| org.apache.tomcat:tomcat-catalina |
CVE-2026-43512 |
严重 |
10.1.36 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-43515 |
严重 |
10.1.36 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: tomcat: Improper Authorization allows security bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-65182 |
严重 |
10.1.36 |
11.0.25, 10.1.58, 9.0.121 |
Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-65905 |
严重 |
10.1.36 |
11.0.25, 10.1.58, 9.0.121 |
tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-68525 |
严重 |
10.1.36 |
11.0.25, 10.1.58, 9.0.121 |
org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15
|
| org.apache.tomcat:tomcat-coyote |
CVE-2026-41293 |
严重 |
10.1.36 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
|
| org.apache.tomcat:tomcat-coyote-ffm |
CVE-2026-29145 |
严重 |
10.1.36 |
9.0.116, 10.1.53, 11.0.20 |
Apache Tomcat: Apache Tomcat: Authentication bypass due to CLIENT_CERT soft fail misconfiguration
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29145
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:29
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
高危 |
2.15.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-09-14 13:18
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
高危 |
2.15.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-09-14 13:18
|
| commons-fileupload:commons-fileupload |
CVE-2025-48976 |
高危 |
1.5 |
1.6.0 |
apache-commons-fileupload: Apache Commons FileUpload DoS via part headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48976
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
|
| commons-fileupload:commons-fileupload |
CVE-2025-48976 |
高危 |
1.5 |
1.6.0 |
apache-commons-fileupload: Apache Commons FileUpload DoS via part headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48976
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
|
| net.minidev:json-smart |
CVE-2024-57699 |
高危 |
2.5.0 |
2.5.2 |
json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370)
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57699
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-02-05 22:15 修改: 2026-06-17 08:13
|
| com.fasterxml.jackson.core:jackson-core |
GHSA-r7wm-3cxj-wff9 |
高危 |
2.15.2 |
2.18.8, 2.21.4 |
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
|
| com.fasterxml.jackson.core:jackson-core |
GHSA-r7wm-3cxj-wff9 |
高危 |
2.15.2 |
2.18.8, 2.21.4 |
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
|
| com.fasterxml.jackson.core:jackson-core |
GHSA-r7wm-3cxj-wff9 |
高危 |
2.15.2 |
2.18.8, 2.21.4 |
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
高危 |
2.15.2 |
2.18.8, 3.1.4, 2.21.4 |
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
高危 |
2.15.2 |
2.18.8, 3.1.4, 2.21.4 |
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-48988 |
高危 |
10.1.36 |
11.0.8, 10.1.42, 9.0.106 |
tomcat: Apache Tomcat DoS in multipart upload
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-52520 |
高危 |
10.1.36 |
11.0.9, 10.1.43, 9.0.107 |
tomcat: Apache Tomcat denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-55752 |
高危 |
10.1.36 |
11.0.11, 10.1.45, 9.0.109 |
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-34483 |
高危 |
10.1.36 |
9.0.116, 10.1.54, 11.0.21 |
Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34483
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-41284 |
高危 |
10.1.36 |
9.0.118, 10.1.55, 11.0.22 |
tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-42498 |
高危 |
10.1.36 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-43513 |
高危 |
10.1.36 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
高危 |
2.15.2 |
2.18.8, 3.1.4, 2.21.4 |
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
|
| org.apache.tomcat:tomcat-coyote |
CVE-2025-48989 |
高危 |
10.1.36 |
11.0.10, 10.1.44, 9.0.108 |
tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30
|
| org.apache.tomcat:tomcat-coyote |
CVE-2025-53506 |
高危 |
10.1.36 |
11.0.9, 10.1.43, 9.0.107 |
tomcat: Apache Tomcat denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38
|
| org.apache.tomcat:tomcat-coyote |
CVE-2026-24734 |
高危 |
10.1.36 |
11.0.18, 10.1.52, 9.0.115 |
tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24734
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-02-17 19:21 修改: 2026-07-15 14:17
|
| org.apache.tomcat:tomcat-coyote |
CVE-2026-24880 |
高危 |
10.1.36 |
9.0.116, 10.1.52, 11.0.20 |
Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
高危 |
2.15.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-09-14 13:18
|
| org.apache.tomcat:tomcat-tribes |
CVE-2026-34487 |
高危 |
10.1.36 |
9.0.117, 10.1.54, 11.0.21 |
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34487
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
|
| org.postgresql:postgresql |
CVE-2026-42198 |
高危 |
42.5.5 |
42.7.11 |
jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-04-29 16:16 修改: 2026-09-11 13:17
|
| org.yaml:snakeyaml |
CVE-2017-18640 |
高危 |
1.16 |
1.26 |
snakeyaml: Billion laughs attack via alias feature
漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13
|
| org.yaml:snakeyaml |
CVE-2022-1471 |
高危 |
1.16 |
2.0 |
SnakeYaml: Constructor Deserialization Remote Code Execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
|
| org.yaml:snakeyaml |
CVE-2022-25857 |
高危 |
1.16 |
1.31 |
snakeyaml: Denial of Service due to missing nested depth limitation for collections
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-18401 |
中危 |
2.15.2 |
2.21.1, 2.18.6 |
tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-49124 |
中危 |
10.1.36 |
11.0.8, 10.1.42, 9.0.106 |
Apache Tomcat installer for Windows has an untrusted search path vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-49125 |
中危 |
10.1.36 |
11.0.8, 10.1.42, 9.0.106 |
tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-55668 |
中危 |
10.1.36 |
11.0.8, 10.1.42, 9.0.106 |
org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-25854 |
中危 |
10.1.36 |
9.0.116, 10.1.53, 11.0.20 |
Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
中危 |
2.15.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
中危 |
2.15.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
中危 |
2.15.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
中危 |
2.15.2 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
中危 |
2.15.2 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
|
| org.apache.tomcat:tomcat-coyote |
CVE-2025-31650 |
中危 |
10.1.36 |
9.0.104, 10.1.40, 11.0.6 |
tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31650
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
|
| org.apache.tomcat:tomcat-coyote |
CVE-2025-66614 |
中危 |
10.1.36 |
11.0.15, 10.1.50, 9.0.113 |
tomcat: Client certificate verification bypass due to virtual host mapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
中危 |
2.15.2 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
|
| org.apache.tomcat:tomcat-coyote-ffm |
CVE-2026-34500 |
中危 |
10.1.36 |
9.0.117, 10.1.54, 11.0.21 |
Apache Tomcat: Apache Tomcat: Authentication bypass via client certificate misconfiguration
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34500
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59888 |
中危 |
2.15.2 |
2.18.8, 2.21.4 |
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59888 |
中危 |
2.15.2 |
2.18.8, 2.21.4 |
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59888 |
中危 |
2.15.2 |
2.18.8, 2.21.4 |
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-18401 |
中危 |
2.15.2 |
2.21.1, 2.18.6 |
tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-18401 |
中危 |
2.15.2 |
2.21.1, 2.18.6 |
tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
|
| org.yaml:snakeyaml |
CVE-2022-38749 |
中危 |
1.16 |
1.31 |
snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
|
| org.yaml:snakeyaml |
CVE-2022-38750 |
中危 |
1.16 |
1.31 |
snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
|
| org.yaml:snakeyaml |
CVE-2022-38751 |
中危 |
1.16 |
1.31 |
snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
|
| org.yaml:snakeyaml |
CVE-2022-38752 |
中危 |
1.16 |
1.32 |
snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
|
| org.yaml:snakeyaml |
CVE-2022-41854 |
中危 |
1.16 |
1.32 |
dev-java/snakeyaml: DoS via stack overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-55754 |
低危 |
10.1.36 |
11.0.11, 10.1.45, 9.0.109 |
org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55754
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-61795 |
低危 |
10.1.36 |
11.0.12, 10.1.47, 9.0.110 |
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50
|
| org.apache.tomcat:tomcat-catalina |
CVE-2026-43514 |
低危 |
10.1.36 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-31651 |
低危 |
10.1.36 |
9.0.104, 10.1.40, 11.0.6 |
tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31651
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
|
| org.apache.tomcat:tomcat-catalina |
CVE-2025-46701 |
低危 |
10.1.36 |
9.0.105, 10.1.41, 11.0.7 |
tomcat: Apache Tomcat: Security constraint bypass for CGI scripts
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26
|
| org.apache.tomcat:tomcat-coyote |
CVE-2026-24733 |
低危 |
10.1.36 |
11.0.15, 10.1.50, 9.0.113 |
tomcat: security constraint bypass with HTTP/0.9
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24733
镜像层: sha256:a22c6b543e27c39b2a341eb5be677f237e03e80db4498a8ef0196addc38857da
发布日期: 2026-02-17 19:21 修改: 2026-06-17 10:23
|