| com.fasterxml.jackson.core:jackson-databind |
CVE-2018-14718 |
严重 |
2.9.6 |
2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 |
jackson-databind: arbitrary code execution in slf4j-ext class
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2018-14719 |
严重 |
2.9.6 |
2.9.7, 2.8.11.3, 2.7.9.5 |
jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2018-14720 |
严重 |
2.9.6 |
2.9.7, 2.8.11.3, 2.7.9.5 |
jackson-databind: exfiltration/XXE in some JDK classes
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2018-14721 |
严重 |
2.9.6 |
2.9.7, 2.8.11.3, 2.7.9.5 |
jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2018-19360 |
严重 |
2.9.6 |
2.9.8, 2.8.11.3, 2.7.9.5 |
jackson-databind: improper polymorphic deserialization in axis2-transport-jms class
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2018-19361 |
严重 |
2.9.6 |
2.7.9.5, 2.9.8, 2.8.11.3 |
jackson-databind: improper polymorphic deserialization in openjpa class
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2018-19362 |
严重 |
2.9.6 |
2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 |
jackson-databind: improper polymorphic deserialization in jboss-common-core class
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-14379 |
严重 |
2.9.6 |
2.9.9.2, 2.8.11.4, 2.7.9.6 |
jackson-databind: default typing mishandling leading to remote code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-14540 |
严重 |
2.9.6 |
2.9.10, 2.8.11.5, 2.6.7.3 |
jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-16335 |
严重 |
2.9.6 |
2.9.10, 2.8.11.5, 2.6.7.3 |
jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-16942 |
严重 |
2.9.6 |
2.9.10.1, 2.8.11.5, 2.6.7.3 |
jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-16943 |
严重 |
2.9.6 |
2.9.10.1, 2.8.11.5, 2.6.7.3 |
jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-17267 |
严重 |
2.9.6 |
2.9.10, 2.8.11.5 |
jackson-databind: Serialization gadgets in classes of the ehcache package
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-17531 |
严重 |
2.9.6 |
2.9.10.1, 2.8.11.5, 2.6.7.3 |
jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-20330 |
严重 |
2.9.6 |
2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 |
jackson-databind: lacks certain net.sf.ehcache blocking
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-8840 |
严重 |
2.9.6 |
2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 |
jackson-databind: Lacks certain xbean-reflect/JNDI blocking
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-9546 |
严重 |
2.9.6 |
2.9.10.4 |
jackson-databind: Serialization gadgets in shaded-hikari-config
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-9547 |
严重 |
2.9.6 |
2.9.10.4, 2.8.11.6, 2.7.9.7 |
jackson-databind: Serialization gadgets in ibatis-sqlmap
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-9548 |
严重 |
2.9.6 |
2.9.10.4, 2.8.11.6, 2.7.9.7 |
jackson-databind: Serialization gadgets in anteros-core
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
|
| log4j:log4j |
CVE-2019-17571 |
严重 |
1.2.14 |
|
log4j: deserialization of untrusted data in SocketServer
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
|
| log4j:log4j |
CVE-2022-23305 |
严重 |
1.2.14 |
|
log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
|
| log4j:log4j |
CVE-2022-23307 |
严重 |
1.2.14 |
|
log4j: Unsafe deserialization flaw in Chainsaw log viewer
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2020-1938 |
严重 |
8.5.34 |
9.0.31, 8.5.51, 7.0.100 |
tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1938
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-02-24 22:15 修改: 2024-07-24 14:23
|
| org.springframework.boot:spring-boot-starter-web |
CVE-2022-22965 |
严重 |
2.0.5.RELEASE |
2.5.12, 2.6.6 |
spring-framework: RCE via Data Binding on JDK 9+
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-04-01 23:15 修改: 2024-10-18 19:52
|
| org.springframework:spring-beans |
CVE-2022-22965 |
严重 |
5.0.9.RELEASE |
5.2.20.RELEASE, 5.3.18 |
spring-framework: RCE via Data Binding on JDK 9+
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-04-01 23:15 修改: 2024-10-18 19:52
|
| org.springframework:spring-web |
CVE-2016-1000027 |
严重 |
5.0.9.RELEASE |
6.0.0 |
spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-01-02 23:15 修改: 2023-04-20 09:15
|
| org.springframework:spring-webmvc |
CVE-2022-22965 |
严重 |
5.0.9.RELEASE |
5.2.20.RELEASE, 5.3.18 |
spring-framework: RCE via Data Binding on JDK 9+
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-04-01 23:15 修改: 2024-10-18 19:52
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-10672 |
高危 |
2.9.6 |
2.9.10.4 |
jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-10673 |
高危 |
2.9.6 |
2.9.10.4, 2.6.7.4 |
jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-10968 |
高危 |
2.9.6 |
2.9.10.4 |
jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-10969 |
高危 |
2.9.6 |
2.9.10.4 |
jackson-databind: Serialization gadgets in javax.swing.JEditorPane
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-11111 |
高危 |
2.9.6 |
2.9.10.4 |
jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-11112 |
高危 |
2.9.6 |
2.9.10.4 |
jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-11113 |
高危 |
2.9.6 |
2.9.10.4 |
jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-11619 |
高危 |
2.9.6 |
2.9.10.4 |
jackson-databind: Serialization gadgets in org.springframework:spring-aop
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-11620 |
高危 |
2.9.6 |
2.9.10.4 |
jackson-databind: Serialization gadgets in commons-jelly:commons-jelly
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-14060 |
高危 |
2.9.6 |
2.9.10.5 |
jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-06-14 21:15 修改: 2023-11-07 03:17
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-14061 |
高危 |
2.9.6 |
2.9.10.5 |
jackson-databind: serialization in weblogic/oracle-aqjms
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-14062 |
高危 |
2.9.6 |
2.9.10.5 |
jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-14195 |
高危 |
2.9.6 |
2.9.10.5 |
jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-06-16 16:15 修改: 2021-11-17 20:20
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-24616 |
高危 |
2.9.6 |
2.9.10.6 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-24750 |
高危 |
2.9.6 |
2.6.7.5, 2.9.10.6 |
jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-25649 |
高危 |
2.9.6 |
2.6.7.4, 2.9.10.7, 2.10.5.1 |
jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-35490 |
高危 |
2.9.6 |
2.9.10.8 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-35491 |
高危 |
2.9.6 |
2.9.10.8 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-35728 |
高危 |
2.9.6 |
2.9.10.8 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36179 |
高危 |
2.9.6 |
2.9.10.8, 2.6.7.5 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36180 |
高危 |
2.9.6 |
2.9.10.8, 2.6.7.5 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36181 |
高危 |
2.9.6 |
2.9.10.8, 2.6.7.5 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36182 |
高危 |
2.9.6 |
2.9.10.8, 2.6.7.5 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36183 |
高危 |
2.9.6 |
2.9.10.8, 2.6.7.5 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36184 |
高危 |
2.9.6 |
2.9.10.8 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36185 |
高危 |
2.9.6 |
2.9.10.8 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36186 |
高危 |
2.9.6 |
2.9.10.8 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36187 |
高危 |
2.9.6 |
2.9.10.8 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36188 |
高危 |
2.9.6 |
2.9.10.8, 2.6.7.5 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36189 |
高危 |
2.9.6 |
2.9.10.8, 2.6.7.5 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36518 |
高危 |
2.9.6 |
2.13.2.1, 2.12.6.1 |
jackson-databind: denial of service via a large depth of nested objects
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2021-20190 |
高危 |
2.9.6 |
2.9.10.7, 2.6.7.5 |
jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2022-42003 |
高危 |
2.9.6 |
2.12.7.1, 2.13.4.2 |
jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2022-42004 |
高危 |
2.9.6 |
2.12.7.1, 2.13.4 |
jackson-databind: use of deeply nested arrays
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
|
| ch.qos.logback:logback-core |
CVE-2023-6378 |
高危 |
1.2.3 |
1.3.12, 1.4.12, 1.2.13 |
logback: serialization vulnerability in logback receiver
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-11-29 12:15 修改: 2023-12-05 21:00
|
| com.alibaba:fastjson |
CVE-2022-25845 |
高危 |
1.2.71 |
1.2.83 |
fastjson: autoType shutdown restriction bypass leads to deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25845
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-06-10 20:15 修改: 2023-02-23 17:51
|
| ch.qos.logback:logback-classic |
CVE-2023-6378 |
高危 |
1.2.3 |
1.3.12, 1.4.12, 1.2.13 |
logback: serialization vulnerability in logback receiver
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-11-29 12:15 修改: 2023-12-05 21:00
|
| log4j:log4j |
CVE-2021-4104 |
高危 |
1.2.14 |
|
log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
|
| log4j:log4j |
CVE-2022-23302 |
高危 |
1.2.14 |
|
log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-12086 |
高危 |
2.9.6 |
2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 |
jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2019-0199 |
高危 |
8.5.34 |
9.0.16, 8.5.38 |
tomcat: Apache Tomcat HTTP/2 DoS
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0199
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-04-10 15:29 修改: 2023-12-08 16:41
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2019-0232 |
高危 |
8.5.34 |
9.0.17, 8.5.40, 7.0.94 |
tomcat: Remote Code Execution on Windows
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0232
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-04-15 15:29 修改: 2023-12-08 16:41
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2019-10072 |
高危 |
8.5.34 |
9.0.20, 8.5.41 |
tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10072
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-06-21 18:15 修改: 2023-12-08 16:41
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2019-12418 |
高危 |
8.5.34 |
7.0.99, 8.5.49, 9.0.29 |
tomcat: local privilege escalation
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12418
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-12-23 18:15 修改: 2023-11-07 03:03
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2019-17563 |
高危 |
8.5.34 |
7.0.99, 8.5.50, 9.0.30 |
tomcat: Session fixation when using FORM authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17563
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-12-23 17:15 修改: 2023-11-07 03:06
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2021-25122 |
高危 |
8.5.34 |
10.0.2, 9.0.43, 8.5.63 |
tomcat: Request mix-up with h2c
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25122
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-03-01 12:15 修改: 2023-11-07 03:31
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2021-25329 |
高危 |
8.5.34 |
10.0.2, 9.0.41, 8.5.61, 7.0.108 |
tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25329
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-03-01 12:15 修改: 2023-11-07 03:31
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2022-42252 |
高危 |
8.5.34 |
8.5.83, 9.0.68, 10.0.27, 10.1.1 |
tomcat: request smuggling
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-11-01 09:15 修改: 2023-05-30 06:15
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-46589 |
高危 |
8.5.34 |
11.0.0-M11, 10.1.16, 9.0.83, 8.5.96 |
tomcat: HTTP request smuggling via malformed trailer headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-11-28 16:15 修改: 2024-07-12 16:11
|
| org.springframework.boot:spring-boot |
CVE-2022-27772 |
高危 |
2.0.5.RELEASE |
2.2.11.RELEASE |
Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27772
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-03-30 18:15 修改: 2024-08-03 06:15
|
| org.springframework.boot:spring-boot-autoconfigure |
CVE-2023-20883 |
高危 |
2.0.5.RELEASE |
3.0.7, 2.7.12, 2.6.15, 2.5.15 |
spring-boot: Spring Boot Welcome Page DoS Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-05-26 17:15 修改: 2023-07-03 16:15
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-14439 |
高危 |
2.9.6 |
2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 |
jackson-databind: Polymorphic typing issue related to logback/JNDI
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-14892 |
高危 |
2.9.6 |
2.6.7.3, 2.8.11.5, 2.9.10 |
jackson-databind: Serialization gadgets in classes of the commons-configuration package
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
|
| org.springframework:spring-beans |
CVE-2022-22970 |
高危 |
5.0.9.RELEASE |
5.2.22.RELEASE, 5.3.20 |
springframework: DoS via data binding to multipartFile or servlet part
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-05-12 20:15 修改: 2022-10-07 13:17
|
| org.springframework:spring-context |
CVE-2022-22968 |
高危 |
5.0.9.RELEASE |
5.3.19, 5.2.21.RELEASE |
Framework: Data Binding Rules Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-04-14 21:15 修改: 2022-10-19 15:15
|
| org.springframework:spring-core |
CVE-2018-15756 |
高危 |
5.0.9.RELEASE |
5.1.1.RELEASE, 5.0.10.RELEASE, 4.3.20.RELEASE |
springframework: DoS Attack via Range Requests
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15756
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2018-10-18 22:29 修改: 2023-11-07 02:53
|
| org.springframework:spring-expression |
CVE-2023-20863 |
高危 |
5.0.9.RELEASE |
6.0.8, 5.3.27, 5.2.24.RELEASE |
springframework: Spring Expression DoS Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-04-13 20:15 修改: 2024-06-10 17:16
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-14893 |
高危 |
2.9.6 |
2.9.10 |
jackson-databind: Serialization gadgets in classes of the xalan package
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-03-02 21:15 修改: 2023-11-07 03:05
|
| org.springframework:spring-web |
CVE-2024-22243 |
高危 |
5.0.9.RELEASE |
6.1.4, 6.0.17, 5.3.32 |
springframework: URL Parsing with Host Validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-02-23 05:15 修改: 2024-08-22 15:35
|
| org.springframework:spring-web |
CVE-2024-22259 |
高危 |
5.0.9.RELEASE |
6.1.5, 6.0.18, 5.3.33 |
springframework: URL Parsing with Host Validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-03-16 05:15 修改: 2024-07-03 01:47
|
| org.springframework:spring-web |
CVE-2024-22262 |
高危 |
5.0.9.RELEASE |
5.3.34, 6.0.19, 6.1.6 |
springframework: URL Parsing with Host Validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-04-16 06:15 修改: 2024-08-27 14:35
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-10650 |
高危 |
2.9.6 |
2.9.10.4 |
A deserialization flaw was discovered in jackson-databind through 2.9. ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
|
| org.springframework:spring-webmvc |
CVE-2020-5398 |
高危 |
5.0.9.RELEASE |
5.2.3.RELEASE, 5.1.13.RELEASE, 5.0.16.RELEASE |
springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-5398
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-01-17 00:15 修改: 2023-11-07 03:23
|
| org.springframework:spring-webmvc |
CVE-2024-38816 |
高危 |
5.0.9.RELEASE |
6.1.13, 6.0.24, 5.3.40 |
spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38816
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-09-13 06:15 修改: 2024-09-13 14:06
|
| org.yaml:snakeyaml |
CVE-2017-18640 |
高危 |
1.19 |
1.26 |
snakeyaml: Billion laughs attack via alias feature
漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-12-12 03:15 修改: 2023-11-07 02:41
|
| org.yaml:snakeyaml |
CVE-2022-1471 |
高危 |
1.19 |
2.0 |
SnakeYaml: Constructor Deserialization Remote Code Execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-12-01 11:15 修改: 2024-06-21 19:15
|
| org.yaml:snakeyaml |
CVE-2022-25857 |
高危 |
1.19 |
1.31 |
snakeyaml: Denial of Service due to missing nested depth limitation for collections
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-08-30 05:15 修改: 2024-03-15 11:15
|
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 |
CVE-2018-1000873 |
中危 |
2.9.6 |
2.9.8 |
jackson-modules-java8: DoS due to an Improper Input Validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000873
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2018-12-20 17:29 修改: 2023-11-07 02:51
|
| ch.qos.logback:logback-core |
CVE-2021-42550 |
中危 |
1.2.3 |
1.2.9 |
logback: remote code execution through JNDI call from within its configuration file
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-12-16 19:15 修改: 2022-12-12 21:13
|
| org.apache.httpcomponents:httpclient |
CVE-2020-13956 |
中危 |
4.5.3 |
4.5.13, 5.0.3 |
apache-httpclient: incorrect handling of malformed authority component in request URIs
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2019-0221 |
中危 |
8.5.34 |
9.0.17, 8.5.40, 7.0.94 |
tomcat: XSS in SSI printenv
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0221
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-05-28 22:29 修改: 2023-12-08 16:41
|
| org.springframework:spring-context |
CVE-2024-38820 |
中危 |
5.0.9.RELEASE |
6.1.14, 6.0.25, 5.3.41, 6.2.0-RC2 |
The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-10-18 06:15 修改: 2024-10-22 15:42
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2020-1935 |
中危 |
8.5.34 |
7.0.100, 8.5.51, 9.0.31 |
tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1935
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-02-24 22:15 修改: 2023-11-07 03:19
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2021-24122 |
中危 |
8.5.34 |
10.0.0-M10, 9.0.40, 8.5.60, 7.0.107 |
tomcat: Information disclosure when using NTFS file system
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24122
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2021-01-14 15:15 修改: 2023-11-07 03:31
|
| org.springframework:spring-expression |
CVE-2022-22950 |
中危 |
5.0.9.RELEASE |
5.3.17, 5.2.20.RELEASE |
spring-expression: Denial of service via specially crafted SpEL expression
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-04-01 23:15 修改: 2022-06-22 13:53
|
| org.springframework:spring-expression |
CVE-2023-20861 |
中危 |
5.0.9.RELEASE |
6.0.7, 5.3.26, 5.2.23.RELEASE |
springframework: Spring Expression DoS Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-03-23 21:15 修改: 2023-04-20 09:15
|
| org.springframework:spring-expression |
CVE-2024-38808 |
中危 |
5.0.9.RELEASE |
5.3.39 |
spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-08-20 08:15 修改: 2024-10-30 19:35
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-41080 |
中危 |
8.5.34 |
8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 |
tomcat: Open Redirect vulnerability in FORM authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-08-25 21:15 修改: 2023-11-03 19:00
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-42795 |
中危 |
8.5.34 |
11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 |
tomcat: improper cleaning of recycled objects could lead to information leak
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-10-10 18:15 修改: 2023-11-04 06:15
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-44487 |
中危 |
8.5.34 |
11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 |
HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-45648 |
中危 |
8.5.34 |
11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 |
tomcat: incorrectly parsed http trailer headers can cause request smuggling
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2023-10-10 19:15 修改: 2023-11-04 06:15
|
| org.springframework:spring-web |
CVE-2024-38809 |
中危 |
5.0.9.RELEASE |
5.3.38, 6.0.23, 6.1.12 |
org.springframework:spring-web: Spring Framework DoS via conditional HTTP request
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-09-27 17:15 修改: 2024-09-30 12:45
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-21733 |
中危 |
8.5.34 |
8.5.64 |
tomcat: Leaking of unrelated request bodies in default error page
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21733
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-01-19 11:15 修改: 2024-02-16 13:15
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-24549 |
中危 |
8.5.34 |
8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 |
Tomcat: HTTP/2 header handling DoS
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-03-13 16:15 修改: 2024-06-23 09:15
|
| org.apache.tomcat.embed:tomcat-embed-websocket |
CVE-2024-23672 |
中危 |
8.5.34 |
11.0.0-M17, 10.1.19, 9.0.86, 8.5.99 |
Tomcat: WebSocket DoS with incomplete closing handshake
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2024-03-13 16:15 修改: 2024-06-23 09:15
|
| org.hibernate.validator:hibernate-validator |
CVE-2020-10693 |
中危 |
6.0.12.Final |
6.1.5.Final, 6.0.20.Final |
hibernate-validator: Improper input validation in the interpolation of constraint error messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10693
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2020-05-06 14:15 修改: 2023-11-07 03:14
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-12384 |
中危 |
2.9.6 |
2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 |
jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2019-12814 |
中危 |
2.9.6 |
2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 |
jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
|
| org.yaml:snakeyaml |
CVE-2022-38749 |
中危 |
1.19 |
1.31 |
snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
|
| org.yaml:snakeyaml |
CVE-2022-38750 |
中危 |
1.19 |
1.31 |
snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
|
| org.yaml:snakeyaml |
CVE-2022-38751 |
中危 |
1.19 |
1.31 |
snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
|
| org.yaml:snakeyaml |
CVE-2022-38752 |
中危 |
1.19 |
1.32 |
snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
|
| org.yaml:snakeyaml |
CVE-2022-41854 |
中危 |
1.19 |
1.32 |
dev-java/snakeyaml: DoS via stack overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854
镜像层: sha256:e3cca1792ad0b7c45c2152bc0d3966ab14469765193fd76189d547954b79a524
发布日期: 2022-11-11 13:15 修改: 2024-06-21 19:15
|