docker.io/nacos/nacos-server:v2.3.0-slim linux/amd64

docker.io/nacos/nacos-server:v2.3.0-slim - Trivy安全扫描结果 扫描时间: 2026-09-08 18:48
全部漏洞信息
低危漏洞:57 中危漏洞:126 高危漏洞:44 严重漏洞:11

系统OS: ubuntu 20.04 扫描引擎: Trivy 扫描时间: 2026-09-08 18:48

docker.io/nacos/nacos-server:v2.3.0-slim (ubuntu 20.04) (ubuntu)
低危漏洞:42 中危漏洞:85 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libnghttp2-14 CVE-2023-44487 高危 1.40.0-1ubuntu0.1 1.40.0-1ubuntu0.2 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-10-10 14:15 修改: 2026-08-11 19:37
curl CVE-2023-46218 中危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.21 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30
curl CVE-2024-2398 中危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.22 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24
curl CVE-2024-7264 中危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.23 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19
curl CVE-2024-8096 中危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.24 curl: OCSP stapling bypass with GnuTLS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-09-11 10:15 修改: 2026-06-17 08:21
fdisk CVE-2024-28085 中危 2.34-0.1ubuntu9.4 2.34-0.1ubuntu9.6 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
gpgv CVE-2025-30258 中危 2.2.19-3ubuntu2.2 2.2.19-3ubuntu2.4 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
libblkid1 CVE-2024-28085 中危 2.34-0.1ubuntu9.4 2.34-0.1ubuntu9.6 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
libc-bin CVE-2024-2961 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.15 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
libc-bin CVE-2024-33599 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc-bin CVE-2024-33600 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc-bin CVE-2024-33601 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc-bin CVE-2024-33602 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc-bin CVE-2025-0395 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.17 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
libc-bin CVE-2025-4802 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.18 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
libc6 CVE-2024-2961 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.15 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
libc6 CVE-2024-33599 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc6 CVE-2024-33600 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc6 CVE-2024-33601 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc6 CVE-2024-33602 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc6 CVE-2025-0395 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.17 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
libc6 CVE-2025-4802 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.18 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
libcurl4 CVE-2023-46218 中危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.21 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30
libcurl4 CVE-2024-2398 中危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.22 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24
libcurl4 CVE-2024-7264 中危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.23 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19
libcurl4 CVE-2024-8096 中危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.24 curl: OCSP stapling bypass with GnuTLS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-09-11 10:15 修改: 2026-06-17 08:21
libexpat1 CVE-2024-45490 中危 2.2.9-1ubuntu0.6 2.2.9-1ubuntu0.7 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
libexpat1 CVE-2024-45491 中危 2.2.9-1ubuntu0.6 2.2.9-1ubuntu0.7 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
libexpat1 CVE-2024-45492 中危 2.2.9-1ubuntu0.6 2.2.9-1ubuntu0.7 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
libexpat1 CVE-2024-50602 中危 2.2.9-1ubuntu0.6 2.2.9-1ubuntu0.8 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-10-27 05:15 修改: 2026-06-17 08:04
libfdisk1 CVE-2024-28085 中危 2.34-0.1ubuntu9.4 2.34-0.1ubuntu9.6 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
libfreetype6 CVE-2025-27363 中危 2.10.1-2ubuntu0.3 2.10.1-2ubuntu0.4 freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27363

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-03-11 14:15 修改: 2026-06-17 09:03
libgnutls30 CVE-2023-5981 中危 3.6.13-2ubuntu1.8 3.6.13-2ubuntu1.9 gnutls: timing side-channel in the RSA-PSK authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-11-28 12:15 修改: 2026-06-17 06:49
libgnutls30 CVE-2024-0553 中危 3.6.13-2ubuntu1.8 3.6.13-2ubuntu1.10 gnutls: incomplete fix for CVE-2023-5981

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-01-16 12:15 修改: 2026-06-17 06:53
libgnutls30 CVE-2024-12243 中危 3.6.13-2ubuntu1.8 3.6.13-2ubuntu1.12 gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12243

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2025-02-10 16:15 修改: 2026-06-17 06:59
libgnutls30 CVE-2024-28834 中危 3.6.13-2ubuntu1.8 3.6.13-2ubuntu1.11 gnutls: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-21 14:15 修改: 2026-06-17 07:21
libgssapi-krb5-2 CVE-2023-36054 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.4 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libgssapi-krb5-2 CVE-2024-3596 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.8 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44
libgssapi-krb5-2 CVE-2024-37370 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.6 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libgssapi-krb5-2 CVE-2024-37371 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.6 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libgssapi-krb5-2 CVE-2025-24528 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libgssapi-krb5-2 CVE-2025-3576 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.11 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-04-15 06:15 修改: 2026-09-01 12:17
libk5crypto3 CVE-2023-36054 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.4 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libk5crypto3 CVE-2024-3596 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.8 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44
libk5crypto3 CVE-2024-37370 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.6 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libk5crypto3 CVE-2024-37371 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.6 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libk5crypto3 CVE-2025-24528 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libk5crypto3 CVE-2025-3576 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.11 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-04-15 06:15 修改: 2026-09-01 12:17
libkrb5-3 CVE-2023-36054 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.4 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libkrb5-3 CVE-2024-3596 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.8 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44
libkrb5-3 CVE-2024-37370 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.6 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libkrb5-3 CVE-2024-37371 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.6 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libkrb5-3 CVE-2025-24528 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libkrb5-3 CVE-2025-3576 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.11 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-04-15 06:15 修改: 2026-09-01 12:17
libkrb5support0 CVE-2023-36054 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.4 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libkrb5support0 CVE-2024-3596 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.8 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44
libkrb5support0 CVE-2024-37370 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.6 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libkrb5support0 CVE-2024-37371 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.6 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libkrb5support0 CVE-2025-24528 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libkrb5support0 CVE-2025-3576 中危 1.17-6ubuntu4.3 1.17-6ubuntu4.11 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-04-15 06:15 修改: 2026-09-01 12:17
libmount1 CVE-2024-28085 中危 2.34-0.1ubuntu9.4 2.34-0.1ubuntu9.6 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
bsdutils CVE-2024-28085 中危 1:2.34-0.1ubuntu9.4 2.34-0.1ubuntu9.6 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
libnghttp2-14 CVE-2024-28182 中危 1.40.0-1ubuntu0.1 1.40.0-1ubuntu0.3 nghttp2: CONTINUATION frames DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-04-04 15:15 修改: 2026-06-17 07:21
libpam-modules CVE-2024-22365 中危 1.3.1-5ubuntu4.6 1.3.1-5ubuntu4.7 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam-modules-bin CVE-2024-22365 中危 1.3.1-5ubuntu4.6 1.3.1-5ubuntu4.7 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam-runtime CVE-2024-22365 中危 1.3.1-5ubuntu4.6 1.3.1-5ubuntu4.7 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam0g CVE-2024-22365 中危 1.3.1-5ubuntu4.6 1.3.1-5ubuntu4.7 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libsmartcols1 CVE-2024-28085 中危 2.34-0.1ubuntu9.4 2.34-0.1ubuntu9.6 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
libsqlite3-0 CVE-2023-7104 中危 3.31.1-4ubuntu0.5 3.31.1-4ubuntu0.6 sqlite: heap-buffer-overflow at sessionfuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-12-29 10:15 修改: 2026-06-17 06:52
libsqlite3-0 CVE-2025-29088 中危 3.31.1-4ubuntu0.5 3.31.1-4ubuntu0.7 sqlite: Denial of Service in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29088

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-04-10 14:15 修改: 2026-06-17 09:05
libssh-4 CVE-2023-48795 中危 0.9.3-2ubuntu2.3 0.9.3-2ubuntu2.4 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-12-18 16:15 修改: 2026-06-17 06:34
libssh-4 CVE-2023-6004 中危 0.9.3-2ubuntu2.3 0.9.3-2ubuntu2.5 libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6004

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-01-03 17:15 修改: 2026-06-17 06:49
libssh-4 CVE-2023-6918 中危 0.9.3-2ubuntu2.3 0.9.3-2ubuntu2.5 libssh: Missing checks for return values for digests

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6918

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-12-19 00:15 修改: 2026-06-17 06:51
libtasn1-6 CVE-2024-12133 中危 4.16.0-2 4.16.0-2ubuntu0.1 libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2025-02-10 16:15 修改: 2026-06-30 03:16
libuuid1 CVE-2024-28085 中危 2.34-0.1ubuntu9.4 2.34-0.1ubuntu9.6 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
locales CVE-2024-2961 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.15 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
locales CVE-2024-33599 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
locales CVE-2024-33600 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
locales CVE-2024-33601 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
locales CVE-2024-33602 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.16 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
locales CVE-2025-0395 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.17 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
locales CVE-2025-4802 中危 2.31-0ubuntu9.9 2.31-0ubuntu9.18 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
mount CVE-2024-28085 中危 2.34-0.1ubuntu9.4 2.34-0.1ubuntu9.6 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
perl-base CVE-2023-47038 中危 5.30.0-9ubuntu0.4 5.30.0-9ubuntu0.5 perl: Write past buffer end via illegal user-defined Unicode property

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-12-18 14:15 修改: 2026-06-17 06:32
tar CVE-2023-39804 中危 1.30+dfsg-7ubuntu0.20.04.3 1.30+dfsg-7ubuntu0.20.04.4 tar: Incorrectly handled extension attributes in PAX archives can lead to a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 04:15 修改: 2026-06-17 06:12
util-linux CVE-2024-28085 中危 2.34-0.1ubuntu9.4 2.34-0.1ubuntu9.6 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
libkrb5-3 CVE-2024-26461 低危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libc-bin CVE-2023-4813 低危 2.31-0ubuntu9.9 2.31-0ubuntu9.14 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
curl CVE-2023-38546 低危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.20 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10
curl CVE-2024-11053 低危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.25 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56
libc-bin CVE-2023-4806 低危 2.31-0ubuntu9.9 2.31-0ubuntu9.14 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16
libk5crypto3 CVE-2024-26458 低危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libssl1.1 CVE-2023-3446 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.20 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14
libssl1.1 CVE-2023-3817 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.20 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14
libssl1.1 CVE-2023-5678 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.21 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49
libssl1.1 CVE-2024-0727 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.21 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54
libssl1.1 CVE-2024-13176 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.24 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
libssl1.1 CVE-2024-2511 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.23 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24
libssl1.1 CVE-2024-4741 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.23 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02
libssl1.1 CVE-2024-5535 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.23 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16
libssl1.1 CVE-2024-9143 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.24 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
libk5crypto3 CVE-2024-26461 低危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0 CVE-2024-26458 低危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0 CVE-2024-26461 低危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libldap-2.4-2 CVE-2023-2953 低危 2.4.49+dfsg-2ubuntu1.9 2.4.49+dfsg-2ubuntu1.10 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-05-30 22:15 修改: 2026-06-17 05:53
libldap-common CVE-2023-2953 低危 2.4.49+dfsg-2ubuntu1.9 2.4.49+dfsg-2ubuntu1.10 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-05-30 22:15 修改: 2026-06-17 05:53
libcurl4 CVE-2023-38546 低危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.20 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10
libcurl4 CVE-2024-11053 低危 7.68.0-1ubuntu2.19 7.68.0-1ubuntu2.25 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56
libgssapi-krb5-2 CVE-2024-26458 低危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libgssapi-krb5-2 CVE-2024-26461 低危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
locales CVE-2023-4806 低危 2.31-0ubuntu9.9 2.31-0ubuntu9.14 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16
locales CVE-2023-4813 低危 2.31-0ubuntu9.9 2.31-0ubuntu9.14 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
login CVE-2023-4641 低危 1:4.8.1-1ubuntu5.20.04.4 1:4.8.1-1ubuntu5.20.04.5 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38
libc6 CVE-2023-4806 低危 2.31-0ubuntu9.9 2.31-0ubuntu9.14 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16
openssl CVE-2023-3446 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.20 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14
openssl CVE-2023-3817 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.20 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14
openssl CVE-2023-5678 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.21 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49
openssl CVE-2024-0727 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.21 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54
openssl CVE-2024-13176 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.24 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
openssl CVE-2024-2511 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.23 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24
openssl CVE-2024-4741 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.23 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02
openssl CVE-2024-5535 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.23 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16
openssl CVE-2024-9143 低危 1.1.1f-1ubuntu2.19 1.1.1f-1ubuntu2.24 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
passwd CVE-2023-4641 低危 1:4.8.1-1ubuntu5.20.04.4 1:4.8.1-1ubuntu5.20.04.5 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38
libc6 CVE-2023-4813 低危 2.31-0ubuntu9.9 2.31-0ubuntu9.14 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
procps CVE-2023-4016 低危 2:3.3.16-1ubuntu2.3 2:3.3.16-1ubuntu2.4 procps: ps buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-08-02 05:15 修改: 2026-06-17 06:36
libkrb5-3 CVE-2024-26458 低危 1.17-6ubuntu4.3 1.17-6ubuntu4.9 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:fa1334134451f7a18c495565eba1a58217d6208d674998269719475f1acc0c4d

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libprocps8 CVE-2023-4016 低危 2:3.3.16-1ubuntu2.3 2:3.3.16-1ubuntu2.4 procps: ps buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016

镜像层: sha256:f5bb4f853c84f6579d86f72de5f1d43fc8866443d9a027e2106e3755acefd61c

发布日期: 2023-08-02 05:15 修改: 2026-06-17 06:36
Java (jar)
低危漏洞:15 中危漏洞:41 高危漏洞:43 严重漏洞:11
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.apache.derby:derby CVE-2022-46337 严重 10.14.2.0 10.14.2.1, 10.16.1.2, 10.15.2.1 A cleverly devised username might bypass LDAP authentication checks. I ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46337

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-11-20 09:15 修改: 2026-06-17 05:11
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-24813 严重 9.0.79 11.0.3, 10.1.35, 9.0.99 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41293 严重 9.0.79 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43512 严重 9.0.79 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43515 严重 9.0.79 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65182 严重 9.0.79 11.0.25, 10.1.58, 9.0.121 Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-65905 严重 9.0.79 11.0.25, 10.1.58, 9.0.121 tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-68525 严重 9.0.79 11.0.25, 10.1.58, 9.0.121 org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15
org.springframework.security:spring-security-web CVE-2024-38821 严重 5.7.10 5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4 Spring-WebFlux: Authorization Bypass of Static Resources in WebFlux Applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38821

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-10-28 07:15 修改: 2026-06-17 07:41
org.springframework.security:spring-security-web CVE-2026-22732 严重 5.7.10 6.5.9, 7.0.4 Spring Security: Spring Security: Security policy bypass and information disclosure due to unwritten HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22732

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-03-19 23:16 修改: 2026-06-17 10:20
org.springframework:spring-web CVE-2016-1000027 严重 5.3.29 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42
mysql:mysql-connector-java CVE-2023-22102 高危 8.0.28 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34
ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.9 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.9 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
com.alipay.sofa:hessian CVE-2024-46983 高危 3.3.6 3.5.5 SOFA Hessian Remote Command Execution (RCE) Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46983

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-09-19 23:15 修改: 2026-06-17 07:56
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.13.5 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.13.5 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.13.5 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.13.5 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-23 21:17 修改: 2026-09-02 13:18
com.google.protobuf:protobuf-java CVE-2024-7254 高危 3.22.1 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-46589 高危 9.0.79 11.0.0-M11, 10.1.16, 9.0.83, 8.5.96 tomcat: HTTP request smuggling via malformed trailer headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-34750 高危 9.0.79 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Improper Handling of Exceptional Conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-38286 高危 9.0.79 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Denial of Service in Tomcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38286

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-11-07 08:15 修改: 2026-06-17 07:39
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-50379 高危 9.0.79 11.0.2, 10.1.34, 9.0.98 tomcat: RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-56337 高危 9.0.79 11.0.2, 10.1.34, 9.0.98 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-12-20 16:15 修改: 2026-06-17 08:12
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48988 高危 9.0.79 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat DoS in multipart upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48989 高危 9.0.79 11.0.10, 10.1.44, 9.0.108 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52520 高危 9.0.79 11.0.9, 10.1.43, 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-53506 高危 9.0.79 9.0.107, 10.1.43, 11.0.9 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55752 高危 9.0.79 11.0.11, 10.1.45, 9.0.109 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-24880 高危 9.0.79 9.0.116, 10.1.52, 11.0.20 Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-34483 高危 9.0.79 9.0.116, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34483

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-34487 高危 9.0.79 9.0.117, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34487

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41284 高危 9.0.79 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-42498 高危 9.0.79 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43513 高危 9.0.79 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.springframework.boot:spring-boot CVE-2025-22235 高危 2.7.15 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45
org.springframework.boot:spring-boot CVE-2026-40973 高危 2.7.15 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10
org.springframework.ldap:spring-ldap-core CVE-2026-41720 高危 2.4.1 4.0.4, 3.3.8 Spring LDAP has Authentication Bypass with Empty Password

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41720

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework.security:spring-security-core CVE-2024-22257 高危 5.7.10 5.7.12, 5.8.11, 6.1.8, 6.2.3 spring-security: Broken Access Control With Direct Use of AuthenticatedVoter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22257

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-03-18 15:15 修改: 2026-06-30 13:16
org.springframework.security:spring-security-crypto CVE-2025-22228 高危 5.7.10 6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16 spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22228

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-03-20 06:15 修改: 2026-06-17 08:45
commons-io:commons-io CVE-2024-47554 高危 2.7 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
io.grpc:grpc-netty-shaded CVE-2025-55163 高危 1.57.2 1.75.0 netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
org.springframework:spring-core CVE-2025-41249 高危 5.3.29 6.2.11 org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22
org.springframework:spring-expression CVE-2026-41849 高危 5.3.29 spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41849

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-expression CVE-2026-41850 高危 5.3.29 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
io.micrometer:micrometer-core CVE-2026-40984 高危 1.9.14 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-09-02 13:17
org.springframework:spring-web CVE-2024-22243 高危 5.3.29 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web CVE-2024-22259 高危 5.3.29 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web CVE-2024-22262 高危 5.3.29 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11
org.springframework:spring-webmvc CVE-2024-38816 高危 5.3.29 6.1.13 spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38816

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-09-13 06:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc CVE-2024-38819 高危 5.3.29 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc CVE-2026-41842 高危 5.3.29 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41845 高危 5.3.29 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-25854 中危 9.0.79 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25
org.apache.tomcat.embed:tomcat-embed-websocket CVE-2024-23672 中危 9.0.79 11.0.0-M17, 10.1.19, 9.0.86, 8.5.99 Tomcat: WebSocket DoS with incomplete closing handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13
com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.13.5 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.13.5 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.springframework.boot:spring-boot-actuator CVE-2023-34055 中危 2.7.15 2.7.18, 3.0.13, 3.1.6 spring-boot: org.springframework.boot: spring-boot-actuator class vulnerable to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34055

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-11-28 09:15 修改: 2026-06-17 06:02
org.springframework.boot:spring-boot-autoconfigure CVE-2026-41001 中危 2.7.15 4.0.7, 3.5.15 spring-boot: Spring Boot: Local attacker can manipulate data directory due to predictable path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41001

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-11 07:16 修改: 2026-09-04 18:13
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.13.5 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
org.springframework.ldap:spring-ldap-core CVE-2024-38829 中危 2.4.1 3.2.8, 2.4.4 spring-ldap: Spring LDAP sensitive data exposure for case-sensitive comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38829

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-12-04 21:15 修改: 2026-06-17 07:41
org.springframework.security:spring-security-config CVE-2023-34042 中危 5.7.10 6.1.4, 6.0.7, 5.8.7, 5.7.11 spring-security-config: Incorrect Permission Assignment for spring-security.xsd

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34042

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-02-05 22:15 修改: 2026-06-17 06:02
ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.9 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
org.springframework.security:spring-security-core CVE-2024-38827 中危 5.7.10 5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 spring-security: authorization bypass for case sensitive comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-12-02 15:15 修改: 2026-06-17 07:41
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.17.1 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.9 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.springframework.security:spring-security-web CVE-2026-41706 中危 5.7.10 7.0.6, 6.5.11 Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41706

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.security:spring-security-web CVE-2026-47838 中危 5.7.10 6.5.11 Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47838

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework:spring-context CVE-2024-38820 中危 5.3.29 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-41080 中危 9.0.79 8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 tomcat: Open Redirect vulnerability in FORM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-42795 中危 9.0.79 10.1.14, 9.0.81, 8.5.94, 11.0.0-M12 tomcat: improper cleaning of recycled objects could lead to information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-44487 中危 9.0.79 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-10-10 14:15 修改: 2026-08-11 19:37
org.springframework:spring-expression CVE-2024-38808 中危 5.3.29 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41
org.springframework:spring-expression CVE-2026-41851 中危 5.3.29 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2023-45648 中危 9.0.79 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 tomcat: incorrectly parsed http trailer headers can cause request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-24549 中危 9.0.79 8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 Tomcat: HTTP/2 header handling DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-31650 中危 9.0.79 9.0.104, 10.1.40, 11.0.6 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31650

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49124 中危 9.0.79 11.0.8, 10.1.42, 9.0.106 Apache Tomcat installer for Windows has an untrusted search path vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.springframework:spring-web CVE-2024-38809 中危 5.3.29 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41
org.springframework:spring-web CVE-2024-38820 中危 5.3.29 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49125 中危 9.0.79 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52434 中危 9.0.79 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55668 中危 9.0.79 11.0.8, 10.1.42, 9.0.106 org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-66614 中危 9.0.79 11.0.15, 10.1.50, 9.0.113 tomcat: Client certificate verification bypass due to virtual host mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57
org.springframework:spring-webmvc CVE-2024-38828 中危 5.3.29 5.3.42 org.springframework:spring-webmvc: DoS via Spring MVC controller method with byte[] parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38828

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-11-18 04:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc CVE-2025-41242 中危 5.3.29 6.2.10 org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41242

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-08-18 09:15 修改: 2026-06-17 09:22
org.springframework:spring-webmvc CVE-2026-22737 中危 5.3.29 7.0.6, 6.2.17 Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-22745 中危 5.3.29 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-41841 中危 5.3.29 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41843 中危 5.3.29 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41844 中危 5.3.29 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41846 中危 5.3.29 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41853 中危 5.3.29 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-61795 低危 9.0.79 11.0.12, 10.1.47, 9.0.110 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50
org.springframework:spring-core CVE-2026-41848 低危 5.3.29 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43514 低危 9.0.79 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
ch.qos.logback:logback-core CVE-2026-9828 低危 1.2.9 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
org.springframework.security:spring-security-core CVE-2026-22746 低危 5.7.10 6.5.10, 7.0.5 Spring Security: Spring Security: Timing attack defense bypass allows information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22746

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-04-22 06:16 修改: 2026-06-17 10:20
ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.9 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
org.springframework:spring-expression CVE-2026-41852 低危 5.3.29 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
ch.qos.logback:logback-core CVE-2026-10532 低危 1.2.9 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.9 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-31651 低危 9.0.79 9.0.104, 10.1.40, 11.0.6 tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31651

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-46701 低危 9.0.79 9.0.105, 10.1.41, 11.0.7 tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55754 低危 9.0.79 11.0.11, 10.1.45, 9.0.109 org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55754

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.springframework:spring-context CVE-2025-22233 低危 5.3.29 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45
org.springframework:spring-webmvc CVE-2026-22735 低危 5.3.29 7.0.6, 6.2.17 org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-22741 低危 5.3.29 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:6f4477d144246ddafac138d6fc53b81cf1f53da04881647e8ea692c531c7d400

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×