| org.bouncycastle:bcprov-jdk18on |
CVE-2025-14813 |
严重 |
1.80 |
1.80.2, 1.81.1, 1.84 |
bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:16
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
高危 |
2.15.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-06-23 21:17 修改: 2026-07-17 13:18
|
| com.microsoft.sqlserver:mssql-jdbc |
CVE-2025-59250 |
高危 |
12.8.0.jre11 |
10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 |
JDBC Driver for SQL Server has improper input validation issue
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
|
| org.bouncycastle:bcpg-jdk18on |
CVE-2026-3505 |
高危 |
1.80 |
1.84 |
bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3505
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-04-15 10:16 修改: 2026-07-15 02:21
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
高危 |
2.15.2 |
2.18.8, 3.1.4, 2.21.4 |
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
|
| org.eclipse.jetty:jetty-http |
CVE-2026-2332 |
高危 |
12.0.15 |
12.1.7, 12.0.33 |
org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-04-14 12:16 修改: 2026-07-15 02:19
|
| org.eclipse.jetty:jetty-server |
CVE-2026-1605 |
高危 |
12.0.15 |
12.1.6, 12.0.32 |
org.eclipse.jetty/jetty-server: Eclipse Jetty: Denial of Service due to unreleased JDK Inflater from compressed HTTP requests
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1605
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-03-05 10:15 修改: 2026-07-15 02:18
|
| org.lz4:lz4-java |
CVE-2025-12183 |
高危 |
1.8.0 |
1.8.1 |
lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31
|
| org.lz4:lz4-java |
CVE-2025-66566 |
高危 |
1.8.0 |
|
lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57
|
| org.postgresql:postgresql |
CVE-2026-42198 |
高危 |
42.7.2 |
42.7.11 |
jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-04-29 16:16 修改: 2026-07-15 02:21
|
| org.apache.commons:commons-lang3 |
CVE-2025-48924 |
中危 |
3.17.0 |
3.18.0 |
commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
|
| ch.qos.logback:logback-core |
CVE-2025-11226 |
中危 |
1.5.18 |
1.5.19, 1.3.16 |
ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
|
| org.bouncycastle:bcpkix-jdk18on |
CVE-2026-5588 |
中危 |
1.80 |
1.84 |
bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:18
|
| com.fasterxml.jackson.core:jackson-core |
GHSA-72hv-8253-57qq |
中危 |
2.15.2 |
2.21.1, 2.18.6 |
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition
漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
|
| org.bouncycastle:bcprov-jdk18on |
CVE-2026-0636 |
中危 |
1.80 |
1.84 |
bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:17
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
中危 |
2.15.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
中危 |
2.15.2 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
|
| com.fasterxml.jackson.core:jackson-core |
GHSA-72hv-8253-57qq |
中危 |
2.18.4.1 |
2.21.1, 2.18.6 |
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition
漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
|
| org.apache.commons:commons-lang3 |
CVE-2025-48924 |
中危 |
3.13.0 |
3.18.0 |
commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
|
| org.apache.commons:commons-lang3 |
CVE-2025-48924 |
中危 |
3.17.0 |
3.18.0 |
commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
|
| ch.qos.logback:logback-core |
CVE-2026-10532 |
低危 |
1.5.18 |
1.5.34 |
Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-06-01 13:16 修改: 2026-06-17 10:12
|
| ch.qos.logback:logback-core |
CVE-2026-1225 |
低危 |
1.5.18 |
1.5.25 |
ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
|
| ch.qos.logback:logback-core |
CVE-2026-9828 |
低危 |
1.5.18 |
1.5.33 |
Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
|
| org.eclipse.jetty:jetty-http |
CVE-2025-11143 |
低危 |
12.0.15 |
12.0.31, 12.1.5 |
org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143
镜像层: sha256:3bad88f946de3056da6f9e36a2c6f30cb4b4a15a324f1e14e2e1d1b95d421581
发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29
|