1 CVE-2021-3450 高危 1.1.1g-r0 1.1.1k-r0 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
curl CVE-2020-8169 高危 7.66.0-r0 7.66.0-r1 libcurl: partial password leak over DNS on HTTP redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8169

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25
libx11 CVE-2020-14363 高危 1.6.10-r0 1.6.12-r0 libX11: integer overflow leads to double free in locale handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14363

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-09-11 18:15 修改: 2026-06-17 02:54
openjdk8-jre CVE-2020-14583 高危 8.252.09-r0 8.272.10-r0 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14593 高危 8.252.09-r0 8.272.10-r0 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14583 高危 8.252.09-r0 8.272.10-r0 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14593 高危 8.252.09-r0 8.272.10-r0 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14583 高危 8.252.09-r0 8.272.10-r0 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14593 高危 8.252.09-r0 8.272.10-r0 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
p11-kit CVE-2020-29361 高危 0.23.16.1-r0 0.23.16.1-r1 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11
p11-kit CVE-2020-29363 高危 0.23.16.1-r0 0.23.16.1-r1 p11-kit: out-of-bounds write in p11_rpc_buffer_get_byte_array_value function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29363

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11
p11-kit-trust CVE-2020-29361 高危 0.23.16.1-r0 0.23.16.1-r1 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11
p11-kit-trust CVE-2020-29363 高危 0.23.16.1-r0 0.23.16.1-r1 p11-kit: out-of-bounds write in p11_rpc_buffer_get_byte_array_value function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29363

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11
curl CVE-2020-8177 高危 7.66.0-r0 7.66.0-r1 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25
ssl_client CVE-2021-28831 高危 1.30.1-r3 1.30.1-r5 busybox: invalid free or segmentation fault via malformed gzip data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28831

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-03-19 05:15 修改: 2026-06-17 03:46
openjdk8-jre CVE-2020-14621 中危 8.252.09-r0 8.272.10-r0 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14779 中危 8.252.09-r0 8.272.10-r0 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14781 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14782 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14792 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14797 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14803 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
libssl1.1 CVE-2020-1971 中危 1.1.1g-r0 1.1.1i-r0 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
libssl1.1 CVE-2021-23841 中危 1.1.1g-r0 1.1.1j-r0 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
openjdk8-jre-base CVE-2020-14556 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54
openjdk8-jre-base CVE-2020-14621 中危 8.252.09-r0 8.272.10-r0 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14779 中危 8.252.09-r0 8.272.10-r0 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14781 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14782 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14792 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14797 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14803 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
libssl1.1 CVE-2021-3449 中危 1.1.1g-r0 1.1.1k-r0 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libcrypto1.1 CVE-2021-3449 中危 1.1.1g-r0 1.1.1k-r0 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
openjdk8-jre-lib CVE-2020-14556 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54
openjdk8-jre-lib CVE-2020-14621 中危 8.252.09-r0 8.272.10-r0 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14779 中危 8.252.09-r0 8.272.10-r0 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14781 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14782 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14792 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14797 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14803 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
libc6-compat CVE-2020-28928 中危 1.1.22-r3 1.1.22-r4 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
musl CVE-2020-28928 中危 1.1.22-r3 1.1.22-r4 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
p11-kit CVE-2020-29362 中危 0.23.16.1-r0 0.23.16.1-r1 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11
musl-utils CVE-2020-28928 中危 1.1.22-r3 1.1.22-r4 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
libcrypto1.1 CVE-2020-1971 中危 1.1.1g-r0 1.1.1i-r0 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
p11-kit-trust CVE-2020-29362 中危 0.23.16.1-r0 0.23.16.1-r1 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11
libcrypto1.1 CVE-2021-23841 中危 1.1.1g-r0 1.1.1j-r0 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
openjdk8-jre CVE-2020-14556 中危 8.252.09-r0 8.272.10-r0 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54
libcurl CVE-2021-22898 低危 7.66.0-r0 7.66.0-r4 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37
libcrypto1.1 CVE-2021-23839 低危 1.1.1g-r0 1.1.1j-r0 openssl: incorrect SSLv2 rollback protection

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
openjdk8-jre CVE-2020-14577 低危 8.252.09-r0 8.272.10-r0 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14578 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14579 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14581 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Information disclosure in color management (2D, 8238002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14796 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre CVE-2020-14798 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14577 低危 8.252.09-r0 8.272.10-r0 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14578 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14579 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14581 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Information disclosure in color management (2D, 8238002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14796 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib CVE-2020-14798 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14577 低危 8.252.09-r0 8.272.10-r0 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14578 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14579 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14581 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Information disclosure in color management (2D, 8238002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14796 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base CVE-2020-14798 低危 8.252.09-r0 8.272.10-r0 OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
curl CVE-2021-22898 低危 7.66.0-r0 7.66.0-r4 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37
libssl1.1 CVE-2021-23839 低危 1.1.1g-r0 1.1.1j-r0 openssl: incorrect SSLv2 rollback protection

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839

镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
Java (jar)
低危漏洞:12 中危漏洞:60 高危漏洞:95 严重漏洞:33
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.fasterxml.jackson.core:jackson-databind CVE-2017-15095 严重 2.4.0 2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-02-06 15:29 修改: 2026-06-17 01:07
com.fasterxml.jackson.core:jackson-databind CVE-2017-17485 严重 2.4.0 2.9.4, 2.8.11, 2.7.9.2 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-01-10 18:29 修改: 2026-06-17 01:10
com.fasterxml.jackson.core:jackson-databind CVE-2017-7525 严重 2.4.0 2.6.7.1, 2.7.9.1, 2.8.9 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7525

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-02-06 15:29 修改: 2026-06-17 01:24
com.fasterxml.jackson.core:jackson-databind CVE-2018-11307 严重 2.4.0 2.7.9.4, 2.8.11.2, 2.9.6 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-07-09 16:15 修改: 2026-06-17 01:35
com.fasterxml.jackson.core:jackson-databind CVE-2018-14718 严重 2.4.0 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 jackson-databind: arbitrary code execution in slf4j-ext class

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41
com.fasterxml.jackson.core:jackson-databind CVE-2018-14719 严重 2.4.0 2.9.7, 2.8.11.3, 2.7.9.5 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41
com.fasterxml.jackson.core:jackson-databind CVE-2018-19362 严重 2.4.0 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 jackson-databind: improper polymorphic deserialization in jboss-common-core class

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:49
com.fasterxml.jackson.core:jackson-databind CVE-2018-7489 严重 2.4.0 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-02-26 15:29 修改: 2026-06-17 02:03
com.fasterxml.jackson.core:jackson-databind CVE-2019-14379 严重 2.4.0 2.9.9.2, 2.8.11.4, 2.7.9.6 jackson-databind: default typing mishandling leading to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-07-29 12:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind CVE-2019-14540 严重 2.4.0 2.9.10, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind CVE-2019-16335 严重 2.4.0 2.9.10, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:22
com.fasterxml.jackson.core:jackson-databind CVE-2019-16942 严重 2.4.0 2.9.10.1, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind CVE-2019-16943 严重 2.4.0 2.9.10.1, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind CVE-2019-17267 严重 2.4.0 2.9.10, 2.8.11.5 jackson-databind: Serialization gadgets in classes of the ehcache package

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-10-07 00:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind CVE-2019-17531 严重 2.4.0 2.9.10.1, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-10-12 21:15 修改: 2026-06-17 02:24
com.fasterxml.jackson.core:jackson-databind CVE-2019-20330 严重 2.4.0 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 jackson-databind: lacks certain net.sf.ehcache blocking

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-01-03 04:15 修改: 2026-06-17 02:30
com.fasterxml.jackson.core:jackson-databind CVE-2020-8840 严重 2.4.0 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 jackson-databind: Lacks certain xbean-reflect/JNDI blocking

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-02-10 21:56 修改: 2026-06-17 03:27
com.fasterxml.jackson.core:jackson-databind CVE-2020-9547 严重 2.4.0 2.9.10.4, 2.8.11.6, 2.7.9.7 jackson-databind: Serialization gadgets in ibatis-sqlmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-9548 严重 2.4.0 2.9.10.4, 2.8.11.6, 2.7.9.7 jackson-databind: Serialization gadgets in anteros-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28
com.nimbusds:nimbus-jose-jwt CVE-2019-17195 严重 4.41.1 7.9 nimbus-jose-jwt: Uncaught exceptions while parsing a JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-10-15 14:15 修改: 2026-06-17 02:23
log4j:log4j CVE-2019-17571 严重 1.2.17 log4j: deserialization of untrusted data in SocketServer

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-12-20 17:15 修改: 2026-06-17 02:24
log4j:log4j CVE-2022-23305 严重 1.2.17 log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j CVE-2022-23307 严重 1.2.17 log4j: Unsafe deserialization flaw in Chainsaw log viewer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
org.apache.avro:avro CVE-2024-47561 严重 1.8.2 1.11.4 apache-avro: Schema parsing may trigger Remote Code Execution (RCE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-10-03 11:15 修改: 2026-06-17 07:57
org.apache.commons:commons-text CVE-2022-42889 严重 1.6 1.10.0 apache-commons-text: variable interpolation RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42889

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-10-13 13:15 修改: 2026-06-17 05:05
org.apache.derby:derby CVE-2022-46337 严重 10.12.1.1 10.14.2.1, 10.16.1.2, 10.15.2.1 A cleverly devised username might bypass LDAP authentication checks. I ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46337

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-11-20 09:15 修改: 2026-06-17 05:11
org.apache.hadoop:hadoop-common CVE-2021-37404 严重 3.2.0 3.3.2, 3.2.3, 2.10.2 hadoop-hdfs: Heap buffer overflow in Apache Hadoop libhdfs

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37404

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-06-13 07:15 修改: 2026-06-17 04:00
org.apache.hadoop:hadoop-common CVE-2022-25168 严重 3.2.0 2.10.2, 3.2.4, 3.3.3 hadoop: Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25168

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-08-04 15:15 修改: 2026-06-17 04:33
org.apache.hadoop:hadoop-common CVE-2022-26612 严重 3.2.0 3.2.3, 2.10.2, 3.3.3 hadoop: Arbitrary file write in FileUtil#unpackEntries on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26612

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-04-07 19:15 修改: 2026-06-17 04:35
org.apache.ivy:ivy CVE-2022-37865 严重 2.4.0 2.5.1 apache-ivy: Directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37865

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-11-07 11:15 修改: 2026-06-17 04:55
org.apache.spark:spark-core_2.12 CVE-2023-22946 严重 3.0.0 3.3.3 Apache Spark vulnerable to Improper Privilege Management

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22946

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-04-17 08:15 修改: 2026-06-17 05:36
org.apache.zookeeper:zookeeper CVE-2023-44981 严重 3.4.14 3.7.2, 3.8.3, 3.9.1 zookeeper: Authorization Bypass in Apache ZooKeeper

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-10-11 12:15 修改: 2026-06-17 06:28
org.codehaus.jackson:jackson-mapper-asl CVE-2019-10202 严重 1.9.13 codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10202

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-10-01 15:15 修改: 2026-06-17 02:10
com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.10.0 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.10.0 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.10.0 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.10.0 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.10.0 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.10.0 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-08-13 13:19
com.fasterxml.jackson.core:jackson-databind CVE-2018-12022 高危 2.4.0 2.7.9.4, 2.8.11.2, 2.9.6 jackson-databind: improper polymorphic deserialization of types from Jodd-db library

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-03-21 16:00 修改: 2026-06-17 01:37
com.fasterxml.jackson.core:jackson-databind CVE-2018-5968 高危 2.4.0 2.8.11.1, 2.9.4, 2.7.9.5 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-01-22 04:29 修改: 2026-06-17 02:01
com.fasterxml.jackson.core:jackson-databind CVE-2019-12086 高危 2.4.0 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-05-17 17:29 修改: 2026-06-17 02:14
com.fasterxml.jackson.core:jackson-databind CVE-2019-14439 高危 2.4.0 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: Polymorphic typing issue related to logback/JNDI

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-07-30 11:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind CVE-2019-14892 高危 2.4.0 2.6.7.3, 2.8.11.5, 2.9.10 jackson-databind: Serialization gadgets in classes of the commons-configuration package

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-03-02 17:15 修改: 2026-06-17 02:19
com.fasterxml.jackson.core:jackson-databind CVE-2020-10650 高危 2.4.0 2.9.10.4 A deserialization flaw was discovered in jackson-databind through 2.9. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-12-26 20:15 修改: 2026-06-17 02:48
com.fasterxml.jackson.core:jackson-databind CVE-2020-10673 高危 2.4.0 2.9.10.4, 2.6.7.4 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-03-18 22:15 修改: 2026-06-17 02:48
com.fasterxml.jackson.core:jackson-databind CVE-2020-24616 高危 2.4.0 2.9.10.6 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-08-25 18:15 修改: 2026-06-17 03:05
com.fasterxml.jackson.core:jackson-databind CVE-2020-24750 高危 2.4.0 2.6.7.5, 2.9.10.6 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-09-17 19:15 修改: 2026-06-17 03:06
com.fasterxml.jackson.core:jackson-databind CVE-2020-35490 高危 2.4.0 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-17 19:15 修改: 2026-06-17 03:13
com.fasterxml.jackson.core:jackson-databind CVE-2020-35491 高危 2.4.0 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-17 19:15 修改: 2026-06-17 03:13
com.fasterxml.jackson.core:jackson-databind CVE-2020-35728 高危 2.4.0 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-27 05:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36179 高危 2.4.0 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36180 高危 2.4.0 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36181 高危 2.4.0 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36182 高危 2.4.0 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36183 高危 2.4.0 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36184 高危 2.4.0 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36185 高危 2.4.0 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36186 高危 2.4.0 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36187 高危 2.4.0 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36188 高危 2.4.0 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36189 高危 2.4.0 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.4.0 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15
com.fasterxml.jackson.core:jackson-databind CVE-2021-20190 高危 2.4.0 2.9.10.7, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-19 17:15 修改: 2026-07-24 14:27
com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.4.0 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.4.0 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.google.code.gson:gson CVE-2022-25647 高危 2.2.4 2.8.9 com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33
com.google.protobuf:protobuf-java CVE-2021-22569 高危 2.5.0 3.16.1, 3.18.2, 3.19.2 protobuf-java: potential DoS in the parsing procedure for binary data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37
com.google.protobuf:protobuf-java CVE-2024-7254 高危 2.5.0 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.google.protobuf:protobuf-java CVE-2021-22569 高危 3.3.0 3.16.1, 3.18.2, 3.19.2 protobuf-java: potential DoS in the parsing procedure for binary data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37
com.google.protobuf:protobuf-java CVE-2022-3509 高危 3.3.0 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Textformat parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java CVE-2022-3510 高危 3.3.0 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Message-Type Extensions parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java CVE-2024-7254 高危 3.3.0 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.10.0 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-08-13 13:19
com.nimbusds:nimbus-jose-jwt CVE-2023-52428 高危 4.41.1 9.37.2 nimbus-jose-jwt: large JWE p2c header value causes Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
com.squareup.okhttp3:okhttp CVE-2021-0341 高危 3.12.6 4.9.2 okhttp: information disclosure via improperly used cryptographic function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-0341

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-02-10 17:15 修改: 2026-06-17 03:29
commons-beanutils:commons-beanutils CVE-2025-48734 高危 1.9.4 1.11.0 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-io:commons-io CVE-2024-47554 高危 2.4 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
dnsjava:dnsjava CVE-2024-25638 高危 2.1.7 3.6.0 dnsjava: Improper response validation allowing DNSSEC bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-07-22 14:15 修改: 2026-06-17 07:16
io.airlift:aircompressor CVE-2024-36114 高危 0.10 0.27 Decompressors can crash the JVM and leak memory content in Aircompressor

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36114

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-05-29 21:15 修改: 2026-06-17 07:36
io.airlift:aircompressor CVE-2025-67721 高危 0.10 2.0.3 aircompressor Snappy and LZ4 Java-based decompressor implementation can leak information from reused output buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67721

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-12-12 23:15 修改: 2026-06-17 09:58
io.fabric8:kubernetes-client CVE-2021-20218 高危 4.9.2 4.7.2, 4.11.2, 4.13.2, 5.0.2 fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20218

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-03-16 21:15 修改: 2026-06-17 03:33
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.10.0 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.10.0 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.10.0 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
log4j:log4j CVE-2021-4104 高危 1.2.17 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-12-14 12:15 修改: 2026-06-17 04:19
log4j:log4j CVE-2022-23302 高危 1.2.17 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j CVE-2023-26464 高危 1.2.17 2.0 log4j1-socketappender: DoS via hashmap logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26464

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-03-10 14:15 修改: 2026-06-17 05:43
net.minidev:json-smart CVE-2023-1370 高危 2.3 2.4.9 json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.10.0 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
org.apache.avro:avro CVE-2023-39410 高危 1.8.2 1.11.3 apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-09-29 17:15 修改: 2026-06-17 06:12
org.apache.commons:commons-compress CVE-2021-35515 高危 1.8.1 1.21 apache-commons-compress: infinite loop when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress CVE-2021-35516 高危 1.8.1 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress CVE-2021-35517 高危 1.8.1 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress CVE-2021-36090 高危 1.8.1 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:58
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.4.0 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.4.0 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2020-25649 高危 2.10.0 2.6.7.4, 2.9.10.7, 2.10.5.1 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-03 17:15 修改: 2026-06-17 03:07
com.fasterxml.jackson.core:jackson-databind CVE-2020-25649 高危 2.10.0 2.6.7.4, 2.9.10.7, 2.10.5.1 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-03 17:15 修改: 2026-06-17 03:07
com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.10.0 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15
org.apache.hadoop:hadoop-common CVE-2020-9492 高危 3.2.0 3.2.2, 3.1.4, 2.10.1 hadoop: WebHDFS client might send SPNEGO authorization header

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9492

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-01-26 18:16 修改: 2026-06-17 03:28
org.apache.hadoop:hadoop-yarn-server-common CVE-2021-33036 高危 3.2.0 2.10.2, 3.2.3, 3.3.2 hadoop: privilege escalation via yarn user

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33036

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-06-15 15:15 修改: 2026-06-17 03:54
com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.10.0 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15
org.apache.ivy:ivy CVE-2022-37866 高危 2.4.0 2.5.1 Ivy: Ivy Path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37866

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-11-07 14:15 修改: 2026-06-17 04:55
org.apache.ivy:ivy CVE-2022-46751 高危 2.4.0 2.5.2 apache-ivy: XML External Entity vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46751

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-08-21 07:15 修改: 2026-06-17 05:12
org.apache.mesos:mesos CVE-2018-11793 高危 1.4.0 1.4.3, 1.5.2, 1.6.2, 1.7.1 mesos: stack overflow vulnerability in parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11793

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-03-05 21:29 修改: 2026-06-17 01:36
org.apache.mesos:mesos CVE-2018-1330 高危 1.4.0 1.6.0 Crash when decoding malformed HTTP requests or malformed JSON payload

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1330

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-09-13 19:29 修改: 2026-06-17 01:51
org.apache.mesos:mesos CVE-2019-0204 高危 1.4.0 1.4.3, 1.5.3, 1.6.2, 1.7.2 mesos: docker image code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0204

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-03-25 22:29 修改: 2026-06-17 02:07
com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 高危 2.10.0 2.12.6, 2.13.1 jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-03-18 22:15 修改: 2026-06-17 04:15
org.apache.spark:spark-core_2.12 CVE-2025-54920 高危 3.0.0 3.5.7 org.apache.spark/spark-core: Apache Spark: Spark History Server Code Execution Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54920

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-03-16 14:17 修改: 2026-06-17 09:40
org.apache.spark:spark-hive-thriftserver_2.12 CVE-2024-23945 高危 3.0.0 3.4.2 Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23945

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-12-23 16:15 修改: 2026-06-17 07:13
org.apache.thrift:libthrift CVE-2019-0205 高危 0.12.0 0.13.0 thrift: Endless loop when feed with specific input data

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0205

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-10-29 19:15 修改: 2026-06-17 02:07
org.apache.thrift:libthrift CVE-2020-13949 高危 0.12.0 0.14.0 libthrift: potential DoS when processing untrusted payloads

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13949

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-02-12 20:15 修改: 2026-06-17 02:53
org.apache.thrift:libthrift CVE-2026-43869 高危 0.12.0 0.23.0 Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43869

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-05-05 08:16 修改: 2026-08-11 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 高危 2.10.0 2.12.6, 2.13.1 jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-03-18 22:15 修改: 2026-06-17 04:15
com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.10.0 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
org.codehaus.jackson:jackson-mapper-asl CVE-2019-10172 高危 1.9.13 jackson-mapper-asl: XML external entity similar to CVE-2016-3720

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10172

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-11-18 17:15 修改: 2026-06-17 02:10
org.eclipse.jetty:jetty-http CVE-2026-2332 高危 9.4.18.v20190429 12.1.7, 12.0.33 org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-04-14 12:16 修改: 2026-08-10 13:18
org.eclipse.jetty:jetty-security CVE-2026-10050 高危 9.4.18.v20190429 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-08-04 11:22 修改: 2026-08-08 00:38
org.eclipse.jetty:jetty-server CVE-2021-28165 高危 9.4.18.v20190429 9.4.39, 10.0.2, 11.0.2 jetty: Resource exhaustion when receiving an invalid large TLS frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28165

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-04-01 15:15 修改: 2026-06-17 03:45
org.eclipse.jetty:jetty-server CVE-2024-13009 高危 9.4.18.v20190429 9.4.57.v20241219 jetty-server: Jetty: Gzip Request Body Buffer Corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13009

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-05-08 18:15 修改: 2026-06-17 07:00
org.lz4:lz4-java CVE-2025-12183 高危 1.7.1 1.8.1 lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31
org.lz4:lz4-java CVE-2025-66566 高危 1.7.1 lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57
org.xerial.snappy:snappy-java CVE-2023-34455 高危 1.1.7.5 1.1.10.1 snappy-java: Unchecked chunk length leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-06-15 18:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java CVE-2023-43642 高危 1.1.7.5 1.1.10.4 snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-09-25 20:15 修改: 2026-06-17 06:26
org.yaml:snakeyaml CVE-2017-18640 高危 1.24 1.26 snakeyaml: Billion laughs attack via alias feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13
org.yaml:snakeyaml CVE-2022-1471 高危 1.24 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml CVE-2022-25857 高危 1.24 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34
org.apache.commons:commons-configuration2 CVE-2024-29133 中危 2.1.1 2.10.1 commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.9 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.9 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
com.google.protobuf:protobuf-java CVE-2022-3171 中危 3.3.0 3.21.7, 3.20.3, 3.19.6, 3.16.3 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.10.0 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
org.apache.derby:derby CVE-2018-1313 中危 10.12.1.1 10.14.2.0 derby: Externally-controlled input vulnerability allows remote attacker to boot a database under attacker's control

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1313

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-05-07 13:29 修改: 2026-06-17 01:50
com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.4.0 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 4.41.1 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.fasterxml.jackson.core:jackson-databind CVE-2019-12384 中危 2.4.0 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-06-24 16:15 修改: 2026-06-17 02:14
com.squareup.okio:okio CVE-2023-3635 中危 1.15.0 3.4.0, 1.17.6 okio: GzipSource class improper exception handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14
com.fasterxml.jackson.core:jackson-databind CVE-2019-12814 中危 2.4.0 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2019-06-19 14:15 修改: 2026-06-17 02:15
org.apache.hive:hive-exec CVE-2024-29869 中危 2.3.7 4.0.1 Apache Hive Incorrectly Assigns Permissions for a Critical Resource

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29869

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-01-28 22:15 修改: 2026-06-17 07:23
org.apache.hive:hive-llap-common CVE-2024-23953 中危 2.3.7 4.0.0 Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23953

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-01-28 09:15 修改: 2026-06-17 07:13
org.apache.httpcomponents:httpclient CVE-2020-13956 中危 4.5.6 4.5.13, 5.0.3 apache-httpclient: incorrect handling of malformed authority component in request URIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53
commons-httpclient:commons-httpclient CVE-2012-5783 中危 3.1 4.0 jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-5783

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2012-11-04 22:55 修改: 2026-04-29 01:13
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.4.0 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
commons-io:commons-io CVE-2021-29425 中危 2.4 2.7 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-04-13 07:15 修改: 2026-06-17 03:47
commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-net:commons-net CVE-2021-37533 中危 3.1 3.9.0 apache-commons-net: FTP client trusts the host from PASV response by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00
com.fasterxml.woodstox:woodstox-core CVE-2022-40152 中危 5.0.3 6.4.0, 5.4.0 woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.apache.mesos:mesos CVE-2018-8023 中危 1.4.0 1.4.2, 1.5.2, 1.6.1 mesos: Exposure of HMAC value via timing vulnerability in JWT validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8023

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-09-21 13:29 修改: 2026-06-17 02:04
com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.10.0 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
com.google.guava:guava CVE-2018-10237 中危 11.0.2 24.1.1-android guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
org.apache.spark:spark-core_2.12 CVE-2022-31777 中危 3.0.0 3.2.2, 3.3.1 apache-spark: XSS vulnerability in log viewer UI Javascript

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31777

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-11-01 16:15 修改: 2026-06-17 04:46
com.google.guava:guava CVE-2023-2976 中危 11.0.2 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.google.guava:guava CVE-2018-10237 中危 14.0.1 24.1.1-android guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
com.google.guava:guava CVE-2018-10237 中危 14.0.1 24.1.1-android guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
com.google.guava:guava CVE-2018-10237 中危 14.0.1 24.1.1-android guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
com.google.guava:guava CVE-2023-2976 中危 14.0.1 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.google.guava:guava CVE-2023-2976 中危 14.0.1 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.google.guava:guava CVE-2023-2976 中危 14.0.1 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.10.0 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
org.eclipse.jetty:jetty-http CVE-2023-40167 中危 9.4.18.v20190429 9.4.52, 10.0.16, 11.0.16, 12.0.1 jetty: Improper validation of HTTP/1 content-length

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-09-15 20:15 修改: 2026-06-17 06:16
org.eclipse.jetty:jetty-http CVE-2024-6763 中危 9.4.18.v20190429 12.0.12 org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
net.minidev:json-smart CVE-2021-27568 中危 2.3 1.3.2, 2.4.1, 2.3.1 json-smart: uncaught exception may lead to crash or information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-02-23 02:15 修改: 2026-06-17 03:45
com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.10.0 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.google.protobuf:protobuf-java CVE-2022-3171 中危 2.5.0 3.21.7, 3.20.3, 3.19.6, 3.16.3 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
org.eclipse.jetty:jetty-server CVE-2020-27218 中危 9.4.18.v20190429 9.4.35.v20201120 jetty: buffer not correctly recycled in Gzip Request inflation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27218

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-11-28 01:15 修改: 2026-06-17 03:08
org.eclipse.jetty:jetty-server CVE-2020-27223 中危 9.4.18.v20190429 9.4.37, 10.0.1, 11.0.1 jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27223

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-02-26 22:15 修改: 2026-06-17 03:08
org.eclipse.jetty:jetty-server CVE-2023-26048 中危 9.4.18.v20190429 9.4.51.v20230217, 10.0.14, 11.0.14 jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
org.eclipse.jetty:jetty-server CVE-2024-8184 中危 9.4.18.v20190429 12.0.9, 10.0.24, 11.0.24, 9.4.56 org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:22
org.eclipse.jetty:jetty-server CVE-2026-6790 中危 9.4.18.v20190429 12.0.35, 12.1.9 jetty: Jetty: Improper Host header validation can lead to request routing issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35
org.eclipse.jetty:jetty-servlets CVE-2021-28169 中危 9.4.18.v20190429 9.4.41, 10.0.3, 11.0.3 jetty: requests to the ConcatServlet and WelcomeFilter are able to access protected resources within the WEB-INF directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28169

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-06-09 02:15 修改: 2026-06-17 03:45
org.eclipse.jetty:jetty-servlets CVE-2024-9823 中危 9.4.18.v20190429 9.4.54, 10.0.18, 11.0.18 org.eclipse.jetty:jetty-servlets: jetty: Jetty DOS vulnerability on DosFilter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9823

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-10-14 15:15 修改: 2026-06-17 08:25
org.glassfish.jersey.core:jersey-common CVE-2021-28168 中危 2.30 2.34, 3.0.2 jersey: Local information disclosure via system temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28168

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-04-22 18:15 修改: 2026-06-17 03:45
com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.10.0 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.10.0 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.lz4:lz4-java CVE-2026-59949 中危 1.7.1 LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.10.0 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.10.0 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
org.xerial.snappy:snappy-java CVE-2023-34453 中危 1.1.7.5 1.1.10.1 snappy-java: Integer overflow in shuffle leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java CVE-2023-34454 中危 1.1.7.5 1.1.10.1 snappy-java: Integer overflow in compress leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
org.apache.commons:commons-compress CVE-2018-11771 中危 1.8.1 1.18 apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11771

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2018-08-16 15:29 修改: 2026-06-17 01:36
org.apache.commons:commons-compress CVE-2024-25710 中危 1.8.1 1.26.0 commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:16
org.apache.commons:commons-configuration2 CVE-2024-29131 中危 2.1.1 2.10.1 commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.yaml:snakeyaml CVE-2022-38749 中危 1.24 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml CVE-2022-38750 中危 1.24 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml CVE-2022-38751 中危 1.24 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml CVE-2022-38752 中危 1.24 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml CVE-2022-41854 中危 1.24 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03
com.google.guava:guava CVE-2020-8908 低危 14.0.1 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
com.google.guava:guava CVE-2020-8908 低危 14.0.1 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
org.eclipse.jetty:jetty-http CVE-2022-2047 低危 9.4.18.v20190429 9.4.47, 10.0.10, 11.0.10 jetty-http: improver hostname input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2022-07-07 21:15 修改: 2026-06-17 04:41
org.eclipse.jetty:jetty-server CVE-2021-34428 低危 9.4.18.v20190429 9.4.41, 10.0.3, 11.0.3 jetty: SessionListener can prevent a session from being invalidated breaking logout

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34428

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2021-06-22 15:15 修改: 2026-06-17 03:55
org.eclipse.jetty:jetty-server CVE-2023-26049 低危 9.4.18.v20190429 9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0 jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
org.eclipse.jetty:jetty-http CVE-2025-11143 低危 9.4.18.v20190429 12.0.31, 12.1.5 org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29
com.google.guava:guava CVE-2020-8908 低危 11.0.2 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
org.eclipse.jetty:jetty-servlets CVE-2023-36479 低危 9.4.18.v20190429 9.4.52, 10.0.16, 11.0.16 jetty: Improper addition of quotation marks to user inputs in CgiServlet

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36479

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2023-09-15 19:15 修改: 2026-06-17 06:06
com.google.guava:guava CVE-2020-8908 低危 14.0.1 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
org.apache.hadoop:hadoop-common CVE-2024-23454 低危 3.2.0 3.4.0 Apache Hadoop: Temporary File Local Information Disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2024-09-25 08:15 修改: 2026-06-17 07:12
org.apache.spark:spark-network-common_2.12 CVE-2025-55039 低危 3.0.0 3.4.4, 3.5.2 Apache Spark has Inadequate Encryption Strength

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55039

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-10-15 08:15 修改: 2026-06-17 09:41
org.apache.spark:spark-network-common_2.12 CVE-2025-55039 低危 3.0.0 3.4.4, 3.5.2 Apache Spark has Inadequate Encryption Strength

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55039

镜像层: sha256:57741603aa5fc3c3566155a1c3089bdec53730fe93574acb5a93c9f7da236e92

发布日期: 2025-10-15 08:15 修改: 2026-06-17 09:41
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×