docker.io/s1mplecc/spark-hadoop:3 linux/amd64

docker.io/s1mplecc/spark-hadoop:3 - Trivy安全扫描结果扫描时间: 2024-10-27 20:29

全部漏洞信息

低危漏洞:241

中危漏洞:340

高危漏洞:661

严重漏洞:252

系统OS: debian 10.11 扫描引擎: Trivy 扫描时间: 2024-10-27 20:29

docker.io/s1mplecc/spark-hadoop:3 (debian 10.11) (debian)

低危漏洞:203

中危漏洞:168

高危漏洞:153

严重漏洞:38

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
curl	CVE-2022-32221	严重	7.64.0-4+deb10u2	7.64.0-4+deb10u4	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-12-05 22:15 修改: 2024-03-27 15:00
dpkg	CVE-2022-1664	严重	1.19.7	1.19.8	Dpkg::Source::Archive in dpkg, the Debian package management system, b ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1664 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-05-26 14:15 修改: 2022-12-03 02:19
libc-bin	CVE-2021-33574	严重	2.28-10	2.28-10+deb10u2	glibc: mq_notify does not handle separately allocated thread attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-05-25 22:15 修改: 2023-11-07 03:35
libc-bin	CVE-2021-35942	严重	2.28-10	2.28-10+deb10u2	glibc: Arbitrary read in wordexp() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-22 18:15 修改: 2023-11-07 03:36
libc-bin	CVE-2022-23218	严重	2.28-10	2.28-10+deb10u2	glibc: Stack-based buffer overflow in svcunix_create via long pathnames 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:37
libc-bin	CVE-2022-23219	严重	2.28-10	2.28-10+deb10u2	glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:32
libc6	CVE-2021-33574	严重	2.28-10	2.28-10+deb10u2	glibc: mq_notify does not handle separately allocated thread attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-05-25 22:15 修改: 2023-11-07 03:35
libc6	CVE-2021-35942	严重	2.28-10	2.28-10+deb10u2	glibc: Arbitrary read in wordexp() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-22 18:15 修改: 2023-11-07 03:36
libc6	CVE-2022-23218	严重	2.28-10	2.28-10+deb10u2	glibc: Stack-based buffer overflow in svcunix_create via long pathnames 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:37
libc6	CVE-2022-23219	严重	2.28-10	2.28-10+deb10u2	glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-01-14 07:15 修改: 2022-11-08 13:32
libcurl4	CVE-2022-32221	严重	7.64.0-4+deb10u2	7.64.0-4+deb10u4	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-12-05 22:15 修改: 2024-03-27 15:00
libdb5.3	CVE-2019-8457	严重	5.3.28+dfsg1-0.5		sqlite: heap out-of-bound read in function rtreenode() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-05-30 16:29 修改: 2023-11-07 03:13
libexpat1	CVE-2022-22822	严重	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: Integer overflow in addBinding in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-10 14:12 修改: 2022-10-06 15:29
libexpat1	CVE-2022-22823	严重	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: Integer overflow in build_model in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-10 14:12 修改: 2022-10-06 14:47
libexpat1	CVE-2022-22824	严重	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: Integer overflow in defineAttribute in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-10 14:12 修改: 2022-10-06 14:47
libexpat1	CVE-2022-23852	严重	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: Integer overflow in function XML_GetBuffer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-24 02:15 修改: 2022-10-29 02:44
libexpat1	CVE-2022-25235	严重	2.2.6-2+deb10u1	2.2.6-2+deb10u3	expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-02-16 01:15 修改: 2023-11-07 03:44
libexpat1	CVE-2022-25236	严重	2.2.6-2+deb10u1	2.2.6-2+deb10u3	expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-02-16 01:15 修改: 2023-11-07 03:44
libexpat1	CVE-2022-25315	严重	2.2.6-2+deb10u1	2.2.6-2+deb10u3	expat: Integer overflow in storeRawNames() 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-02-18 05:15 修改: 2023-11-07 03:44
libexpat1	CVE-2024-45491	严重	2.2.6-2+deb10u1		libexpat: Integer Overflow or Wraparound 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libexpat1	CVE-2024-45492	严重	2.2.6-2+deb10u1		libexpat: integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libgssapi-krb5-2	CVE-2024-37371	严重	1.17-3+deb10u3		krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libk5crypto3	CVE-2024-37371	严重	1.17-3+deb10u3		krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5-3	CVE-2024-37371	严重	1.17-3+deb10u3		krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5support0	CVE-2024-37371	严重	1.17-3+deb10u3		krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libldap-2.4-2	CVE-2022-29155	严重	2.4.47+dfsg-3+deb10u6	2.4.47+dfsg-3+deb10u7	openldap: OpenLDAP SQL injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-05-04 20:15 修改: 2022-10-06 15:56
libldap-common	CVE-2022-29155	严重	2.4.47+dfsg-3+deb10u6	2.4.47+dfsg-3+deb10u7	openldap: OpenLDAP SQL injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-05-04 20:15 修改: 2022-10-06 15:56
libsqlite3-0	CVE-2020-35527	严重	3.27.2-3+deb10u1	3.27.2-3+deb10u2	sqlite: Out of bounds access during table rename 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35527 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-09-01 18:15 修改: 2022-12-08 22:29
libssl1.1	CVE-2022-1292	严重	1.1.1d-0+deb10u7	1.1.1n-0+deb10u2	openssl: c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-05-03 16:15 修改: 2023-11-07 03:41
libssl1.1	CVE-2022-2068	严重	1.1.1d-0+deb10u7	1.1.1n-0+deb10u3	openssl: the c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-21 15:15 修改: 2023-11-07 03:46
libtasn1-6	CVE-2021-46848	严重	4.13-3	4.13-3+deb10u1	libtasn1: Out-of-bound access in ETYPE_OK 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-10-24 14:15 修改: 2023-11-07 03:40
openssh-client	CVE-2023-38408	严重	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u3	openssh: Remote code execution in ssh-agent PKCS#11 support 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-07-20 03:15 修改: 2024-10-15 19:35
openssh-server	CVE-2023-38408	严重	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u3	openssh: Remote code execution in ssh-agent PKCS#11 support 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-07-20 03:15 修改: 2024-10-15 19:35
openssh-sftp-server	CVE-2023-38408	严重	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u3	openssh: Remote code execution in ssh-agent PKCS#11 support 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-07-20 03:15 修改: 2024-10-15 19:35
openssl	CVE-2022-1292	严重	1.1.1d-0+deb10u7	1.1.1n-0+deb10u2	openssl: c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-05-03 16:15 修改: 2023-11-07 03:41
openssl	CVE-2022-2068	严重	1.1.1d-0+deb10u7	1.1.1n-0+deb10u3	openssl: the c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-21 15:15 修改: 2023-11-07 03:46
zlib1g	CVE-2022-37434	严重	1:1.2.11.dfsg-1	1:1.2.11.dfsg-1+deb10u2	zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-08-05 07:15 修改: 2023-07-19 00:56
zlib1g	CVE-2023-45853	严重	1:1.2.11.dfsg-1		zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-10-14 02:15 修改: 2024-08-01 13:44
libcom-err2	CVE-2022-1304	高危	1.44.5-1+deb10u3		e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
bsdutils	CVE-2024-28085	高危	1:2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libcurl4	CVE-2021-22946	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:12
libcurl4	CVE-2022-22576	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: OAUTH2 bearer bypass in connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-05-26 17:15 修改: 2024-03-27 15:02
libcurl4	CVE-2022-27781	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: CERTINFO never-ending busy-loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
libcurl4	CVE-2022-27782	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: TLS and SSH connection too eager reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
libcurl4	CVE-2023-27533	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u6	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libcurl4	CVE-2023-27534	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u9	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libcurl4	CVE-2024-2398	高危	7.64.0-4+deb10u2		curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libcurl4	CVE-2024-6197	高危	7.64.0-4+deb10u2		curl: freeing stack buffer in utf8asn1str 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6197 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-07-24 08:15 修改: 2024-08-26 15:25
fdisk	CVE-2024-28085	高危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
gcc-8-base	CVE-2018-12886	高危	8.3.0-6		gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-05-22 19:29 修改: 2020-08-24 17:37
gcc-8-base	CVE-2019-15847	高危	8.3.0-6		gcc: POWER9 "DARN" RNG intrinsic produces repeated output 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15847 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-09-02 23:15 修改: 2020-09-17 13:38
gzip	CVE-2022-1271	高危	1.9-3	1.9-3+deb10u1	gzip: arbitrary-file-write vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-08-31 16:15 修改: 2024-08-26 10:47
libblkid1	CVE-2024-28085	高危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
curl	CVE-2021-22946	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:12
curl	CVE-2022-22576	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: OAUTH2 bearer bypass in connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-05-26 17:15 修改: 2024-03-27 15:02
curl	CVE-2022-27781	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: CERTINFO never-ending busy-loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
curl	CVE-2022-27782	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: TLS and SSH connection too eager reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:01
libc-bin	CVE-2020-1751	高危	2.28-10		glibc: array overflow in backtrace functions for powerpc 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-04-17 19:15 修改: 2023-11-07 03:19
libexpat1	CVE-2021-45960	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: Large number of prefixed XML attributes on a single tag can crash libexpat 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-01 19:15 修改: 2022-10-06 19:08
libexpat1	CVE-2021-46143	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: Integer overflow in doProlog in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-06 04:15 修改: 2022-10-06 19:11
libexpat1	CVE-2022-22825	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: Integer overflow in lookup in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-10 14:12 修改: 2022-10-06 14:47
libexpat1	CVE-2022-22826	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: Integer overflow in nextScaffoldPart in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-10 14:12 修改: 2022-10-06 12:44
libexpat1	CVE-2022-22827	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: Integer overflow in storeAtts in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-10 14:12 修改: 2022-10-06 12:52
libexpat1	CVE-2022-23990	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u2	expat: integer overflow in the doProlog function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-01-26 19:15 修改: 2023-11-07 03:44
libexpat1	CVE-2022-25314	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u3	expat: Integer overflow in copyString() 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25314 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-02-18 05:15 修改: 2023-11-07 03:44
libexpat1	CVE-2022-40674	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u5	expat: a use-after-free in the doContent function in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-09-14 11:15 修改: 2023-11-07 03:52
libexpat1	CVE-2022-43680	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u6	expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-10-24 14:15 修改: 2024-01-21 02:08
libexpat1	CVE-2023-52425	高危	2.2.6-2+deb10u1	2.2.6-2+deb10u7	expat: parsing large tokens can trigger a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-04 20:15 修改: 2024-08-26 20:35
libexpat1	CVE-2024-45490	高危	2.2.6-2+deb10u1		libexpat: Negative Length Parsing Vulnerability in libexpat 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-08-30 03:15 修改: 2024-10-18 12:24
libfdisk1	CVE-2024-28085	高危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libgcc1	CVE-2018-12886	高危	1:8.3.0-6		gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-05-22 19:29 修改: 2020-08-24 17:37
libgcc1	CVE-2019-15847	高危	1:8.3.0-6		gcc: POWER9 "DARN" RNG intrinsic produces repeated output 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15847 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-09-02 23:15 修改: 2020-09-17 13:38
libgcrypt20	CVE-2021-33560	高危	1.8.4-5+deb10u1		libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-06-08 11:15 修改: 2023-11-07 03:35
libgmp10	CVE-2021-43618	高危	2:6.1.2+dfsg-4	2:6.1.2+dfsg-4+deb10u1	gmp: Integer overflow and resultant buffer overflow via crafted input 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-11-15 04:15 修改: 2023-09-29 15:15
libgnutls30	CVE-2022-2509	高危	3.6.7-4+deb10u7	3.6.7-4+deb10u9	gnutls: Double free during gnutls_pkcs7_verify 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-08-01 14:15 修改: 2023-11-07 03:46
libgnutls30	CVE-2023-0361	高危	3.6.7-4+deb10u7	3.6.7-4+deb10u10	gnutls: timing side-channel in the TLS RSA key exchange code 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-02-15 18:15 修改: 2023-11-07 04:00
libgnutls30	CVE-2024-0553	高危	3.6.7-4+deb10u7	3.6.7-4+deb10u12	gnutls: incomplete fix for CVE-2023-5981 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-01-16 12:15 修改: 2024-09-16 13:15
libc-bin	CVE-2020-1752	高危	2.28-10	2.28-10+deb10u2	glibc: use-after-free in glob() function when expanding ~user 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-04-30 17:15 修改: 2023-11-07 03:19
libgssapi-krb5-2	CVE-2022-42898	高危	1.17-3+deb10u3	1.17-3+deb10u5	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libgssapi-krb5-2	CVE-2024-37370	高危	1.17-3+deb10u3		krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libidn2-0	CVE-2019-12290	高危	2.0.5-1+deb10u1		GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specifi ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12290 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-10-22 16:15 修改: 2023-11-07 03:03
libc-bin	CVE-2020-6096	高危	2.28-10	2.28-10+deb10u2	glibc: signed comparison vulnerability in the ARMv7 memcpy function 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-04-01 22:15 修改: 2023-11-07 03:24
libk5crypto3	CVE-2022-42898	高危	1.17-3+deb10u3	1.17-3+deb10u5	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libk5crypto3	CVE-2024-37370	高危	1.17-3+deb10u3		krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libc-bin	CVE-2021-3326	高危	2.28-10	2.28-10+deb10u2	glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-01-27 20:15 修改: 2023-11-07 03:37
libkrb5-3	CVE-2022-42898	高危	1.17-3+deb10u3	1.17-3+deb10u5	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libkrb5-3	CVE-2024-37370	高危	1.17-3+deb10u3		krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libc-bin	CVE-2021-3999	高危	2.28-10	2.28-10+deb10u2	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-08-24 16:15 修改: 2023-02-12 23:43
libkrb5support0	CVE-2022-42898	高危	1.17-3+deb10u3	1.17-3+deb10u5	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-12-25 06:15 修改: 2023-10-08 09:15
libkrb5support0	CVE-2024-37370	高危	1.17-3+deb10u3		krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libc-bin	CVE-2024-2961	高危	2.28-10	2.28-10+deb10u3	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libldap-2.4-2	CVE-2023-2953	高危	2.4.47+dfsg-3+deb10u6		openldap: null pointer dereference in ber_memalloc_x function 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-30 22:15 修改: 2023-08-02 16:46
libc-bin	CVE-2024-33599	高危	2.28-10	2.28-10+deb10u4	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libldap-common	CVE-2023-2953	高危	2.4.47+dfsg-3+deb10u6		openldap: null pointer dereference in ber_memalloc_x function 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-30 22:15 修改: 2023-08-02 16:46
liblzma5	CVE-2022-1271	高危	5.2.4-1	5.2.4-1+deb10u1	gzip: arbitrary-file-write vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-08-31 16:15 修改: 2024-08-26 10:47
libmount1	CVE-2024-28085	高危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libncurses6	CVE-2021-39537	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
libncurses6	CVE-2022-29458	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u3	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libncurses6	CVE-2023-29491	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libncursesw6	CVE-2021-39537	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
libncursesw6	CVE-2022-29458	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u3	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libncursesw6	CVE-2023-29491	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libnghttp2-14	CVE-2020-11080	高危	1.36.0-2+deb10u1	1.36.0-2+deb10u2	nghttp2: overly large SETTINGS frames can lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11080 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2020-06-03 23:15 修改: 2023-11-07 03:14
libnghttp2-14	CVE-2023-44487	高危	1.36.0-2+deb10u1	1.36.0-2+deb10u2	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
libnss-systemd	CVE-2019-3843	高危	241-7~deb10u8		systemd: services with DynamicUser can create SUID/SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
libnss-systemd	CVE-2019-3844	高危	241-7~deb10u8		systemd: services with DynamicUser can get new privileges and create SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
libnss-systemd	CVE-2023-26604	高危	241-7~deb10u8	241-7~deb10u9	systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
libnss-systemd	CVE-2023-50387	高危	241-7~deb10u8		bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libnss-systemd	CVE-2023-50868	高危	241-7~deb10u8		bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libpam-systemd	CVE-2019-3843	高危	241-7~deb10u8		systemd: services with DynamicUser can create SUID/SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
libpam-systemd	CVE-2019-3844	高危	241-7~deb10u8		systemd: services with DynamicUser can get new privileges and create SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
libpam-systemd	CVE-2023-26604	高危	241-7~deb10u8	241-7~deb10u9	systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
libpam-systemd	CVE-2023-50387	高危	241-7~deb10u8		bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libpam-systemd	CVE-2023-50868	高危	241-7~deb10u8		bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libsasl2-2	CVE-2022-24407	高危	2.1.27+dfsg-1+deb10u1	2.1.27+dfsg-1+deb10u2	cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-02-24 15:15 修改: 2023-11-07 03:44
libsasl2-modules-db	CVE-2022-24407	高危	2.1.27+dfsg-1+deb10u1	2.1.27+dfsg-1+deb10u2	cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-02-24 15:15 修改: 2023-11-07 03:44
libsmartcols1	CVE-2024-28085	高危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
curl	CVE-2023-27533	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u6	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
libsqlite3-0	CVE-2019-19603	高危	3.27.2-3+deb10u1		sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19603 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2019-12-09 19:15 修改: 2023-11-07 03:07
libsqlite3-0	CVE-2020-35525	高危	3.27.2-3+deb10u1	3.27.2-3+deb10u2	sqlite: Null pointer derreference in src/select.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35525 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-09-01 18:15 修改: 2023-07-06 19:15
libsqlite3-0	CVE-2023-7104	高危	3.27.2-3+deb10u1		sqlite: heap-buffer-overflow at sessionfuzz 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-12-29 10:15 修改: 2024-05-17 02:34
libssh2-1	CVE-2019-13115	高危	1.8.0-2.1	1.8.0-2.1+deb10u1	libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13115 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2019-07-16 18:15 修改: 2023-11-07 03:03
libssh2-1	CVE-2019-17498	高危	1.8.0-2.1	1.8.0-2.1+deb10u1	libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17498 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2019-10-21 22:15 修改: 2023-11-07 03:06
libssh2-1	CVE-2020-22218	高危	1.8.0-2.1	1.8.0-2.1+deb10u1	libssh2: use-of-uninitialized-value in _libssh2_transport_read 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-22218 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-22 19:16 修改: 2023-10-06 15:15
curl	CVE-2023-27534	高危	7.64.0-4+deb10u2	7.64.0-4+deb10u9	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:54
curl	CVE-2024-2398	高危	7.64.0-4+deb10u2		curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libssl1.1	CVE-2022-0778	高危	1.1.1d-0+deb10u7	1.1.1d-0+deb10u8	openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-03-15 17:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2022-4450	高危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0215	高危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-08 20:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2023-0286	高危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0464	高危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u5	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-22 17:15 修改: 2024-06-21 19:15
libstdc++6	CVE-2018-12886	高危	8.3.0-6		gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-05-22 19:29 修改: 2020-08-24 17:37
libstdc++6	CVE-2019-15847	高危	8.3.0-6		gcc: POWER9 "DARN" RNG intrinsic produces repeated output 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15847 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-09-02 23:15 修改: 2020-09-17 13:38
libsystemd0	CVE-2019-3843	高危	241-7~deb10u8		systemd: services with DynamicUser can create SUID/SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
libsystemd0	CVE-2019-3844	高危	241-7~deb10u8		systemd: services with DynamicUser can get new privileges and create SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
libsystemd0	CVE-2023-26604	高危	241-7~deb10u8	241-7~deb10u9	systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
libsystemd0	CVE-2023-50387	高危	241-7~deb10u8		bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libsystemd0	CVE-2023-50868	高危	241-7~deb10u8		bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
curl	CVE-2024-6197	高危	7.64.0-4+deb10u2		curl: freeing stack buffer in utf8asn1str 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6197 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-07-24 08:15 修改: 2024-08-26 15:25
libtinfo6	CVE-2021-39537	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
libtinfo6	CVE-2022-29458	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u3	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
libtinfo6	CVE-2023-29491	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libudev1	CVE-2019-3843	高危	241-7~deb10u8		systemd: services with DynamicUser can create SUID/SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
libudev1	CVE-2019-3844	高危	241-7~deb10u8		systemd: services with DynamicUser can get new privileges and create SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
libudev1	CVE-2023-26604	高危	241-7~deb10u8	241-7~deb10u9	systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
libudev1	CVE-2023-50387	高危	241-7~deb10u8		bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libudev1	CVE-2023-50868	高危	241-7~deb10u8		bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libuuid1	CVE-2024-28085	高危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libx11-6	CVE-2023-3138	高危	2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u3	libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3138 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-28 21:15 修改: 2023-12-08 19:15
libx11-6	CVE-2023-43787	高危	2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u4	libX11: integer overflow in XCreateImage() leading to a heap overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43787 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-10-10 13:15 修改: 2024-09-16 15:15
libx11-data	CVE-2023-3138	高危	2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u3	libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3138 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-28 21:15 修改: 2023-12-08 19:15
libx11-data	CVE-2023-43787	高危	2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u4	libX11: integer overflow in XCreateImage() leading to a heap overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43787 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-10-10 13:15 修改: 2024-09-16 15:15
mount	CVE-2024-28085	高危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
ncurses-base	CVE-2021-39537	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
ncurses-base	CVE-2022-29458	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u3	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
ncurses-base	CVE-2023-29491	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
ncurses-term	CVE-2021-39537	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-09-20 16:15 修改: 2023-12-03 20:15
ncurses-term	CVE-2022-29458	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u3	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46
ncurses-term	CVE-2023-29491	高危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u5	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
libc6	CVE-2020-1751	高危	2.28-10		glibc: array overflow in backtrace functions for powerpc 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-04-17 19:15 修改: 2023-11-07 03:19
openssh-client	CVE-2021-41617	高危	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4	openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41617 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-09-26 19:15 修改: 2023-12-26 04:15
openssh-client	CVE-2024-6387	高危	1:7.9p1-10+deb10u2		openssh: regreSSHion - race condition in SSH allows RCE/DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
libc6	CVE-2020-1752	高危	2.28-10	2.28-10+deb10u2	glibc: use-after-free in glob() function when expanding ~user 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-04-30 17:15 修改: 2023-11-07 03:19
openssh-server	CVE-2021-41617	高危	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4	openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41617 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-09-26 19:15 修改: 2023-12-26 04:15
openssh-server	CVE-2024-6387	高危	1:7.9p1-10+deb10u2		openssh: regreSSHion - race condition in SSH allows RCE/DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
libc6	CVE-2020-6096	高危	2.28-10	2.28-10+deb10u2	glibc: signed comparison vulnerability in the ARMv7 memcpy function 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-04-01 22:15 修改: 2023-11-07 03:24
openssh-sftp-server	CVE-2021-41617	高危	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4	openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41617 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-09-26 19:15 修改: 2023-12-26 04:15
openssh-sftp-server	CVE-2024-6387	高危	1:7.9p1-10+deb10u2		openssh: regreSSHion - race condition in SSH allows RCE/DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
libc6	CVE-2021-3326	高危	2.28-10	2.28-10+deb10u2	glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-01-27 20:15 修改: 2023-11-07 03:37
libc6	CVE-2021-3999	高危	2.28-10	2.28-10+deb10u2	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-08-24 16:15 修改: 2023-02-12 23:43
openssl	CVE-2022-0778	高危	1.1.1d-0+deb10u7	1.1.1d-0+deb10u8	openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-03-15 17:15 修改: 2024-06-21 19:15
openssl	CVE-2022-4450	高危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0215	高危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-08 20:15 修改: 2024-06-21 19:15
openssl	CVE-2023-0286	高危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0464	高危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u5	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-22 17:15 修改: 2024-06-21 19:15
perl-base	CVE-2020-16156	高危	5.28.1-6+deb10u1		perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
perl-base	CVE-2023-31484	高危	5.28.1-6+deb10u1		perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
systemd	CVE-2019-3843	高危	241-7~deb10u8		systemd: services with DynamicUser can create SUID/SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
systemd	CVE-2019-3844	高危	241-7~deb10u8		systemd: services with DynamicUser can get new privileges and create SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
systemd	CVE-2023-26604	高危	241-7~deb10u8	241-7~deb10u9	systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
systemd	CVE-2023-50387	高危	241-7~deb10u8		bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
systemd	CVE-2023-50868	高危	241-7~deb10u8		bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
systemd-sysv	CVE-2019-3843	高危	241-7~deb10u8		systemd: services with DynamicUser can create SUID/SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
systemd-sysv	CVE-2019-3844	高危	241-7~deb10u8		systemd: services with DynamicUser can get new privileges and create SGID binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10
systemd-sysv	CVE-2023-26604	高危	241-7~deb10u8	241-7~deb10u9	systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
systemd-sysv	CVE-2023-50387	高危	241-7~deb10u8		bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
systemd-sysv	CVE-2023-50868	高危	241-7~deb10u8		bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
util-linux	CVE-2024-28085	高危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 19:15 修改: 2024-08-26 21:35
libc6	CVE-2024-2961	高危	2.28-10	2.28-10+deb10u3	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33599	高危	2.28-10	2.28-10+deb10u4	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
zlib1g	CVE-2018-25032	高危	1:1.2.11.dfsg-1	1:1.2.11.dfsg-1+deb10u1	zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-03-25 09:15 修改: 2023-11-07 02:56
libdbus-1-3	CVE-2022-42012	中危	1.12.20-0+deb10u1	1.12.24-0+deb10u1	dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-10-10 00:15 修改: 2023-12-27 16:49
libdbus-1-3	CVE-2023-34969	中危	1.12.20-0+deb10u1	1.12.28-0+deb10u1	dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-08 03:15 修改: 2023-12-27 16:36
libnss-systemd	CVE-2021-3997	中危	241-7~deb10u8		systemd: Uncontrolled recursion in systemd-tmpfiles when removing files 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15
libnss-systemd	CVE-2022-3821	中危	241-7~deb10u8	241-7~deb10u10	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libnss-systemd	CVE-2022-4415	中危	241-7~deb10u8		systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libnss-systemd	CVE-2023-7008	中危	241-7~deb10u8		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libpam-modules	CVE-2024-10041	中危	1.3.1-5		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-10-23 14:15 修改: 2024-10-23 15:12
libpam-modules	CVE-2024-22365	中危	1.3.1-5		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpam-modules-bin	CVE-2024-10041	中危	1.3.1-5		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-10-23 14:15 修改: 2024-10-23 15:12
libpam-modules-bin	CVE-2024-22365	中危	1.3.1-5		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpam-runtime	CVE-2024-10041	中危	1.3.1-5		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-10-23 14:15 修改: 2024-10-23 15:12
libpam-runtime	CVE-2024-22365	中危	1.3.1-5		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
dbus	CVE-2022-42010	中危	1.12.20-0+deb10u1	1.12.24-0+deb10u1	dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-10-10 00:15 修改: 2023-12-27 16:49
libc-bin	CVE-2016-10228	中危	2.28-10	2.28-10+deb10u2	glibc: iconv program can hang when invoked with the -c option 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2017-03-02 01:59 修改: 2023-11-07 02:29
libc-bin	CVE-2019-25013	中危	2.28-10	2.28-10+deb10u2	glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-01-04 18:15 修改: 2023-11-09 14:44
libc-bin	CVE-2020-10029	中危	2.28-10	2.28-10+deb10u2	glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-03-04 15:15 修改: 2023-11-07 03:14
libc-bin	CVE-2020-27618	中危	2.28-10	2.28-10+deb10u2	glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-02-26 23:15 修改: 2022-10-28 20:06
libpam-systemd	CVE-2021-3997	中危	241-7~deb10u8		systemd: Uncontrolled recursion in systemd-tmpfiles when removing files 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15
libpam-systemd	CVE-2022-3821	中危	241-7~deb10u8	241-7~deb10u10	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libpam-systemd	CVE-2022-4415	中危	241-7~deb10u8		systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libpam-systemd	CVE-2023-7008	中危	241-7~deb10u8		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libpam0g	CVE-2024-10041	中危	1.3.1-5		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-10-23 14:15 修改: 2024-10-23 15:12
libpam0g	CVE-2024-22365	中危	1.3.1-5		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpcre3	CVE-2020-14155	中危	2:8.39-12		pcre: Integer overflow when parsing callout numeric arguments 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-06-15 17:15 修改: 2024-03-27 16:04
libc-bin	CVE-2023-4806	中危	2.28-10		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
libc-bin	CVE-2023-4813	中危	2.28-10		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
libc-bin	CVE-2024-33600	中危	2.28-10	2.28-10+deb10u4	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libsmartcols1	CVE-2021-37600	中危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15
libc-bin	CVE-2024-33601	中危	2.28-10	2.28-10+deb10u4	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33602	中危	2.28-10	2.28-10+deb10u4	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
dbus	CVE-2022-42011	中危	1.12.20-0+deb10u1	1.12.24-0+deb10u1	dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-10-10 00:15 修改: 2023-12-27 16:49
dbus	CVE-2022-42012	中危	1.12.20-0+deb10u1	1.12.24-0+deb10u1	dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-10-10 00:15 修改: 2023-12-27 16:49
libsqlite3-0	CVE-2019-19645	中危	3.27.2-3+deb10u1		sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19645 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2019-12-09 16:15 修改: 2022-04-15 16:14
libsqlite3-0	CVE-2019-19924	中危	3.27.2-3+deb10u1		sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19924 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2019-12-24 16:15 修改: 2023-11-07 03:07
libsqlite3-0	CVE-2020-13631	中危	3.27.2-3+deb10u1		sqlite: Virtual table can be renamed into the name of one of its shadow tables 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13631 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2020-05-27 15:15 修改: 2023-11-07 03:16
dbus	CVE-2023-34969	中危	1.12.20-0+deb10u1	1.12.28-0+deb10u1	dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-08 03:15 修改: 2023-12-27 16:36
bsdutils	CVE-2021-37600	中危	1:2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15
curl	CVE-2021-22947	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: Server responses received before STARTTLS processed after TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:03
fdisk	CVE-2021-37600	中危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15
curl	CVE-2022-27774	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u4	curl: credential leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
curl	CVE-2022-27776	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: auth/cookie leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
gpgv	CVE-2022-34903	中危	2.2.12-1+deb10u1	2.2.12-1+deb10u2	gpg: Signature spoofing via status line injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-07-01 22:15 修改: 2023-11-07 03:48
curl	CVE-2022-32206	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: HTTP compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libexpat1	CVE-2022-25313	中危	2.2.6-2+deb10u1	2.2.6-2+deb10u3	expat: Stack exhaustion in doctype parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-02-18 05:15 修改: 2023-11-07 03:44
curl	CVE-2022-32208	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: FTP-KRB bad message verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libssl1.1	CVE-2021-4160	中危	1.1.1d-0+deb10u7	1.1.1d-0+deb10u8	openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-01-28 22:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2022-2097	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-07-05 11:15 修改: 2024-06-21 19:15
libssl1.1	CVE-2022-4304	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0465	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u5	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-0466	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u5	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-2650	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u5	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
libssl1.1	CVE-2023-3446	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u6	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2023-3817	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u6	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2023-5678	中危	1.1.1d-0+deb10u7		openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-0727	中危	1.1.1d-0+deb10u7		openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-4741	中危	1.1.1d-0+deb10u7		openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl1.1	CVE-2024-5535	中危	1.1.1d-0+deb10u7		openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libssl1.1	CVE-2024-6119	中危	1.1.1d-0+deb10u7		openssl: Possible denial of service in X.509 name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
libfdisk1	CVE-2021-37600	中危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15
libc6	CVE-2016-10228	中危	2.28-10	2.28-10+deb10u2	glibc: iconv program can hang when invoked with the -c option 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2017-03-02 01:59 修改: 2023-11-07 02:29
libc6	CVE-2019-25013	中危	2.28-10	2.28-10+deb10u2	glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-01-04 18:15 修改: 2023-11-09 14:44
libc6	CVE-2020-10029	中危	2.28-10	2.28-10+deb10u2	glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-03-04 15:15 修改: 2023-11-07 03:14
libgcrypt20	CVE-2019-13627	中危	1.8.4-5+deb10u1		libgcrypt: ECDSA timing attack allowing private key leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13627 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-09-25 15:15 修改: 2021-07-21 11:39
libgcrypt20	CVE-2024-2236	中危	1.8.4-5+deb10u1		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-06 22:15 修改: 2024-09-14 04:15
libc6	CVE-2020-27618	中危	2.28-10	2.28-10+deb10u2	glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-02-26 23:15 修改: 2022-10-28 20:06
libsystemd0	CVE-2021-3997	中危	241-7~deb10u8		systemd: Uncontrolled recursion in systemd-tmpfiles when removing files 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15
libsystemd0	CVE-2022-3821	中危	241-7~deb10u8	241-7~deb10u10	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libsystemd0	CVE-2022-4415	中危	241-7~deb10u8		systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libsystemd0	CVE-2023-7008	中危	241-7~deb10u8		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libc6	CVE-2023-4806	中危	2.28-10		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
libc6	CVE-2023-4813	中危	2.28-10		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
libc6	CVE-2024-33600	中危	2.28-10	2.28-10+deb10u4	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libgnutls30	CVE-2021-4209	中危	3.6.7-4+deb10u7	3.6.7-4+deb10u9	GnuTLS: Null pointer dereference in MD_UPDATE 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-08-24 16:15 修改: 2022-10-27 16:57
libtinfo6	CVE-2020-19189	中危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u4	ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-08-22 19:16 修改: 2023-12-13 01:15
libtinfo6	CVE-2023-50495	中危	6.1+20181013-2+deb10u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libgnutls30	CVE-2023-5981	中危	3.6.7-4+deb10u7	3.6.7-4+deb10u11	gnutls: timing side-channel in the RSA-PSK authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-11-28 12:15 修改: 2024-09-16 13:15
libc6	CVE-2024-33601	中危	2.28-10	2.28-10+deb10u4	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33602	中危	2.28-10	2.28-10+deb10u4	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libblkid1	CVE-2021-37600	中危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15
libgssapi-krb5-2	CVE-2023-36054	中危	1.17-3+deb10u3	1.17-3+deb10u6	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libudev1	CVE-2021-3997	中危	241-7~deb10u8		systemd: Uncontrolled recursion in systemd-tmpfiles when removing files 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15
libudev1	CVE-2022-3821	中危	241-7~deb10u8	241-7~deb10u10	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
libudev1	CVE-2022-4415	中危	241-7~deb10u8		systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
libudev1	CVE-2023-7008	中危	241-7~deb10u8		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libgssapi-krb5-2	CVE-2024-26458	中危	1.17-3+deb10u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libuuid1	CVE-2021-37600	中危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15
libgssapi-krb5-2	CVE-2024-26461	中危	1.17-3+deb10u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
curl	CVE-2022-43552	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u4	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-09 20:15 修改: 2024-03-27 14:55
libx11-6	CVE-2023-43785	中危	2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u4	libX11: out-of-bounds memory access in _XkbReadKeySyms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43785 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-10-10 13:15 修改: 2024-09-16 15:15
libx11-6	CVE-2023-43786	中危	2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u4	libX11: stack exhaustion from infinite recursion in PutSubImage() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43786 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-10-10 13:15 修改: 2024-09-16 15:15
curl	CVE-2023-23916	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u5	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:54
curl	CVE-2023-27535	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u6	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:47
libx11-data	CVE-2023-43785	中危	2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u4	libX11: out-of-bounds memory access in _XkbReadKeySyms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43785 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-10-10 13:15 修改: 2024-09-16 15:15
libx11-data	CVE-2023-43786	中危	2:1.6.7-1+deb10u2	2:1.6.7-1+deb10u4	libX11: stack exhaustion from infinite recursion in PutSubImage() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43786 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-10-10 13:15 修改: 2024-09-16 15:15
login	CVE-2023-4641	中危	1:4.5-1.1		shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
curl	CVE-2023-27536	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u6	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
mount	CVE-2021-37600	中危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15
libk5crypto3	CVE-2023-36054	中危	1.17-3+deb10u3	1.17-3+deb10u6	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libk5crypto3	CVE-2024-26458	中危	1.17-3+deb10u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libk5crypto3	CVE-2024-26461	中危	1.17-3+deb10u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
ncurses-base	CVE-2020-19189	中危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u4	ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-08-22 19:16 修改: 2023-12-13 01:15
ncurses-base	CVE-2023-50495	中危	6.1+20181013-2+deb10u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
curl	CVE-2023-27538	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u6	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
curl	CVE-2023-28321	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u7	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-26 21:15 修改: 2023-11-07 04:10
curl	CVE-2023-46218	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u8	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-12-07 01:15 修改: 2024-01-25 14:15
ncurses-term	CVE-2020-19189	中危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u4	ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-08-22 19:16 修改: 2023-12-13 01:15
ncurses-term	CVE-2023-50495	中危	6.1+20181013-2+deb10u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libkrb5-3	CVE-2023-36054	中危	1.17-3+deb10u3	1.17-3+deb10u6	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libkrb5-3	CVE-2024-26458	中危	1.17-3+deb10u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5-3	CVE-2024-26461	中危	1.17-3+deb10u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
openssh-client	CVE-2023-48795	中危	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
openssh-client	CVE-2023-51385	中危	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4	openssh: potential command injection via shell metacharacters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-18 19:15 修改: 2024-03-13 21:15
curl	CVE-2024-6874	中危	7.64.0-4+deb10u2		curl: macidn punycode buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6874 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-07-24 08:15 修改: 2024-09-10 15:27
curl	CVE-2024-7264	中危	7.64.0-4+deb10u2		curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-07-31 08:15 修改: 2024-08-12 17:30
libcurl4	CVE-2021-22947	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: Server responses received before STARTTLS processed after TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:03
openssh-server	CVE-2023-48795	中危	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
openssh-server	CVE-2023-51385	中危	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4	openssh: potential command injection via shell metacharacters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-18 19:15 修改: 2024-03-13 21:15
libkrb5support0	CVE-2023-36054	中危	1.17-3+deb10u3	1.17-3+deb10u6	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libkrb5support0	CVE-2024-26458	中危	1.17-3+deb10u3		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5support0	CVE-2024-26461	中危	1.17-3+deb10u3		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
openssh-sftp-server	CVE-2023-48795	中危	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
openssh-sftp-server	CVE-2023-51385	中危	1:7.9p1-10+deb10u2	1:7.9p1-10+deb10u4	openssh: potential command injection via shell metacharacters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-18 19:15 修改: 2024-03-13 21:15
libcurl4	CVE-2022-27774	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u4	curl: credential leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libcurl4	CVE-2022-27776	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: auth/cookie leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-06-02 14:15 修改: 2024-03-27 15:02
libcurl4	CVE-2022-32206	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: HTTP compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libcurl4	CVE-2022-32208	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: FTP-KRB bad message verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-07-07 13:15 修改: 2024-03-27 15:00
libcurl4	CVE-2022-43552	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u4	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-09 20:15 修改: 2024-03-27 14:55
libcurl4	CVE-2023-23916	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u5	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:54
libmount1	CVE-2021-37600	中危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15
openssl	CVE-2021-4160	中危	1.1.1d-0+deb10u7	1.1.1d-0+deb10u8	openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-01-28 22:15 修改: 2024-06-21 19:15
openssl	CVE-2022-2097	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-07-05 11:15 修改: 2024-06-21 19:15
openssl	CVE-2022-4304	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u4	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-02-08 20:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0465	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u5	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
openssl	CVE-2023-0466	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u5	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-28 15:15 修改: 2024-02-04 09:15
openssl	CVE-2023-2650	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u5	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
openssl	CVE-2023-3446	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u6	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
openssl	CVE-2023-3817	中危	1.1.1d-0+deb10u7	1.1.1n-0+deb10u6	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
openssl	CVE-2023-5678	中危	1.1.1d-0+deb10u7		openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
openssl	CVE-2024-0727	中危	1.1.1d-0+deb10u7		openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
openssl	CVE-2024-4741	中危	1.1.1d-0+deb10u7		openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl	CVE-2024-5535	中危	1.1.1d-0+deb10u7		openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
openssl	CVE-2024-6119	中危	1.1.1d-0+deb10u7		openssl: Possible denial of service in X.509 name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
passwd	CVE-2023-4641	中危	1:4.5-1.1		shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
libcurl4	CVE-2023-27535	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u6	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:47
libcurl4	CVE-2023-27536	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u6	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
libcurl4	CVE-2023-27538	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u6	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-03-30 20:15 修改: 2024-03-27 14:46
libncurses6	CVE-2020-19189	中危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u4	ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-22 19:16 修改: 2023-12-13 01:15
libncurses6	CVE-2023-50495	中危	6.1+20181013-2+deb10u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libcurl4	CVE-2023-28321	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u7	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-26 21:15 修改: 2023-11-07 04:10
libcurl4	CVE-2023-46218	中危	7.64.0-4+deb10u2	7.64.0-4+deb10u8	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-12-07 01:15 修改: 2024-01-25 14:15
systemd	CVE-2021-3997	中危	241-7~deb10u8		systemd: Uncontrolled recursion in systemd-tmpfiles when removing files 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15
systemd	CVE-2022-3821	中危	241-7~deb10u8	241-7~deb10u10	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
systemd	CVE-2022-4415	中危	241-7~deb10u8		systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
systemd	CVE-2023-7008	中危	241-7~deb10u8		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libcurl4	CVE-2024-6874	中危	7.64.0-4+deb10u2		curl: macidn punycode buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6874 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-07-24 08:15 修改: 2024-09-10 15:27
libncursesw6	CVE-2020-19189	中危	6.1+20181013-2+deb10u2	6.1+20181013-2+deb10u4	ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-08-22 19:16 修改: 2023-12-13 01:15
libncursesw6	CVE-2023-50495	中危	6.1+20181013-2+deb10u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libcurl4	CVE-2024-7264	中危	7.64.0-4+deb10u2		curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-07-31 08:15 修改: 2024-08-12 17:30
libcurl4	CVE-2024-8096	中危	7.64.0-4+deb10u2		curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
systemd-sysv	CVE-2021-3997	中危	241-7~deb10u8		systemd: Uncontrolled recursion in systemd-tmpfiles when removing files 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15
systemd-sysv	CVE-2022-3821	中危	241-7~deb10u8	241-7~deb10u10	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-11-08 22:15 修改: 2023-11-07 03:51
systemd-sysv	CVE-2022-4415	中危	241-7~deb10u8		systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-01-11 15:15 修改: 2023-02-02 16:19
systemd-sysv	CVE-2023-7008	中危	241-7~deb10u8		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libnghttp2-14	CVE-2024-28182	中危	1.36.0-2+deb10u1	1.36.0-2+deb10u3	nghttp2: CONTINUATION frames DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-04-04 15:15 修改: 2024-05-01 18:15
util-linux	CVE-2021-37600	中危	2.33.1-0.1	2.33.1-0.1+deb10u1	util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15
curl	CVE-2024-8096	中危	7.64.0-4+deb10u2		curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
libdbus-1-3	CVE-2022-42010	中危	1.12.20-0+deb10u1	1.12.24-0+deb10u1	dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-10-10 00:15 修改: 2023-12-27 16:49
libdbus-1-3	CVE-2022-42011	中危	1.12.20-0+deb10u1	1.12.24-0+deb10u1	dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-10-10 00:15 修改: 2023-12-27 16:49
libc-bin	CVE-2019-1010023	低危	2.28-10		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc-bin	CVE-2019-1010024	低危	2.28-10		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc-bin	CVE-2019-1010025	低危	2.28-10		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libncurses6	CVE-2023-45918	低危	6.1+20181013-2+deb10u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libc-bin	CVE-2019-19126	低危	2.28-10	2.28-10+deb10u2	glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-11-19 22:15 修改: 2023-11-07 03:07
libexpat1	CVE-2013-0340	低危	2.2.6-2+deb10u1		expat: internal entity expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0340 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2014-01-21 18:55 修改: 2023-11-07 02:13
libexpat1	CVE-2023-52426	低危	2.2.6-2+deb10u1		expat: recursive XML entity expansion vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-04 20:15 修改: 2024-03-07 17:15
libexpat1	CVE-2024-28757	低危	2.2.6-2+deb10u1		expat: XML Entity Expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-03-10 05:15 修改: 2024-05-01 19:15
libc-bin	CVE-2019-9192	低危	2.28-10		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
libsystemd0	CVE-2013-4392	低危	241-7~deb10u8		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libsystemd0	CVE-2019-20386	低危	241-7~deb10u8		systemd: memory leak in button_open() in login/logind-button.c when udev events are received 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-01-21 06:15 修改: 2023-11-07 03:09
libsystemd0	CVE-2020-13529	低危	241-7~deb10u8		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libsystemd0	CVE-2023-31437	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libsystemd0	CVE-2023-31438	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libsystemd0	CVE-2023-31439	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libncursesw6	CVE-2023-45918	低危	6.1+20181013-2+deb10u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libtasn1-6	CVE-2018-1000654	低危	4.13-3		libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000654 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2018-08-20 19:31 修改: 2023-11-07 02:51
libc-bin	CVE-2021-27645	低危	2.28-10	2.28-10+deb10u2	glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-02-24 15:15 修改: 2023-11-07 03:31
libfdisk1	CVE-2022-0563	低危	2.33.1-0.1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
curl	CVE-2022-35252	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u4	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-09-23 14:15 修改: 2024-03-27 15:00
curl	CVE-2023-28320	低危	7.64.0-4+deb10u2		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-26 21:15 修改: 2023-10-20 18:42
libgcc1	CVE-2023-4039	低危	1:8.3.0-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
libtinfo6	CVE-2023-45918	低危	6.1+20181013-2+deb10u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libblkid1	CVE-2022-0563	低危	2.33.1-0.1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
curl	CVE-2023-28322	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u8	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-26 21:15 修改: 2023-12-22 16:15
curl	CVE-2023-38546	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u7	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-10-18 04:15 修改: 2024-07-09 14:15
libgcrypt20	CVE-2018-6829	低危	1.8.4-5+deb10u1		libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2018-02-07 23:29 修改: 2020-01-15 20:15
curl	CVE-2024-2379	低危	7.64.0-4+deb10u2		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
bash	TEMP-0841856-B18BAF	低危	5.0-4		[Privilege escalation possible to other user than root] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
apt	CVE-2011-3374	低危	1.8.2.3		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08
libnss-systemd	CVE-2013-4392	低危	241-7~deb10u8		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libnss-systemd	CVE-2019-20386	低危	241-7~deb10u8		systemd: memory leak in button_open() in login/logind-button.c when udev events are received 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-01-21 06:15 修改: 2023-11-07 03:09
libudev1	CVE-2013-4392	低危	241-7~deb10u8		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libudev1	CVE-2019-20386	低危	241-7~deb10u8		systemd: memory leak in button_open() in login/logind-button.c when udev events are received 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-01-21 06:15 修改: 2023-11-07 03:09
libudev1	CVE-2020-13529	低危	241-7~deb10u8		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libudev1	CVE-2023-31437	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libudev1	CVE-2023-31438	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libudev1	CVE-2023-31439	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libnss-systemd	CVE-2020-13529	低危	241-7~deb10u8		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libnss-systemd	CVE-2023-31437	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libuuid1	CVE-2022-0563	低危	2.33.1-0.1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libnss-systemd	CVE-2023-31438	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libnss-systemd	CVE-2023-31439	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
bash	CVE-2019-18276	低危	5.0-4		bash: when effective UID is not equal to its real UID the saved UID is not dropped 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18276 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-11-28 01:15 修改: 2023-11-07 03:06
bsdutils	CVE-2022-0563	低危	1:2.33.1-0.1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
coreutils	CVE-2016-2781	低危	8.30-3		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2017-02-07 15:59 修改: 2023-11-07 02:32
libgnutls30	CVE-2011-3389	低危	3.6.7-4+deb10u7		HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2011-09-06 19:55 修改: 2022-11-29 15:56
coreutils	CVE-2017-18018	低危	8.30-3		coreutils: race condition vulnerability in chown and chgrp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2018-01-04 04:29 修改: 2018-01-19 15:46
curl	CVE-2020-19909	低危	7.64.0-4+deb10u2		Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19909 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-22 19:16 修改: 2024-08-04 15:15
libcurl4	CVE-2020-19909	低危	7.64.0-4+deb10u2		Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19909 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-22 19:16 修改: 2024-08-04 15:15
login	CVE-2007-5686	低危	1:4.5-1.1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45
login	CVE-2013-4235	低危	1:4.5-1.1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
login	CVE-2018-7169	低危	1:4.5-1.1		shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2018-02-15 20:29 修改: 2019-10-03 00:03
login	CVE-2019-19882	低危	1:4.5-1.1		shadow-utils: local users can obtain root access because setuid programs are misconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19882 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-12-18 16:15 修改: 2020-08-25 15:15
login	CVE-2023-29383	低危	1:4.5-1.1		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
login	TEMP-0628843-DBAD28	低危	1:4.5-1.1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4	CVE-2021-22898	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-06-11 16:15 修改: 2024-03-27 15:47
libcurl4	CVE-2021-22922	低危	7.64.0-4+deb10u2		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:12
mount	CVE-2022-0563	低危	2.33.1-0.1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libcurl4	CVE-2021-22923	低危	7.64.0-4+deb10u2		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
libgssapi-krb5-2	CVE-2018-5709	低危	1.17-3+deb10u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libcurl4	CVE-2021-22924	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: Bad connection reuse due to flawed path name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
libip4tc0	CVE-2012-2663	低危	1.8.2-4		iptables: --syn flag bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2014-02-15 14:57 修改: 2023-11-07 02:10
libip4tc0	CVE-2019-11360	低危	1.8.2-4		iptables: buffer overflow in iptables-restore 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11360 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-07-12 14:15 修改: 2021-07-21 11:39
ncurses-base	CVE-2023-45918	低危	6.1+20181013-2+deb10u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libcurl4	CVE-2022-35252	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u4	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-09-23 14:15 修改: 2024-03-27 15:00
libpam-systemd	CVE-2013-4392	低危	241-7~deb10u8		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libpam-systemd	CVE-2019-20386	低危	241-7~deb10u8		systemd: memory leak in button_open() in login/logind-button.c when udev events are received 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-01-21 06:15 修改: 2023-11-07 03:09
libpam-systemd	CVE-2020-13529	低危	241-7~deb10u8		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libpam-systemd	CVE-2023-31437	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
ncurses-term	CVE-2023-45918	低危	6.1+20181013-2+deb10u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libpam-systemd	CVE-2023-31438	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libpam-systemd	CVE-2023-31439	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libcurl4	CVE-2023-28320	低危	7.64.0-4+deb10u2		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-26 21:15 修改: 2023-10-20 18:42
libcurl4	CVE-2023-28322	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u8	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-05-26 21:15 修改: 2023-12-22 16:15
libcurl4	CVE-2023-38546	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u7	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-10-18 04:15 修改: 2024-07-09 14:15
openssh-client	CVE-2007-2243	低危	1:7.9p1-10+deb10u2		OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabl ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2243 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2007-04-25 16:19 修改: 2017-07-29 01:31
openssh-client	CVE-2007-2768	低危	1:7.9p1-10+deb10u2		OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2768 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2007-05-21 20:30 修改: 2021-04-01 15:32
openssh-client	CVE-2008-3234	低危	1:7.9p1-10+deb10u2		sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapsh ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2008-3234 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2008-07-18 16:41 修改: 2017-09-29 01:31
openssh-client	CVE-2016-20012	低危	1:7.9p1-10+deb10u2		openssh: Public key information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20012 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-09-15 20:15 修改: 2024-08-06 04:16
openssh-client	CVE-2018-15919	低危	1:7.9p1-10+deb10u2		openssh: User enumeration via malformed packets in authentication requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15919 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2018-08-28 08:29 修改: 2019-03-07 16:29
openssh-client	CVE-2019-16905	低危	1:7.9p1-10+deb10u2		openssh: an integer overflow in the private key parsing code for the XMSS key type 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16905 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-10-09 20:15 修改: 2023-03-01 01:56
openssh-client	CVE-2019-6110	低危	1:7.9p1-10+deb10u2		openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6110 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-01-31 18:29 修改: 2023-02-23 23:29
openssh-client	CVE-2020-12062	低危	1:7.9p1-10+deb10u2		openssh: scp can send duplicate responses to the server upon a utimes system call failure leading to overwrite of arbitrary files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12062 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-06-01 16:15 修改: 2024-08-04 12:15
openssh-client	CVE-2020-14145	低危	1:7.9p1-10+deb10u2		openssh: Observable discrepancy leading to an information leak in the algorithm negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-06-29 18:15 修改: 2022-04-28 19:34
openssh-client	CVE-2020-15778	低危	1:7.9p1-10+deb10u2		openssh: scp allows command injection when using backtick characters in the destination argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15778 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-07-24 14:15 修改: 2024-08-04 14:15
openssh-client	CVE-2021-36368	低危	1:7.9p1-10+deb10u2		openssh: possible bypass of fido 2 devices and ssh-askpass 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36368 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-03-13 00:15 修改: 2024-08-04 01:15
openssh-client	CVE-2023-51767	低危	1:7.9p1-10+deb10u2		openssh: authentication bypass via row hammer attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51767 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-24 07:15 修改: 2024-02-27 15:51
openssh-client	CVE-2024-39894	低危	1:7.9p1-10+deb10u2		openssh: Logic error in ObscureKeystrokeTiming 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-39894 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-07-02 18:15 修改: 2024-09-11 16:15
libpcre3	CVE-2017-11164	低危	2:8.39-12		pcre: OP_KETRMAX feature in the match function in pcre_exec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2017-07-11 03:29 修改: 2023-11-07 02:38
libpcre3	CVE-2017-16231	低危	2:8.39-12		pcre: self-recursive call in match() in pcre_exec.c leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16231 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-03-21 15:59 修改: 2024-08-05 21:15
libpcre3	CVE-2017-7245	低危	2:8.39-12		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2017-03-23 21:59 修改: 2018-08-17 10:29
libpcre3	CVE-2017-7246	低危	2:8.39-12		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2017-03-23 21:59 修改: 2018-08-17 10:29
libpcre3	CVE-2019-20838	低危	2:8.39-12		pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20838 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-06-15 17:15 修改: 2024-03-27 16:05
openssh-server	CVE-2007-2243	低危	1:7.9p1-10+deb10u2		OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabl ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2243 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2007-04-25 16:19 修改: 2017-07-29 01:31
openssh-server	CVE-2007-2768	低危	1:7.9p1-10+deb10u2		OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2768 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2007-05-21 20:30 修改: 2021-04-01 15:32
openssh-server	CVE-2008-3234	低危	1:7.9p1-10+deb10u2		sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapsh ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2008-3234 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2008-07-18 16:41 修改: 2017-09-29 01:31
openssh-server	CVE-2016-20012	低危	1:7.9p1-10+deb10u2		openssh: Public key information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20012 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-09-15 20:15 修改: 2024-08-06 04:16
openssh-server	CVE-2018-15919	低危	1:7.9p1-10+deb10u2		openssh: User enumeration via malformed packets in authentication requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15919 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2018-08-28 08:29 修改: 2019-03-07 16:29
openssh-server	CVE-2019-16905	低危	1:7.9p1-10+deb10u2		openssh: an integer overflow in the private key parsing code for the XMSS key type 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16905 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-10-09 20:15 修改: 2023-03-01 01:56
openssh-server	CVE-2019-6110	低危	1:7.9p1-10+deb10u2		openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6110 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-01-31 18:29 修改: 2023-02-23 23:29
openssh-server	CVE-2020-12062	低危	1:7.9p1-10+deb10u2		openssh: scp can send duplicate responses to the server upon a utimes system call failure leading to overwrite of arbitrary files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12062 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-06-01 16:15 修改: 2024-08-04 12:15
openssh-server	CVE-2020-14145	低危	1:7.9p1-10+deb10u2		openssh: Observable discrepancy leading to an information leak in the algorithm negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-06-29 18:15 修改: 2022-04-28 19:34
openssh-server	CVE-2020-15778	低危	1:7.9p1-10+deb10u2		openssh: scp allows command injection when using backtick characters in the destination argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15778 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-07-24 14:15 修改: 2024-08-04 14:15
openssh-server	CVE-2021-36368	低危	1:7.9p1-10+deb10u2		openssh: possible bypass of fido 2 devices and ssh-askpass 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36368 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-03-13 00:15 修改: 2024-08-04 01:15
openssh-server	CVE-2023-51767	低危	1:7.9p1-10+deb10u2		openssh: authentication bypass via row hammer attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51767 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-24 07:15 修改: 2024-02-27 15:51
openssh-server	CVE-2024-39894	低危	1:7.9p1-10+deb10u2		openssh: Logic error in ObscureKeystrokeTiming 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-39894 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-07-02 18:15 修改: 2024-09-11 16:15
libprocps7	CVE-2023-4016	低危	2:3.3.15-2		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
libcurl4	CVE-2024-2379	低危	7.64.0-4+deb10u2		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
fdisk	CVE-2022-0563	低危	2.33.1-0.1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libseccomp2	CVE-2019-9893	低危	2.3.3-4		libseccomp: incorrect generation of syscall filters in libseccomp 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9893 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-03-21 16:01 修改: 2020-08-24 17:37
libsepol1	CVE-2021-36084	低危	2.8-1		libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
openssh-sftp-server	CVE-2007-2243	低危	1:7.9p1-10+deb10u2		OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabl ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2243 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2007-04-25 16:19 修改: 2017-07-29 01:31
openssh-sftp-server	CVE-2007-2768	低危	1:7.9p1-10+deb10u2		OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2768 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2007-05-21 20:30 修改: 2021-04-01 15:32
openssh-sftp-server	CVE-2008-3234	低危	1:7.9p1-10+deb10u2		sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapsh ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2008-3234 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2008-07-18 16:41 修改: 2017-09-29 01:31
openssh-sftp-server	CVE-2016-20012	低危	1:7.9p1-10+deb10u2		openssh: Public key information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20012 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-09-15 20:15 修改: 2024-08-06 04:16
openssh-sftp-server	CVE-2018-15919	低危	1:7.9p1-10+deb10u2		openssh: User enumeration via malformed packets in authentication requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15919 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2018-08-28 08:29 修改: 2019-03-07 16:29
openssh-sftp-server	CVE-2019-16905	低危	1:7.9p1-10+deb10u2		openssh: an integer overflow in the private key parsing code for the XMSS key type 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16905 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-10-09 20:15 修改: 2023-03-01 01:56
openssh-sftp-server	CVE-2019-6110	低危	1:7.9p1-10+deb10u2		openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6110 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-01-31 18:29 修改: 2023-02-23 23:29
openssh-sftp-server	CVE-2020-12062	低危	1:7.9p1-10+deb10u2		openssh: scp can send duplicate responses to the server upon a utimes system call failure leading to overwrite of arbitrary files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12062 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-06-01 16:15 修改: 2024-08-04 12:15
openssh-sftp-server	CVE-2020-14145	低危	1:7.9p1-10+deb10u2		openssh: Observable discrepancy leading to an information leak in the algorithm negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-06-29 18:15 修改: 2022-04-28 19:34
openssh-sftp-server	CVE-2020-15778	低危	1:7.9p1-10+deb10u2		openssh: scp allows command injection when using backtick characters in the destination argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15778 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-07-24 14:15 修改: 2024-08-04 14:15
openssh-sftp-server	CVE-2021-36368	低危	1:7.9p1-10+deb10u2		openssh: possible bypass of fido 2 devices and ssh-askpass 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36368 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2022-03-13 00:15 修改: 2024-08-04 01:15
openssh-sftp-server	CVE-2023-51767	低危	1:7.9p1-10+deb10u2		openssh: authentication bypass via row hammer attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51767 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-12-24 07:15 修改: 2024-02-27 15:51
openssh-sftp-server	CVE-2024-39894	低危	1:7.9p1-10+deb10u2		openssh: Logic error in ObscureKeystrokeTiming 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-39894 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2024-07-02 18:15 修改: 2024-09-11 16:15
libsepol1	CVE-2021-36085	低危	2.8-1		libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36086	低危	2.8-1		libsepol: use-after-free in cil_reset_classpermission() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36087	低危	2.8-1		libsepol: heap-based buffer overflow in ebitmap_match_any() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libk5crypto3	CVE-2018-5709	低危	1.17-3+deb10u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
curl	CVE-2021-22898	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-06-11 16:15 修改: 2024-03-27 15:47
libsmartcols1	CVE-2022-0563	低危	2.33.1-0.1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
curl	CVE-2021-22922	低危	7.64.0-4+deb10u2		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:12
gcc-8-base	CVE-2023-4039	低危	8.3.0-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
curl	CVE-2021-22923	低危	7.64.0-4+deb10u2		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
gpgv	CVE-2019-14855	低危	2.2.12-1+deb10u1		gnupg2: OpenPGP Key Certification Forgeries with SHA-1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-03-20 16:15 修改: 2022-11-08 02:28
gpgv	CVE-2022-3219	低危	2.2.12-1+deb10u1		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
libkrb5-3	CVE-2018-5709	低危	1.17-3+deb10u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libc6	CVE-2010-4756	低危	2.28-10		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
libsqlite3-0	CVE-2019-19244	低危	3.27.2-3+deb10u1		sqlite: allows a crash if a sub-select uses both DISTINCT and window functions and also has certain ORDER BY usage 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19244 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2019-11-25 20:15 修改: 2022-04-15 16:12
libsqlite3-0	CVE-2020-11656	低危	3.27.2-3+deb10u1		sqlite: use-after-free in the ALTER TABLE implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11656 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2020-04-09 03:15 修改: 2022-04-08 10:34
libsqlite3-0	CVE-2021-36690	低危	3.27.2-3+deb10u1		A segmentation fault can occur in the sqlite3.exe command-line compone ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36690 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-08-24 14:15 修改: 2024-08-04 01:15
libsqlite3-0	CVE-2021-45346	低危	3.27.2-3+deb10u1		sqlite: crafted SQL query allows a malicious user to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-02-14 19:15 修改: 2024-08-04 05:15
libsqlite3-0	CVE-2022-35737	低危	3.27.2-3+deb10u1		sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2022-08-03 06:15 修改: 2024-03-27 16:05
libc6	CVE-2018-20796	低危	2.28-10		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
libc6	CVE-2019-1010022	低危	2.28-10		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
openssl	CVE-2024-2511	低危	1.1.1d-0+deb10u7		openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
openssl	CVE-2024-9143	低危	1.1.1d-0+deb10u7		openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
libc6	CVE-2019-1010023	低危	2.28-10		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
passwd	CVE-2007-5686	低危	1:4.5-1.1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45
passwd	CVE-2013-4235	低危	1:4.5-1.1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
passwd	CVE-2018-7169	低危	1:4.5-1.1		shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2018-02-15 20:29 修改: 2019-10-03 00:03
passwd	CVE-2019-19882	低危	1:4.5-1.1		shadow-utils: local users can obtain root access because setuid programs are misconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19882 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-12-18 16:15 修改: 2020-08-25 15:15
passwd	CVE-2023-29383	低危	1:4.5-1.1		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
passwd	TEMP-0628843-DBAD28	低危	1:4.5-1.1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2019-1010024	低危	2.28-10		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc6	CVE-2019-1010025	低危	2.28-10		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
perl-base	CVE-2011-4116	低危	5.28.1-6+deb10u1		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
perl-base	CVE-2023-31486	低危	5.28.1-6+deb10u1		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
procps	CVE-2023-4016	低危	2:3.3.15-2		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
libkrb5support0	CVE-2018-5709	低危	1.17-3+deb10u3		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libc6	CVE-2019-19126	低危	2.28-10	2.28-10+deb10u2	glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-11-19 22:15 修改: 2023-11-07 03:07
libc6	CVE-2019-9192	低危	2.28-10		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
libldap-2.4-2	CVE-2015-3276	低危	2.4.47+dfsg-3+deb10u6		openldap: incorrect multi-keyword mode cipherstring parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2015-12-07 20:59 修改: 2023-04-28 18:28
libldap-2.4-2	CVE-2017-14159	低危	2.4.47+dfsg-3+deb10u6		openldap: Privilege escalation via PID file manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2017-09-05 18:29 修改: 2022-06-13 19:18
libldap-2.4-2	CVE-2017-17740	低危	2.4.47+dfsg-3+deb10u6		openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2017-12-18 06:29 修改: 2022-06-13 19:10
libldap-2.4-2	CVE-2020-15719	低危	2.4.47+dfsg-3+deb10u6		openldap: Certificate validation incorrectly matches name against CN-ID 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2020-07-14 14:15 修改: 2022-05-12 15:01
libc6	CVE-2021-27645	低危	2.28-10	2.28-10+deb10u2	glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-02-24 15:15 修改: 2023-11-07 03:31
curl	CVE-2021-22924	低危	7.64.0-4+deb10u2	7.64.0-4+deb10u3	curl: Bad connection reuse due to flawed path name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
systemd	CVE-2013-4392	低危	241-7~deb10u8		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
systemd	CVE-2019-20386	低危	241-7~deb10u8		systemd: memory leak in button_open() in login/logind-button.c when udev events are received 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-01-21 06:15 修改: 2023-11-07 03:09
systemd	CVE-2020-13529	低危	241-7~deb10u8		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
systemd	CVE-2023-31437	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
systemd	CVE-2023-31438	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
systemd	CVE-2023-31439	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libldap-common	CVE-2015-3276	低危	2.4.47+dfsg-3+deb10u6		openldap: incorrect multi-keyword mode cipherstring parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2015-12-07 20:59 修改: 2023-04-28 18:28
libldap-common	CVE-2017-14159	低危	2.4.47+dfsg-3+deb10u6		openldap: Privilege escalation via PID file manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2017-09-05 18:29 修改: 2022-06-13 19:18
libldap-common	CVE-2017-17740	低危	2.4.47+dfsg-3+deb10u6		openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2017-12-18 06:29 修改: 2022-06-13 19:10
libldap-common	CVE-2020-15719	低危	2.4.47+dfsg-3+deb10u6		openldap: Certificate validation incorrectly matches name against CN-ID 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2020-07-14 14:15 修改: 2022-05-12 15:01
liblz4-1	CVE-2019-17543	低危	1.8.3-1+deb10u1		lz4: heap-based buffer overflow in LZ4_write32 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17543 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-10-14 02:15 修改: 2023-11-07 03:06
libapparmor1	CVE-2016-1585	低危	2.13.2-10		In all versions of AppArmor mount rules are accidentally widened when ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1585 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2019-04-22 16:29 修改: 2023-11-07 02:29
libapt-pkg5.0	CVE-2011-3374	低危	1.8.2.3		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08
libc-bin	CVE-2010-4756	低危	2.28-10		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
libmount1	CVE-2022-0563	低危	2.33.1-0.1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
systemd-sysv	CVE-2013-4392	低危	241-7~deb10u8		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
systemd-sysv	CVE-2019-20386	低危	241-7~deb10u8		systemd: memory leak in button_open() in login/logind-button.c when udev events are received 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2020-01-21 06:15 修改: 2023-11-07 03:09
systemd-sysv	CVE-2020-13529	低危	241-7~deb10u8		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
systemd-sysv	CVE-2023-31437	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
systemd-sysv	CVE-2023-31438	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
systemd-sysv	CVE-2023-31439	低危	241-7~deb10u8		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
sysv-rc	TEMP-0517018-A83CE6	低危	2.93-8		[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
sysvinit-utils	TEMP-0517018-A83CE6	低危	2.93-8		[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tar	CVE-2005-2541	低危	1.30+dfsg-6		tar: does not properly warn the user when extracting setuid or setgid files 漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2005-08-10 04:00 修改: 2023-11-07 01:57
tar	CVE-2019-9923	低危	1.30+dfsg-6		tar: null-pointer dereference in pax_decode_header in sparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9923 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-03-22 08:29 修改: 2023-11-07 03:13
tar	CVE-2021-20193	低危	1.30+dfsg-6		tar: Memory leak in read_header() in list.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20193 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2021-03-26 17:15 修改: 2024-10-24 18:15
tar	CVE-2022-48303	低危	1.30+dfsg-6		tar: heap buffer overflow at from_header() in list.c via specially crafted checksum 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-01-30 04:15 修改: 2023-05-30 17:16
tar	CVE-2023-39804	低危	1.30+dfsg-6	1.30+dfsg-6+deb10u1	tar: Incorrectly handled extension attributes in PAX archives can lead to a crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2024-03-27 04:15 修改: 2024-03-27 12:29
tar	TEMP-0290435-0B57B5	低危	1.30+dfsg-6		[tar's rmt command may have undesired side effects] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl1.1	CVE-2024-2511	低危	1.1.1d-0+deb10u7		openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-9143	低危	1.1.1d-0+deb10u7		openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:63df53be8c264c25480623aa6fe501a0ca137f67557f1d3eafe26b3414a20762 发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
util-linux	CVE-2022-0563	低危	2.33.1-0.1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libc-bin	CVE-2018-20796	低危	2.28-10		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
libc-bin	CVE-2019-1010022	低危	2.28-10		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libstdc++6	CVE-2023-4039	低危	8.3.0-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
tzdata	DLA-3412-1	未知	2021a-0+deb10u2	2021a-0+deb10u11	tzdata - new timezone database 漏洞详情: 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-3684-1	未知	2021a-0+deb10u2	2021a-0+deb10u12	tzdata - new timezone database 漏洞详情: 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-3788-1	未知	2021a-0+deb10u2	2024a-0+deb10u1	tzdata - new timezone database 漏洞详情: 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
debian-archive-keyring	DLA-3482-1	未知	2019.1+deb10u1	2019.1+deb10u2	debian-archive-keyring - security update 漏洞详情: 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libbz2-1.0	DLA-3112-1	未知	1.0.6-9.2~deb10u1	1.0.6-9.2~deb10u2	bzip2 - bugfix update 漏洞详情: 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libexpat1	DSA-5085-2	未知	2.2.6-2+deb10u1	2.2.6-2+deb10u4	expat - regression update 漏洞详情: 镜像层: sha256:b59a5308473e910c714c3fc01d931280d8fda7b66e76b03aea7633705e87b289 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-3134-1	未知	2021a-0+deb10u2	2021a-0+deb10u7	tzdata - new timezone database 漏洞详情: 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-3161-1	未知	2021a-0+deb10u2	2021a-0+deb10u8	tzdata - new timezone database 漏洞详情: 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-3366-1	未知	2021a-0+deb10u2	2021a-0+deb10u10	tzdata - new timezone database 漏洞详情: 镜像层: sha256:77281d05f1695b48636054c963cc40acbd5b040327ba0cd887a9d579817e0772 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Java (jar)

低危漏洞:35

中危漏洞:139

高危漏洞:460

严重漏洞:209

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.4.0	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.4.0	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.4.0	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.4.0	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.4.0	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.4.0	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.4.0	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.4.0	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2017-7525	严重	2.4.0	2.6.7.1, 2.7.9.1, 2.8.9	jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7525 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2017-7525	严重	2.4.0	2.6.7.1, 2.7.9.1, 2.8.9	jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7525 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2017-7525	严重	2.4.0	2.6.7.1, 2.7.9.1, 2.8.9	jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7525 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2017-7525	严重	2.4.0	2.6.7.1, 2.7.9.1, 2.8.9	jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7525 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.4.0	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.4.0	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.4.0	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.4.0	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.4.0	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.4.0	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.4.0	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.4.0	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.4.0	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.4.0	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.4.0	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.4.0	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.4.0	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.4.0	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.4.0	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.4.0	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.4.0	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2017-15095	严重	2.6.7.1	2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-06 15:29 修改: 2023-11-07 02:39
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.6.7.1	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.6.7.1	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.6.7.1	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.6.7.1	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.6.7.1	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.6.7.1	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.6.7.1	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.6.7.1	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.6.7.1	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.6.7.1	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.6.7.1	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.6.7.1	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.6.7.1	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.6.7.1	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.6.7.1	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.6.7.1	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.6.7.1	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2017-17485	严重	2.6.7.3	2.9.4, 2.8.11, 2.7.9.2	jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-01-10 18:29 修改: 2023-06-08 18:00
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.6.7.3	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.6.7.3	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-7489	严重	2.6.7.3	2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5	jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-02-26 15:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.6.7.3	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.6.7.3	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.6.7.3	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.6.7.3	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.6.7.3	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.6.7.3	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-09 16:15 修改: 2024-04-03 17:40
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14720	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: exfiltration/XXE in some JDK classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14720	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: exfiltration/XXE in some JDK classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14720	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: exfiltration/XXE in some JDK classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14721	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14721	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14721	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:53
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19360	严重	2.9.5	2.9.8, 2.8.11.3, 2.7.9.5	jackson-databind: improper polymorphic deserialization in axis2-transport-jms class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19360	严重	2.9.5	2.9.8, 2.8.11.3, 2.7.9.5	jackson-databind: improper polymorphic deserialization in axis2-transport-jms class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19360	严重	2.9.5	2.9.8, 2.8.11.3, 2.7.9.5	jackson-databind: improper polymorphic deserialization in axis2-transport-jms class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19361	严重	2.9.5	2.7.9.5, 2.9.8, 2.8.11.3	jackson-databind: improper polymorphic deserialization in openjpa class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19361	严重	2.9.5	2.7.9.5, 2.9.8, 2.8.11.3	jackson-databind: improper polymorphic deserialization in openjpa class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19361	严重	2.9.5	2.7.9.5, 2.9.8, 2.8.11.3	jackson-databind: improper polymorphic deserialization in openjpa class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.9.5	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.9.5	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.9.5	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-01-02 18:29 修改: 2023-11-07 02:55
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.9.5	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.9.5	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.9.5	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-29 12:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.9.5	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.9.5	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.9.5	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.9.5	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.9.5	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.9.5	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-15 22:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 17:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.9.5	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.9.5	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.9.5	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-07 00:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-12 21:15 修改: 2023-11-07 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.9.5	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.9.5	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.9.5	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-03 04:15 修改: 2023-11-07 03:09
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.9.5	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.9.5	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.9.5	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-02-10 21:56 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9546	严重	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in shaded-hikari-config 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9546	严重	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in shaded-hikari-config 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9546	严重	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in shaded-hikari-config 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.9.5	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.9.5	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.9.5	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.9.5	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.9.5	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.9.5	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 04:15 修改: 2023-11-07 03:26
com.nimbusds:nimbus-jose-jwt	CVE-2019-17195	严重	4.41.1	7.9	nimbus-jose-jwt: Uncaught exceptions while parsing a JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-15 14:15 修改: 2023-11-07 03:06
com.nimbusds:nimbus-jose-jwt	CVE-2019-17195	严重	4.41.1	7.9	nimbus-jose-jwt: Uncaught exceptions while parsing a JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-15 14:15 修改: 2023-11-07 03:06
com.nimbusds:nimbus-jose-jwt	CVE-2019-17195	严重	4.41.1	7.9	nimbus-jose-jwt: Uncaught exceptions while parsing a JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17195 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-15 14:15 修改: 2023-11-07 03:06
io.netty:netty	CVE-2019-20444	严重	3.10.5.Final	4.0.0	netty: HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-29 21:15 修改: 2023-11-07 03:09
io.netty:netty	CVE-2019-20444	严重	3.10.5.Final	4.0.0	netty: HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-29 21:15 修改: 2023-11-07 03:09
io.netty:netty-codec-http	CVE-2019-20444	严重	4.1.17.Final	4.1.44	netty: HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-29 21:15 修改: 2023-11-07 03:09
log4j:log4j	CVE-2019-17571	严重	1.2.17		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2019-17571	严重	1.2.17		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2019-17571	严重	1.2.17		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-12-20 17:15 修改: 2023-11-07 03:06
log4j:log4j	CVE-2022-23305	严重	1.2.17		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23305	严重	1.2.17		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23305	严重	1.2.17		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23307	严重	1.2.17		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
log4j:log4j	CVE-2022-23307	严重	1.2.17		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
log4j:log4j	CVE-2022-23307	严重	1.2.17		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:29
org.apache.avro:avro	CVE-2024-47561	严重	1.10.2	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-10-03 11:15 修改: 2024-10-21 09:15
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-10-03 11:15 修改: 2024-10-21 09:15
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-03 11:15 修改: 2024-10-21 09:15
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-03 11:15 修改: 2024-10-21 09:15
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-03 11:15 修改: 2024-10-21 09:15
org.apache.commons:commons-text	CVE-2022-42889	严重	1.6	1.10.0	apache-commons-text: variable interpolation RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42889 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-13 13:15 修改: 2024-01-19 16:15
org.apache.derby:derby	CVE-2022-46337	严重	10.14.2.0	10.14.3, 10.15.2.1, 10.16.1.2, 10.17.1.0	A cleverly devised username might bypass LDAP authentication checks. I ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46337 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-11-20 09:15 修改: 2024-04-26 16:08
org.apache.hadoop:hadoop-common	CVE-2021-37404	严重	3.2.0	3.3.2, 3.2.3, 2.10.2	hadoop-hdfs: Heap buffer overflow in Apache Hadoop libhdfs 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37404 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-06-13 07:15 修改: 2023-06-27 15:15
org.apache.hadoop:hadoop-common	CVE-2021-37404	严重	3.2.0	3.3.2, 3.2.3, 2.10.2	hadoop-hdfs: Heap buffer overflow in Apache Hadoop libhdfs 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37404 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-06-13 07:15 修改: 2023-06-27 15:15
org.apache.hadoop:hadoop-common	CVE-2021-37404	严重	3.2.0	3.3.2, 3.2.3, 2.10.2	hadoop-hdfs: Heap buffer overflow in Apache Hadoop libhdfs 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37404 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-06-13 07:15 修改: 2023-06-27 15:15
org.apache.hadoop:hadoop-common	CVE-2021-37404	严重	3.2.0	3.3.2, 3.2.3, 2.10.2	hadoop-hdfs: Heap buffer overflow in Apache Hadoop libhdfs 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37404 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-06-13 07:15 修改: 2023-06-27 15:15
org.apache.hadoop:hadoop-common	CVE-2022-25168	严重	3.2.0	2.10.2, 3.2.4, 3.3.3	hadoop: Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25168 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-08-04 15:15 修改: 2023-06-26 11:15
org.apache.hadoop:hadoop-common	CVE-2022-25168	严重	3.2.0	2.10.2, 3.2.4, 3.3.3	hadoop: Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25168 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-08-04 15:15 修改: 2023-06-26 11:15
org.apache.hadoop:hadoop-common	CVE-2022-25168	严重	3.2.0	2.10.2, 3.2.4, 3.3.3	hadoop: Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25168 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-08-04 15:15 修改: 2023-06-26 11:15
org.apache.hadoop:hadoop-common	CVE-2022-25168	严重	3.2.0	2.10.2, 3.2.4, 3.3.3	hadoop: Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25168 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-08-04 15:15 修改: 2023-06-26 11:15
org.apache.hadoop:hadoop-common	CVE-2022-26612	严重	3.2.0	3.2.3	hadoop: Arbitrary file write in FileUtil#unpackEntries on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26612 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-04-07 19:15 修改: 2023-08-08 14:21
org.apache.hadoop:hadoop-common	CVE-2022-26612	严重	3.2.0	3.2.3	hadoop: Arbitrary file write in FileUtil#unpackEntries on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26612 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-04-07 19:15 修改: 2023-08-08 14:21
org.apache.hadoop:hadoop-common	CVE-2022-26612	严重	3.2.0	3.2.3	hadoop: Arbitrary file write in FileUtil#unpackEntries on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26612 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-04-07 19:15 修改: 2023-08-08 14:21
org.apache.hadoop:hadoop-common	CVE-2022-26612	严重	3.2.0	3.2.3	hadoop: Arbitrary file write in FileUtil#unpackEntries on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26612 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-04-07 19:15 修改: 2023-08-08 14:21
org.apache.hadoop:hadoop-common	CVE-2021-37404	严重	3.3.1	3.3.2, 3.2.3, 2.10.2	hadoop-hdfs: Heap buffer overflow in Apache Hadoop libhdfs 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37404 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-06-13 07:15 修改: 2023-06-27 15:15
org.apache.hadoop:hadoop-common	CVE-2022-25168	严重	3.3.1	2.10.2, 3.2.4, 3.3.3	hadoop: Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25168 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-08-04 15:15 修改: 2023-06-26 11:15
org.apache.ivy:ivy	CVE-2022-37865	严重	2.5.0	2.5.1	apache-ivy: Directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37865 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-11-07 11:15 修改: 2023-11-07 03:49
org.apache.spark:spark-core_2.12	CVE-2023-22946	严重	3.2.0	3.3.3	Apache Spark vulnerable to Improper Privilege Management 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22946 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-04-17 08:15 修改: 2023-04-26 23:00
org.apache.zookeeper:zookeeper	CVE-2023-44981	严重	3.4.13	3.7.2, 3.8.3, 3.9.1	zookeeper: Authorization Bypass in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-10-11 12:15 修改: 2024-06-21 19:15
org.apache.zookeeper:zookeeper	CVE-2023-44981	严重	3.4.13	3.7.2, 3.8.3, 3.9.1	zookeeper: Authorization Bypass in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-10-11 12:15 修改: 2024-06-21 19:15
org.apache.zookeeper:zookeeper	CVE-2023-44981	严重	3.6.2	3.7.2, 3.8.3, 3.9.1	zookeeper: Authorization Bypass in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-10-11 12:15 修改: 2024-06-21 19:15
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10202	严重	1.9.13		codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10202 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-10-01 15:15 修改: 2023-02-12 23:33
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10202	严重	1.9.13		codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10202 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 15:15 修改: 2023-02-12 23:33
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10202	严重	1.9.13		codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10202 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-10-01 15:15 修改: 2023-02-12 23:33
org.hsqldb:hsqldb	CVE-2022-41853	严重	2.3.4	2.7.1	hsqldb: Untrusted input may lead to RCE attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41853 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-06 18:17 修改: 2023-02-03 23:43
com.amazonaws:aws-java-sdk-s3	CVE-2022-31159	高危	1.11.901	1.12.261	Partial Path Traversal in com.amazonaws:aws-java-sdk-s3 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31159 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-07-15 18:15 修改: 2022-07-22 16:27
com.cedarsoftware:json-io	CVE-2023-34610	高危	2.5.1		json-io: cyclic dependencies in a crafted object could result in Dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34610 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-14 14:15 修改: 2023-06-26 17:11
com.cedarsoftware:json-io	CVE-2023-34610	高危	2.5.1		json-io: cyclic dependencies in a crafted object could result in Dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34610 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-14 14:15 修改: 2023-06-26 17:11
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.10.5.1	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-46877	高危	2.10.5.1	2.12.6, 2.13.1	jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-03-18 22:15 修改: 2023-08-08 14:21
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.10.5.1	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.10.5.1	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.11.4	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-46877	高危	2.11.4	2.12.6, 2.13.1	jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-03-18 22:15 修改: 2023-08-08 14:21
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.11.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.11.4	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.12.3	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.12.3	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.6.7.1	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.6.7.1	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.6.7.1	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.6.7.1	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.6.7.1	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.6.7.1	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.6.7.1	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.6.7.1	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.6.7.1	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.6.7.1	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.6.7.1	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.6.7.1	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.6.7.1	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.6.7.1	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.6.7.1	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.6.7.1	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2021-46877	高危	2.12.3	2.12.6, 2.13.1	jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-03-18 22:15 修改: 2023-08-08 14:21
com.fasterxml.jackson.core:jackson-databind	CVE-2021-46877	高危	2.12.3	2.12.6, 2.13.1	jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-03-18 22:15 修改: 2023-08-08 14:21
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.4.0	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.4.0	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.4.0	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.4.0	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.4.0	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.6.7.3	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-5968	高危	2.6.7.3	2.8.11.1, 2.9.4, 2.7.9.5	jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-01-22 04:29 修改: 2023-09-13 14:19
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.6.7.3	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.6.7.3	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.6.7.3	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.6.7.3	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.6.7.3	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.6.7.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.6.7.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.6.7.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.6.7.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.6.7.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.6.7.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.6.7.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.6.7.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.6.7.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.6.7.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.6.7.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.6.7.3	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.6.7.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.6.7.3	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.6.7.3	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.6.7.3	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.6.7.3	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.6.7.3	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.4.0	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.4.0	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.4.0	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.4.0	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.4.0	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.4.0	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.4.0	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.4.0	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.4.0	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.4.0	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.4.0	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.4.0	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.4.0	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.4.0	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.4.0	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.4.0	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.4.0	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.4.0	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.4.0	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.4.0	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.4.0	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.4.0	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.4.0	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.4.0	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.4.0	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12023	高危	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12023 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12023	高危	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12023 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12023	高危	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12023 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-21 16:00 修改: 2023-11-07 02:52
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.9.5	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.9.5	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.9.5	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-05-17 17:29 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.9.5	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.9.5	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.9.5	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-07-30 11:15 修改: 2023-11-07 03:04
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.9.5	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.9.5	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.9.5	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 17:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14893	高危	2.9.5	2.9.10	jackson-databind: Serialization gadgets in classes of the xalan package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 21:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14893	高危	2.9.5	2.9.10	jackson-databind: Serialization gadgets in classes of the xalan package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 21:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14893	高危	2.9.5	2.9.10	jackson-databind: Serialization gadgets in classes of the xalan package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-02 21:15 修改: 2023-11-07 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.9.5	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.9.5	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.9.5	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-26 20:15 修改: 2023-08-18 14:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10672	高危	2.9.5	2.9.10.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10672	高危	2.9.5	2.9.10.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10672	高危	2.9.5	2.9.10.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.9.5	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.9.5	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.9.5	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-18 22:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10968	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10968	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10968	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10969	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in javax.swing.JEditorPane 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10969	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in javax.swing.JEditorPane 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10969	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in javax.swing.JEditorPane 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-26 13:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11111	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11111	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11111	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11112	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11112	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11112	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11113	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11113	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11113	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-03-31 05:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11619	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.springframework:spring-aop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11619	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.springframework:spring-aop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11619	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.springframework:spring-aop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11620	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in commons-jelly:commons-jelly 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11620	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in commons-jelly:commons-jelly 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11620	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in commons-jelly:commons-jelly 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-04-07 23:15 修改: 2023-11-07 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14060	高危	2.9.5	2.9.10.5	jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-14 21:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14060	高危	2.9.5	2.9.10.5	jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-14 21:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14060	高危	2.9.5	2.9.10.5	jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-14 21:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14061	高危	2.9.5	2.9.10.5	jackson-databind: serialization in weblogic/oracle-aqjms 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14061	高危	2.9.5	2.9.10.5	jackson-databind: serialization in weblogic/oracle-aqjms 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14061	高危	2.9.5	2.9.10.5	jackson-databind: serialization in weblogic/oracle-aqjms 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14062	高危	2.9.5	2.9.10.5	jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14062	高危	2.9.5	2.9.10.5	jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14062	高危	2.9.5	2.9.10.5	jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-14 20:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14195	高危	2.9.5	2.9.10.5	jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-16 16:15 修改: 2021-11-17 20:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14195	高危	2.9.5	2.9.10.5	jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-16 16:15 修改: 2021-11-17 20:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14195	高危	2.9.5	2.9.10.5	jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-06-16 16:15 修改: 2021-11-17 20:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.9.5	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.9.5	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.9.5	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-08-25 18:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.9.5	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.9.5	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.9.5	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-09-17 19:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.9.5	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.9.5	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.9.5	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-03 17:15 修改: 2023-11-07 03:20
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-17 19:15 修改: 2022-09-08 21:32
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-27 05:15 修改: 2023-11-07 03:22
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-07 00:15 修改: 2023-09-13 14:56
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.9.5	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.9.5	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.9.5	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.9.5	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.9.5	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.9.5	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.9.5	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.9.5	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.9.5	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.9.5	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.9.5	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.9.5	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.google.code.gson:gson	CVE-2022-25647	高危	2.2.4	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-05-01 16:15 修改: 2022-11-28 17:33
com.google.code.gson:gson	CVE-2022-25647	高危	2.2.4	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-05-01 16:15 修改: 2022-11-28 17:33
com.google.code.gson:gson	CVE-2022-25647	高危	2.2.4	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-05-01 16:15 修改: 2022-11-28 17:33
com.google.code.gson:gson	CVE-2022-25647	高危	2.8.6	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-05-01 16:15 修改: 2022-11-28 17:33
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	2.5.0	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-01-10 14:10 修改: 2023-04-18 09:15
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	2.5.0	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-10 14:10 修改: 2023-04-18 09:15
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	2.5.0	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-10 14:10 修改: 2023-04-18 09:15
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	2.5.0	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-10 14:10 修改: 2023-04-18 09:15
com.google.protobuf:protobuf-java	CVE-2021-22570	高危	2.5.0	3.15.0	protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22570 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-01-26 14:15 修改: 2023-11-07 03:30
com.google.protobuf:protobuf-java	CVE-2021-22570	高危	2.5.0	3.15.0	protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22570 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-26 14:15 修改: 2023-11-07 03:30
com.google.protobuf:protobuf-java	CVE-2021-22570	高危	2.5.0	3.15.0	protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22570 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-26 14:15 修改: 2023-11-07 03:30
com.google.protobuf:protobuf-java	CVE-2021-22570	高危	2.5.0	3.15.0	protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22570 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-26 14:15 修改: 2023-11-07 03:30
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-12 13:15 修改: 2022-12-15 16:57
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-12 13:15 修改: 2022-12-15 16:57
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-12 13:15 修改: 2022-12-15 16:57
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-12 13:15 修改: 2022-12-15 16:57
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-12 13:15 修改: 2023-11-07 03:51
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-12 13:15 修改: 2023-11-07 03:51
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-12 13:15 修改: 2023-11-07 03:51
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	2.5.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-12 13:15 修改: 2023-11-07 03:51
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	2.5.0	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	2.5.0	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	2.5.0	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	2.5.0	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	3.3.0	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-01-10 14:10 修改: 2023-04-18 09:15
com.google.protobuf:protobuf-java	CVE-2021-22570	高危	3.3.0	3.15.0	protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22570 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-01-26 14:15 修改: 2023-11-07 03:30
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.3.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-12 13:15 修改: 2022-12-15 16:57
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.3.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-12 13:15 修改: 2023-11-07 03:51
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.3.0	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	3.7.1	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-01-10 14:10 修改: 2023-04-18 09:15
com.google.protobuf:protobuf-java	CVE-2021-22570	高危	3.7.1	3.15.0	protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22570 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-01-26 14:15 修改: 2023-11-07 03:30
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.7.1	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-12 13:15 修改: 2022-12-15 16:57
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.7.1	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-12 13:15 修改: 2023-11-07 03:51
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.7.1	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-09-19 01:15 修改: 2024-09-20 12:30
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	4.41.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-02-11 05:15 修改: 2024-10-16 20:01
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	4.41.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-02-11 05:15 修改: 2024-10-16 20:01
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	4.41.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-02-11 05:15 修改: 2024-10-16 20:01
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.8.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-02-11 05:15 修改: 2024-10-16 20:01
commons-beanutils:commons-beanutils	CVE-2014-0114	高危	1.9.3	1.9.4	1: Class Loader manipulation via request parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0114 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2014-04-30 10:49 修改: 2023-02-13 00:32
commons-beanutils:commons-beanutils	CVE-2014-0114	高危	1.9.3	1.9.4	1: Class Loader manipulation via request parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0114 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2014-04-30 10:49 修改: 2023-02-13 00:32
commons-beanutils:commons-beanutils	CVE-2014-0114	高危	1.9.3	1.9.4	1: Class Loader manipulation via request parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0114 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2014-04-30 10:49 修改: 2023-02-13 00:32
commons-beanutils:commons-beanutils	CVE-2019-10086	高危	1.9.3	1.9.4	apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-08-20 21:15 修改: 2023-11-07 03:02
commons-beanutils:commons-beanutils	CVE-2019-10086	高危	1.9.3	1.9.4	apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-08-20 21:15 修改: 2023-11-07 03:02
commons-beanutils:commons-beanutils	CVE-2019-10086	高危	1.9.3	1.9.4	apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10086 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-08-20 21:15 修改: 2023-11-07 03:02
commons-io:commons-io	CVE-2024-47554	高危	2.5	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-03 12:15 修改: 2024-10-04 13:50
commons-io:commons-io	CVE-2024-47554	高危	2.5	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-03 12:15 修改: 2024-10-04 13:50
commons-io:commons-io	CVE-2024-47554	高危	2.5	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-03 12:15 修改: 2024-10-04 13:50
commons-io:commons-io	CVE-2024-47554	高危	2.8.0	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-10-03 12:15 修改: 2024-10-04 13:50
commons-io:commons-io	CVE-2024-47554	高危	2.8.0	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-10-03 12:15 修改: 2024-10-04 13:50
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-07-22 14:15 修改: 2024-09-04 15:15
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-07-22 14:15 修改: 2024-09-04 15:15
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-07-22 14:15 修改: 2024-09-04 15:15
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-07-22 14:15 修改: 2024-09-04 15:15
io.airlift:aircompressor	CVE-2024-36114	高危	0.21	0.27	Decompressors can crash the JVM and leak memory content in Aircompressor 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36114 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-05-29 21:15 修改: 2024-05-30 13:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2024-07-03 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
io.netty:netty	CVE-2021-37136	高危	3.10.5.Final	4.0.0	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-10-19 15:15 修改: 2023-11-07 03:36
io.netty:netty	CVE-2021-37136	高危	3.10.5.Final	4.0.0	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-10-19 15:15 修改: 2023-11-07 03:36
io.netty:netty	CVE-2021-37137	高危	3.10.5.Final	4.0.0	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-10-19 15:15 修改: 2023-11-07 03:36
io.netty:netty	CVE-2021-37137	高危	3.10.5.Final	4.0.0	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-10-19 15:15 修改: 2023-11-07 03:36
io.netty:netty-all	CVE-2019-16869	高危	4.0.52.Final	4.1.42.Final	netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16869 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-26 16:15 修改: 2023-11-07 03:06
io.netty:netty-all	CVE-2019-16869	高危	4.0.52.Final	4.1.42.Final	netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16869 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-09-26 16:15 修改: 2023-11-07 03:06
io.netty:netty-codec	CVE-2021-37136	高危	4.1.17.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-10-19 15:15 修改: 2023-11-07 03:36
io.netty:netty-codec	CVE-2021-37137	高危	4.1.17.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-10-19 15:15 修改: 2023-11-07 03:36
io.netty:netty-codec	CVE-2021-37136	高危	4.1.48.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-10-19 15:15 修改: 2023-11-07 03:36
io.netty:netty-codec	CVE-2021-37137	高危	4.1.48.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-10-19 15:15 修改: 2023-11-07 03:36
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
io.netty:netty-handler	CVE-2020-11612	高危	4.1.17.Final	4.1.46	netty: compression/decompression codecs don't enforce limits on buffer allocation sizes 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11612 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-04-07 18:15 修改: 2023-11-07 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
log4j:log4j	CVE-2021-4104	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2021-4104	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2021-4104	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-12-14 12:15 修改: 2023-12-22 09:15
log4j:log4j	CVE-2022-23302	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23302	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
log4j:log4j	CVE-2022-23302	高危	1.2.17		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-01-18 16:15 修改: 2023-02-24 15:30
net.minidev:json-smart	CVE-2021-31684	高危	1.3.2	1.3.3, 2.4.4	json-smart: Denial of Service in JSONParserByteArray function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31684 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-06-01 20:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2023-1370	高危	1.3.2	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2023-1370	高危	2.3	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2023-1370	高危	2.3	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
net.minidev:json-smart	CVE-2023-1370	高危	2.3	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-03-22 06:15 修改: 2024-06-21 19:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.4.0	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
org.apache.avro:avro	CVE-2023-39410	高危	1.10.2	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-09-29 17:15 修改: 2024-06-21 19:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-09-29 17:15 修改: 2024-06-21 19:15
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-09-29 17:15 修改: 2024-06-21 19:15
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-09-29 17:15 修改: 2024-06-21 19:15
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-09-29 17:15 修改: 2024-06-21 19:15
org.apache.commons:commons-compress	CVE-2021-35515	高危	1.19	1.21	apache-commons-compress: infinite loop when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35516	高危	1.19	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35517	高危	1.19	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-36090	高危	1.19	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2024-25710	高危	1.19	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-02-19 09:15 修改: 2024-03-07 17:15
org.apache.commons:commons-compress	CVE-2024-25710	高危	1.21	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-02-19 09:15 修改: 2024-03-07 17:15
org.apache.commons:commons-compress	CVE-2021-35515	高危	1.4.1	1.21	apache-commons-compress: infinite loop when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35515	高危	1.4.1	1.21	apache-commons-compress: infinite loop when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35515	高危	1.4.1	1.21	apache-commons-compress: infinite loop when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35516	高危	1.4.1	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35516	高危	1.4.1	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35516	高危	1.4.1	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35517	高危	1.4.1	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35517	高危	1.4.1	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-35517	高危	1.4.1	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-36090	高危	1.4.1	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-36090	高危	1.4.1	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2021-36090	高危	1.4.1	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-07-13 08:15 修改: 2023-11-07 03:36
org.apache.commons:commons-compress	CVE-2024-25710	高危	1.4.1	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-02-19 09:15 修改: 2024-03-07 17:15
org.apache.commons:commons-compress	CVE-2024-25710	高危	1.4.1	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-02-19 09:15 修改: 2024-03-07 17:15
org.apache.commons:commons-compress	CVE-2024-25710	高危	1.4.1	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-02-19 09:15 修改: 2024-03-07 17:15
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.4.0	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-06 23:15 修改: 2023-09-13 14:57
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.4.0	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.4.0	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.4.0	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.4.0	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-03-11 07:15 修改: 2022-11-29 22:12
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.4.0	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.4.0	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.4.0	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.4.0	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-19 17:15 修改: 2023-11-07 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.4.0	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.4.0	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
org.apache.hadoop:hadoop-common	CVE-2020-9492	高危	3.2.0	3.2.2, 3.1.4, 2.10.1	hadoop: WebHDFS client might send SPNEGO authorization header 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9492 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-26 18:16 修改: 2023-11-07 03:26
org.apache.hadoop:hadoop-common	CVE-2020-9492	高危	3.2.0	3.2.2, 3.1.4, 2.10.1	hadoop: WebHDFS client might send SPNEGO authorization header 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9492 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-26 18:16 修改: 2023-11-07 03:26
org.apache.hadoop:hadoop-common	CVE-2020-9492	高危	3.2.0	3.2.2, 3.1.4, 2.10.1	hadoop: WebHDFS client might send SPNEGO authorization header 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9492 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-26 18:16 修改: 2023-11-07 03:26
org.apache.hadoop:hadoop-common	CVE-2020-9492	高危	3.2.0	3.2.2, 3.1.4, 2.10.1	hadoop: WebHDFS client might send SPNEGO authorization header 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9492 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-01-26 18:16 修改: 2023-11-07 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.4.0	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.4.0	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
org.apache.hadoop:hadoop-yarn-server-common	CVE-2021-33036	高危	3.2.0	2.10.2, 3.2.3, 3.3.2	hadoop: privilege escalation via yarn user 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33036 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-06-15 15:15 修改: 2022-10-27 16:30
org.apache.hadoop:hadoop-yarn-server-common	CVE-2021-33036	高危	3.2.0	2.10.2, 3.2.3, 3.3.2	hadoop: privilege escalation via yarn user 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33036 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-06-15 15:15 修改: 2022-10-27 16:30
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.4.0	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
org.apache.ivy:ivy	CVE-2022-37866	高危	2.5.0	2.5.1	Ivy: Ivy Path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37866 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-11-07 14:15 修改: 2023-11-07 03:49
org.apache.ivy:ivy	CVE-2022-46751	高危	2.5.0	2.5.2	apache-ivy: XML External Entity vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46751 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-08-21 07:15 修改: 2024-09-27 21:35
org.apache.mesos:mesos	CVE-2018-11793	高危	1.4.0	1.4.3, 1.5.2, 1.6.2, 1.7.1	mesos: stack overflow vulnerability in parser 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11793 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-03-05 21:29 修改: 2023-11-07 02:51
org.apache.mesos:mesos	CVE-2018-1330	高危	1.4.0	1.6.0	Crash when decoding malformed HTTP requests or malformed JSON payload 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1330 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-09-13 19:29 修改: 2023-11-07 02:55
org.apache.mesos:mesos	CVE-2019-0204	高危	1.4.0	1.4.3, 1.5.3, 1.6.2, 1.7.2	mesos: docker image code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0204 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-03-25 22:29 修改: 2023-11-07 03:01
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.4.0	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
org.apache.thrift:libthrift	CVE-2019-0205	高危	0.12.0	0.13.0	thrift: Endless loop when feed with specific input data 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0205 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-10-29 19:15 修改: 2023-11-07 03:01
org.apache.thrift:libthrift	CVE-2020-13949	高危	0.12.0	0.14.0	libthrift: potential DoS when processing untrusted payloads 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13949 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-02-12 20:15 修改: 2023-11-07 03:17
org.apache.velocity:velocity	CVE-2020-13936	高危	1.5		velocity: arbitrary code execution when attacker is able to modify templates 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13936 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-03-10 08:15 修改: 2023-11-07 03:17
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.4.0	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.4.0	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.12.3	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.12.3	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2023-12-20 10:15
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.12.3	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.12.3	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-02 05:15 修改: 2022-12-02 15:10
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10172	高危	1.9.13		jackson-mapper-asl: XML external entity similar to CVE-2016-3720 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10172 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-11-18 17:15 修改: 2023-02-12 23:33
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10172	高危	1.9.13		jackson-mapper-asl: XML external entity similar to CVE-2016-3720 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10172 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-11-18 17:15 修改: 2023-02-12 23:33
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10172	高危	1.9.13		jackson-mapper-asl: XML external entity similar to CVE-2016-3720 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10172 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-11-18 17:15 修改: 2023-02-12 23:33
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.1	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-16 10:15 修改: 2023-07-13 17:24
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.1	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-16 10:15 修改: 2023-07-13 17:24
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.1	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-16 10:15 修改: 2023-07-13 17:24
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.1	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-13 15:15 修改: 2023-01-30 17:57
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.1	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-13 15:15 修改: 2023-01-30 17:57
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.1	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-13 15:15 修改: 2023-01-30 17:57
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.1	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-13 15:15 修改: 2023-01-26 17:35
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.1	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-13 15:15 修改: 2023-01-26 17:35
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.1	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-13 15:15 修改: 2023-01-26 17:35
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.1	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-03-22 06:15 修改: 2023-11-07 04:03
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.1	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-03-22 06:15 修改: 2023-11-07 04:03
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.1	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-03-22 06:15 修改: 2023-11-07 04:03
org.eclipse.jetty:jetty-server	CVE-2018-12545	高危	9.3.24.v20180605	9.4.12.v20180830, 9.3.25.v20180904	jetty: large settings frames causing denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12545 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-27 20:29 修改: 2023-11-07 02:52
org.eclipse.jetty:jetty-server	CVE-2018-12545	高危	9.3.24.v20180605	9.4.12.v20180830, 9.3.25.v20180904	jetty: large settings frames causing denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12545 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-27 20:29 修改: 2023-11-07 02:52
org.eclipse.jetty:jetty-server	CVE-2018-12545	高危	9.3.24.v20180605	9.4.12.v20180830, 9.3.25.v20180904	jetty: large settings frames causing denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12545 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-03-27 20:29 修改: 2023-11-07 02:52
org.eclipse.jetty:jetty-server	CVE-2021-28165	高危	9.3.24.v20180605	9.4.39, 10.0.2, 11.0.2	jetty: Resource exhaustion when receiving an invalid large TLS frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28165 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-04-01 15:15 修改: 2023-11-07 03:32
org.eclipse.jetty:jetty-server	CVE-2021-28165	高危	9.3.24.v20180605	9.4.39, 10.0.2, 11.0.2	jetty: Resource exhaustion when receiving an invalid large TLS frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28165 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-04-01 15:15 修改: 2023-11-07 03:32
org.eclipse.jetty:jetty-server	CVE-2021-28165	高危	9.3.24.v20180605	9.4.39, 10.0.2, 11.0.2	jetty: Resource exhaustion when receiving an invalid large TLS frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28165 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-04-01 15:15 修改: 2023-11-07 03:32
org.eclipse.jetty:jetty-webapp	CVE-2020-27216	高危	9.3.24.v20180605	9.4.33.v20201020, 10.0.0.beta3, 11.0.0.beta3	jetty: local temporary directory hijacking vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27216 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-10-23 13:15 修改: 2023-11-07 03:20
org.eclipse.jetty:jetty-webapp	CVE-2020-27216	高危	9.3.24.v20180605	9.4.33.v20201020, 10.0.0.beta3, 11.0.0.beta3	jetty: local temporary directory hijacking vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27216 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-10-23 13:15 修改: 2023-11-07 03:20
org.eclipse.jetty:jetty-webapp	CVE-2020-27216	高危	9.3.24.v20180605	9.4.33.v20201020, 10.0.0.beta3, 11.0.0.beta3	jetty: local temporary directory hijacking vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27216 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-10-23 13:15 修改: 2023-11-07 03:20
com.amazonaws:aws-java-sdk-s3	CVE-2022-31159	高危	1.11.375	1.12.261	Partial Path Traversal in com.amazonaws:aws-java-sdk-s3 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31159 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-07-15 18:15 修改: 2022-07-22 16:27
org.jdom:jdom	CVE-2021-33813	高危	1.1		jdom: XXE allows attackers to cause a DoS via a crafted HTTP request 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33813 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-06-16 12:15 修改: 2023-11-07 03:35
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.0.5	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-15 18:15 修改: 2024-02-01 14:17
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.0.5	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-15 18:15 修改: 2024-02-01 14:17
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.0.5	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-15 18:15 修改: 2024-02-01 14:17
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.0.5	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-09-25 20:15 修改: 2023-09-26 15:46
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.0.5	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-09-25 20:15 修改: 2023-09-26 15:46
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.0.5	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-09-25 20:15 修改: 2023-09-26 15:46
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.1.8.4	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-06-15 18:15 修改: 2024-02-01 14:17
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.1.8.4	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-09-25 20:15 修改: 2023-09-26 15:46
org.yaml:snakeyaml	CVE-2017-18640	高危	1.16	1.26	snakeyaml: Billion laughs attack via alias feature 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-12-12 03:15 修改: 2023-11-07 02:41
org.yaml:snakeyaml	CVE-2022-1471	高危	1.16	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-01 11:15 修改: 2024-06-21 19:15
org.yaml:snakeyaml	CVE-2022-25857	高危	1.16	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-08-30 05:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-1471	高危	1.27	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-01 11:15 修改: 2024-06-21 19:15
org.yaml:snakeyaml	CVE-2022-25857	高危	1.27	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-08-30 05:15 修改: 2024-03-15 11:15
software.amazon.ion:ion-java	CVE-2024-21634	高危	1.0.2	1.10.5	ion-java: ion-java: Ion Java StackOverflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21634 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-01-03 23:15 修改: 2024-01-10 16:38
software.amazon.ion:ion-java	CVE-2024-21634	高危	1.0.2	1.10.5	ion-java: ion-java: Ion Java StackOverflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21634 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-01-03 23:15 修改: 2024-01-10 16:38
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-03-21 09:15 修改: 2024-08-28 15:35
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-03-21 09:15 修改: 2024-08-28 15:35
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-03-21 09:15 修改: 2024-08-28 15:35
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-03-21 09:15 修改: 2024-05-01 17:15
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-03-21 09:15 修改: 2024-05-01 17:15
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-03-21 09:15 修改: 2024-05-01 17:15
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-03-21 09:15 修改: 2024-05-01 17:15
io.netty:netty	CVE-2021-21409	中危	3.10.5.Final	4.0.0	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-03-30 15:15 修改: 2023-11-07 03:30
io.netty:netty	CVE-2021-43797	中危	3.10.5.Final	4.0.0	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-12-09 19:15 修改: 2023-02-24 15:47
io.netty:netty	CVE-2021-43797	中危	3.10.5.Final	4.0.0	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-12-09 19:15 修改: 2023-02-24 15:47
com.google.guava:guava	CVE-2018-10237	中危	11.0.2	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
com.google.guava:guava	CVE-2018-10237	中危	11.0.2	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
com.google.guava:guava	CVE-2023-2976	中危	11.0.2	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.google.guava:guava	CVE-2023-2976	中危	11.0.2	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.3.0	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-12 23:15 修改: 2023-11-07 03:50
com.google.guava:guava	CVE-2023-2976	中危	11.0.2	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.google.guava:guava	CVE-2018-10237	中危	14.0.1	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.17.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-02-08 20:15 修改: 2023-11-07 03:29
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.17.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-12-09 19:15 修改: 2023-02-24 15:47
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.17.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-05-06 12:15 修改: 2022-12-03 14:25
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.17.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-03-25 20:15 修改: 2024-06-21 22:15
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.48.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-02-08 20:15 修改: 2023-11-07 03:29
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.48.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-12-09 19:15 修改: 2023-02-24 15:47
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.48.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-05-06 12:15 修改: 2022-12-03 14:25
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.48.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-03-25 20:15 修改: 2024-06-21 22:15
com.google.guava:guava	CVE-2018-10237	中危	14.0.1	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
io.netty:netty-handler	CVE-2019-20445	中危	4.1.17.Final	4.1.45	netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-29 21:15 修改: 2023-11-07 03:09
io.netty:netty-handler	CVE-2023-34462	中危	4.1.17.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-22 23:15 修改: 2024-06-21 19:15
io.netty:netty-handler	CVE-2023-34462	中危	4.1.48.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-06-22 23:15 修改: 2024-06-21 19:15
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.2	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.2	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.2	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.5	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-02 17:15 修改: 2023-11-07 03:17
junit:junit	CVE-2020-15250	中危	4.11	4.13.1	junit4: TemporaryFolder is shared between all users across system which could result in information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15250 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-10-12 18:15 修改: 2023-11-07 03:17
com.google.guava:guava	CVE-2018-10237	中危	14.0.1	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
com.google.guava:guava	CVE-2023-2976	中危	14.0.1	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.7.1	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-12 23:15 修改: 2023-11-07 03:50
com.google.guava:guava	CVE-2023-2976	中危	14.0.1	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.google.guava:guava	CVE-2023-2976	中危	14.0.1	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
org.apache.mesos:mesos	CVE-2018-8023	中危	1.4.0	1.4.2, 1.5.2, 1.6.1	mesos: Exposure of HMAC value via timing vulnerability in JWT validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8023 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2018-09-21 13:29 修改: 2023-11-07 03:01
com.google.guava:guava	CVE-2023-2976	中危	30.1.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.google.guava:guava	CVE-2023-2976	中危	30.1.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-06-14 18:15 修改: 2024-02-13 19:15
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.squareup.okio:okio	CVE-2023-3635	中危	1.14.0	3.4.0, 1.17.6	okio: GzipSource class improper exception handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-07-12 19:15 修改: 2023-10-25 15:17
org.apache.zookeeper:zookeeper	CVE-2019-0201	中危	3.4.13	3.4.14, 3.5.5	zookeeper: Information disclosure in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0201 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-05-23 14:29 修改: 2023-11-07 03:01
org.apache.zookeeper:zookeeper	CVE-2019-0201	中危	3.4.13	3.4.14, 3.5.5	zookeeper: Information disclosure in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0201 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-05-23 14:29 修改: 2023-11-07 03:01
com.squareup.okio:okio	CVE-2023-3635	中危	1.6.0	3.4.0, 1.17.6	okio: GzipSource class improper exception handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-07-12 19:15 修改: 2023-10-25 15:17
org.apache.zookeeper:zookeeper	CVE-2024-23944	中危	3.6.2	3.8.4, 3.9.2	Information disclosure in persistent watchers handling in Apache ZooKe ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23944 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-03-15 11:15 修改: 2024-05-01 17:15
com.squareup.okio:okio	CVE-2023-3635	中危	1.6.0	3.4.0, 1.17.6	okio: GzipSource class improper exception handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-07-12 19:15 修改: 2023-10-25 15:17
com.squareup.okio:okio	CVE-2023-3635	中危	1.6.0	3.4.0, 1.17.6	okio: GzipSource class improper exception handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-07-12 19:15 修改: 2023-10-25 15:17
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.9.5	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.9.5	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.9.5	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
net.minidev:json-smart	CVE-2021-27568	中危	2.3	1.3.2, 2.4.1, 2.3.1	json-smart: uncaught exception may lead to crash or information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-02-23 02:15 修改: 2023-11-07 03:31
net.minidev:json-smart	CVE-2021-27568	中危	2.3	1.3.2, 2.4.1, 2.3.1	json-smart: uncaught exception may lead to crash or information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-02-23 02:15 修改: 2023-11-07 03:31
net.minidev:json-smart	CVE-2021-27568	中危	2.3	1.3.2, 2.4.1, 2.3.1	json-smart: uncaught exception may lead to crash or information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27568 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-02-23 02:15 修改: 2023-11-07 03:31
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.9.5	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.9.5	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.9.5	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
commons-io:commons-io	CVE-2021-29425	中危	2.5	2.7	apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-04-13 07:15 修改: 2023-11-07 03:32
commons-io:commons-io	CVE-2021-29425	中危	2.5	2.7	apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-04-13 07:15 修改: 2023-11-07 03:32
commons-io:commons-io	CVE-2021-29425	中危	2.5	2.7	apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-04-13 07:15 修改: 2023-11-07 03:32
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.0.3	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-16 10:15 修改: 2023-02-09 01:36
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.1	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-16 10:15 修改: 2023-03-01 16:32
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.1	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-16 10:15 修改: 2023-03-01 16:32
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.1	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-16 10:15 修改: 2023-03-01 16:32
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.3.24.v20180605	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-09-15 20:15 修改: 2023-10-13 01:59
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.3.24.v20180605	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-09-15 20:15 修改: 2023-10-13 01:59
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.3.24.v20180605	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-09-15 20:15 修改: 2023-10-13 01:59
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.4.40.v20210413	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-09-15 20:15 修改: 2023-10-13 01:59
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.4.43.v20210629	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-09-15 20:15 修改: 2023-10-13 01:59
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.0.3	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-16 10:15 修改: 2023-02-09 01:36
commons-net:commons-net	CVE-2021-37533	中危	3.1	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-03 15:15 修改: 2023-01-10 19:29
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-03 15:15 修改: 2023-01-10 19:29
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-03 15:15 修改: 2023-01-10 19:29
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-03 15:15 修改: 2023-01-10 19:29
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-12-03 15:15 修改: 2023-01-10 19:29
org.eclipse.jetty:jetty-server	CVE-2019-10241	中危	9.3.24.v20180605	9.2.27.v20190403, 9.3.26.v20190403, 9.4.16.v20190411	jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10241 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2019-10241	中危	9.3.24.v20180605	9.2.27.v20190403, 9.3.26.v20190403, 9.4.16.v20190411	jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10241 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2019-10241	中危	9.3.24.v20180605	9.2.27.v20190403, 9.3.26.v20190403, 9.4.16.v20190411	jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10241 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2019-10246	中危	9.3.24.v20180605	9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418	jetty: Directory Listing on Windows reveals Resource Base path 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10246 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2019-10246	中危	9.3.24.v20180605	9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418	jetty: Directory Listing on Windows reveals Resource Base path 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10246 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2019-10246	中危	9.3.24.v20180605	9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418	jetty: Directory Listing on Windows reveals Resource Base path 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10246 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2019-10247	中危	9.3.24.v20180605	9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418	jetty: error path information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10247 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2019-10247	中危	9.3.24.v20180605	9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418	jetty: error path information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10247 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2019-10247	中危	9.3.24.v20180605	9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418	jetty: error path information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10247 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-04-22 20:29 修改: 2023-11-07 03:02
org.eclipse.jetty:jetty-server	CVE-2023-26048	中危	9.3.24.v20180605	9.4.51.v20230217, 10.0.14, 11.0.14	jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-04-18 21:15 修改: 2023-09-30 15:15
org.eclipse.jetty:jetty-server	CVE-2023-26048	中危	9.3.24.v20180605	9.4.51.v20230217, 10.0.14, 11.0.14	jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-04-18 21:15 修改: 2023-09-30 15:15
org.eclipse.jetty:jetty-server	CVE-2023-26048	中危	9.3.24.v20180605	9.4.51.v20230217, 10.0.14, 11.0.14	jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-04-18 21:15 修改: 2023-09-30 15:15
org.eclipse.jetty:jetty-server	CVE-2024-8184	中危	9.3.24.v20180605	12.0.9, 10.0.24, 11.0.24, 9.4.56	org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-14 16:15 修改: 2024-10-15 12:57
org.eclipse.jetty:jetty-server	CVE-2024-8184	中危	9.3.24.v20180605	12.0.9, 10.0.24, 11.0.24, 9.4.56	org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-14 16:15 修改: 2024-10-15 12:57
org.eclipse.jetty:jetty-server	CVE-2024-8184	中危	9.3.24.v20180605	12.0.9, 10.0.24, 11.0.24, 9.4.56	org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-14 16:15 修改: 2024-10-15 12:57
org.eclipse.jetty:jetty-server	CVE-2023-26048	中危	9.4.43.v20210629	9.4.51.v20230217, 10.0.14, 11.0.14	jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-04-18 21:15 修改: 2023-09-30 15:15
org.eclipse.jetty:jetty-server	CVE-2024-8184	中危	9.4.43.v20210629	12.0.9, 10.0.24, 11.0.24, 9.4.56	org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-10-14 16:15 修改: 2024-10-15 12:57
org.eclipse.jetty:jetty-servlets	CVE-2024-9823	中危	9.4.43.v20210629	9.4.54, 10.0.18, 11.0.18	org.eclipse.jetty:jetty-servlets: jetty: Jetty DOS vulnerability on DosFilter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9823 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-10-14 15:15 修改: 2024-10-15 12:57
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.0.3	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-16 10:15 修改: 2023-02-09 01:36
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.3.0	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-09-16 10:15 修改: 2023-02-09 01:36
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.6.7.1	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-24 16:15 修改: 2023-11-07 03:03
org.eclipse.jetty:jetty-webapp	CVE-2021-34429	中危	9.4.40.v20210413	9.4.43, 10.0.6, 11.0.6	jetty: crafted URIs allow bypassing security constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34429 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-07-15 17:15 修改: 2023-11-07 03:35
org.apache.commons:commons-compress	CVE-2024-26308	中危	1.21	1.26.0	commons-compress: OutOfMemoryError unpacking broken Pack200 file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26308 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-02-19 09:15 修改: 2024-03-21 19:54
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.6.7.1	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.4.0	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2019-06-19 14:15 修改: 2023-11-07 03:03
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	2.5.0	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-10-12 23:15 修改: 2023-11-07 03:50
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	2.5.0	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-12 23:15 修改: 2023-11-07 03:50
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	2.5.0	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-12 23:15 修改: 2023-11-07 03:50
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	2.5.0	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-10-12 23:15 修改: 2023-11-07 03:50
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.0.5	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-15 17:15 修改: 2023-06-27 15:59
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.0.5	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-15 17:15 修改: 2023-06-27 15:59
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.0.5	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-15 17:15 修改: 2023-06-27 15:59
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.0.5	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-15 17:15 修改: 2023-06-27 16:04
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.0.5	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-15 17:15 修改: 2023-06-27 16:04
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.0.5	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-06-15 17:15 修改: 2023-06-27 16:04
com.google.guava:guava	CVE-2018-10237	中危	11.0.2	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2018-04-26 21:29 修改: 2023-11-07 02:51
io.netty:netty	CVE-2019-20445	中危	3.10.5.Final	4.0.0	netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-29 21:15 修改: 2023-11-07 03:09
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.1.8.4	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-06-15 17:15 修改: 2023-06-27 15:59
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.1.8.4	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-06-15 17:15 修改: 2023-06-27 16:04
io.netty:netty	CVE-2019-20445	中危	3.10.5.Final	4.0.0	netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-01-29 21:15 修改: 2023-11-07 03:09
io.netty:netty	CVE-2021-21290	中危	3.10.5.Final	4.0.0	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-02-08 20:15 修改: 2023-11-07 03:29
io.netty:netty	CVE-2021-21290	中危	3.10.5.Final	4.0.0	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-02-08 20:15 修改: 2023-11-07 03:29
org.yaml:snakeyaml	CVE-2022-38749	中危	1.16	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38750	中危	1.16	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38751	中危	1.16	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38752	中危	1.16	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-41854	中危	1.16	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-11-11 13:15 修改: 2024-06-21 19:15
io.netty:netty	CVE-2021-21295	中危	3.10.5.Final	4.0.0	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-03-09 19:15 修改: 2023-11-07 03:29
io.netty:netty	CVE-2021-21295	中危	3.10.5.Final	4.0.0	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-03-09 19:15 修改: 2023-11-07 03:29
org.yaml:snakeyaml	CVE-2022-38749	中危	1.27	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38750	中危	1.27	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38751	中危	1.27	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-38752	中危	1.27	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-09-05 10:15 修改: 2024-03-15 11:15
org.yaml:snakeyaml	CVE-2022-41854	中危	1.27	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-11-11 13:15 修改: 2024-06-21 19:15
io.netty:netty	CVE-2021-21409	中危	3.10.5.Final	4.0.0	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-03-30 15:15 修改: 2023-11-07 03:30
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-03-21 09:15 修改: 2024-08-28 15:35
com.google.guava:guava	CVE-2020-8908	低危	11.0.2	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
com.google.guava:guava	CVE-2020-8908	低危	14.0.1	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
com.google.guava:guava	CVE-2020-8908	低危	14.0.1	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
com.google.guava:guava	CVE-2020-8908	低危	14.0.1	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.2.0	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-09-25 08:15 修改: 2024-09-26 13:32
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.2.0	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-09-25 08:15 修改: 2024-09-26 13:32
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	9.3.24.v20180605	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-07-07 21:15 修改: 2022-10-25 19:10
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	9.3.24.v20180605	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-07-07 21:15 修改: 2022-10-25 19:10
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	9.3.24.v20180605	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2022-07-07 21:15 修改: 2022-10-25 19:10
org.eclipse.jetty:jetty-http	CVE-2024-6763	低危	9.3.24.v20180605	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-14 16:15 修改: 2024-10-15 12:57
org.eclipse.jetty:jetty-http	CVE-2024-6763	低危	9.3.24.v20180605	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-14 16:15 修改: 2024-10-15 12:57
org.eclipse.jetty:jetty-http	CVE-2024-6763	低危	9.3.24.v20180605	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-10-14 16:15 修改: 2024-10-15 12:57
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.2.0	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-09-25 08:15 修改: 2024-09-26 13:32
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	9.4.40.v20210413	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-07-07 21:15 修改: 2022-10-25 19:10
org.eclipse.jetty:jetty-http	CVE-2024-6763	低危	9.4.40.v20210413	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-10-14 16:15 修改: 2024-10-15 12:57
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.2.0	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2024-09-25 08:15 修改: 2024-09-26 13:32
org.eclipse.jetty:jetty-server	CVE-2021-34428	低危	9.3.24.v20180605	9.4.41, 10.0.3, 11.0.3	jetty: SessionListener can prevent a session from being invalidated breaking logout 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34428 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-06-22 15:15 修改: 2023-11-07 03:35
org.eclipse.jetty:jetty-server	CVE-2021-34428	低危	9.3.24.v20180605	9.4.41, 10.0.3, 11.0.3	jetty: SessionListener can prevent a session from being invalidated breaking logout 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34428 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-06-22 15:15 修改: 2023-11-07 03:35
org.eclipse.jetty:jetty-server	CVE-2021-34428	低危	9.3.24.v20180605	9.4.41, 10.0.3, 11.0.3	jetty: SessionListener can prevent a session from being invalidated breaking logout 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34428 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2021-06-22 15:15 修改: 2023-11-07 03:35
org.eclipse.jetty:jetty-server	CVE-2023-26049	低危	9.3.24.v20180605	9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0	jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-04-18 21:15 修改: 2024-02-01 15:36
org.eclipse.jetty:jetty-server	CVE-2023-26049	低危	9.3.24.v20180605	9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0	jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-04-18 21:15 修改: 2024-02-01 15:36
org.eclipse.jetty:jetty-server	CVE-2023-26049	低危	9.3.24.v20180605	9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0	jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2023-04-18 21:15 修改: 2024-02-01 15:36
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	9.4.43.v20210629	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-07-07 21:15 修改: 2022-10-25 19:10
org.eclipse.jetty:jetty-http	CVE-2024-6763	低危	9.4.43.v20210629	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-10-14 16:15 修改: 2024-10-15 12:57
org.eclipse.jetty:jetty-server	CVE-2023-26049	低危	9.4.43.v20210629	9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0	jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-04-18 21:15 修改: 2024-02-01 15:36
com.google.guava:guava	CVE-2020-8908	低危	11.0.2	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
org.eclipse.jetty:jetty-servlets	CVE-2023-36479	低危	9.4.43.v20210629	9.4.52, 10.0.16, 11.0.16	jetty: Improper addition of quotation marks to user inputs in CgiServlet 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36479 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-09-15 19:15 修改: 2023-10-16 19:20
com.google.guava:guava	CVE-2020-8908	低危	11.0.2	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.3.1	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-09-25 08:15 修改: 2024-09-26 13:32
com.google.guava:guava	CVE-2020-8908	低危	30.1.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
com.google.guava:guava	CVE-2020-8908	低危	30.1.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2020-12-10 23:15 修改: 2023-08-02 17:30
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.3.24.v20180605	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.3.24.v20180605	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.3.24.v20180605	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:1cc443b1ded3397d53423eb85d150157746a94b499995de5ee1bdee041bd92f1 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.4.40.v20210413	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Python (python-pkg)

低危漏洞:0

中危漏洞:7

高危漏洞:7

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
pyspark	CVE-2023-22946	严重	3.2.0	3.3.2	Apache Spark vulnerable to Improper Privilege Management 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22946 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-04-17 08:15 修改: 2023-04-26 23:00
pyspark	CVE-2022-33891	高危	3.2.0	3.2.2	apache-spark: Apache Spark shell command injection vulnerability via Spark UI 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-33891 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-07-18 07:15 修改: 2023-08-02 17:21
pyspark	CVE-2023-32007	高危	3.2.0	3.2.2	Apache Spark UI vulnerable to Command Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32007 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-05-02 09:15 修改: 2024-10-15 18:35
setuptools	CVE-2022-40897	高危	46.4.0	65.5.1	pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40897 镜像层: sha256:43234a7c1aeda6d4a6ebdd6bdd3490c55e4994ba362a457fead323d58d6d010a 发布日期: 2022-12-23 00:15 修改: 2024-06-21 19:15
setuptools	CVE-2024-6345	高危	46.4.0	70.0.0	pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345 镜像层: sha256:43234a7c1aeda6d4a6ebdd6bdd3490c55e4994ba362a457fead323d58d6d010a 发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
setuptools	CVE-2022-40897	高危	57.4.0	65.5.1	pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40897 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-23 00:15 修改: 2024-06-21 19:15
setuptools	CVE-2024-6345	高危	57.4.0	70.0.0	pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
wheel	CVE-2022-40898	高危	0.37.0	0.38.1	python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40898 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-12-23 00:15 修改: 2022-12-30 22:15
pip	CVE-2023-5752	中危	21.2.3	23.3	pip: Mercurial configuration injectable in repo revision when installing via pip 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5752 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-10-25 18:17 修改: 2024-06-10 18:15
pip	CVE-2023-5752	中危	21.3.1	23.3	pip: Mercurial configuration injectable in repo revision when installing via pip 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5752 镜像层: sha256:43234a7c1aeda6d4a6ebdd6bdd3490c55e4994ba362a457fead323d58d6d010a 发布日期: 2023-10-25 18:17 修改: 2024-06-10 18:15
pyspark	CVE-2022-31777	中危	3.2.0	3.2.2, 3.3.1	apache-spark: XSS vulnerability in log viewer UI Javascript 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31777 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2022-11-01 16:15 修改: 2022-11-29 17:58
urllib3	CVE-2023-43804	中危	1.26.7	2.0.6, 1.26.17	python-urllib3: Cookie request header isn't stripped during cross-origin redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43804 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-10-04 17:15 修改: 2024-02-01 00:55
urllib3	CVE-2023-45803	中危	1.26.7	2.0.7, 1.26.18	urllib3: Request body not stripped after redirect from 303 status changes request method to GET 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45803 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2023-10-17 20:15 修改: 2023-11-03 22:15
urllib3	CVE-2024-37891	中危	1.26.7	1.26.19, 2.2.2	urllib3: proxy-authorization request header is not stripped during cross-origin redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37891 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2024-06-17 20:15 修改: 2024-06-20 12:44
numpy	CVE-2021-34141	中危	1.21.4	1.22	numpy: incomplete string comparison in the numpy.core component 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34141 镜像层: sha256:3f7779d38ca5635ccac170b7c728d5a423f3b22c7a8b13017a31f6123a35cdae 发布日期: 2021-12-17 19:15 修改: 2023-02-24 15:35

opt/bitnami/common/bin/gosu (gobinary)

低危漏洞:3

中危漏洞:26

高危漏洞:41

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	1.16.7	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-02-11 01:15 修改: 2023-04-20 00:15
stdlib	CVE-2023-24538	严重	1.16.7	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24540	严重	1.16.7	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:08
stdlib	CVE-2024-24790	严重	1.16.7	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
github.com/opencontainers/runc	CVE-2023-27561	高危	v1.0.1	1.1.5	runc: volume mount race condition (regression of CVE-2019-19921) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27561 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-03-03 19:15 修改: 2024-07-03 01:39
github.com/opencontainers/runc	CVE-2024-21626	高危	v1.0.1	1.1.12	runc: file descriptor leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21626 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-01-31 22:15 修改: 2024-02-19 03:15
stdlib	CVE-2021-39293	高危	1.16.7	1.16.8, 1.17.1	golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-01-24 01:15 修改: 2023-04-20 00:15
stdlib	CVE-2021-41771	高危	1.16.7	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2021-11-08 06:15 修改: 2023-11-07 03:39
stdlib	CVE-2021-41772	高危	1.16.7	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2021-11-08 06:15 修改: 2023-11-07 03:39
stdlib	CVE-2021-44716	高危	1.16.7	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-01-01 05:15 修改: 2023-04-20 00:15
stdlib	CVE-2022-23772	高危	1.16.7	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-02-11 01:15 修改: 2022-11-09 21:51
stdlib	CVE-2022-24675	高危	1.16.7	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-04-20 10:15 修改: 2023-11-07 03:44
stdlib	CVE-2022-24921	高危	1.16.7	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-03-05 20:15 修改: 2023-08-08 14:22
stdlib	CVE-2022-27664	高危	1.16.7	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-09-06 18:15 修改: 2023-11-07 03:45
stdlib	CVE-2022-28131	高危	1.16.7	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:45
stdlib	CVE-2022-28327	高危	1.16.7	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-04-20 10:15 修改: 2023-11-07 03:45
stdlib	CVE-2022-2879	高危	1.16.7	1.18.7, 1.19.2	golang: archive/tar: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-10-14 15:15 修改: 2023-11-25 11:15
stdlib	CVE-2022-2880	高危	1.16.7	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-10-14 15:15 修改: 2023-11-25 11:15
stdlib	CVE-2022-29804	高危	1.16.7	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:46
stdlib	CVE-2022-30580	高危	1.16.7	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30630	高危	1.16.7	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30631	高危	1.16.7	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30632	高危	1.16.7	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30633	高危	1.16.7	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30634	高危	1.16.7	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-07-15 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30635	高危	1.16.7	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-32189	高危	1.16.7	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-03-03 15:39
stdlib	CVE-2022-41715	高危	1.16.7	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-10-14 15:16 修改: 2023-11-25 11:15
stdlib	CVE-2022-41716	高危	1.16.7	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-11-02 16:15 修改: 2023-11-07 03:52
stdlib	CVE-2022-41720	高危	1.16.7	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-12-07 17:15 修改: 2022-12-12 14:58
stdlib	CVE-2022-41722	高危	1.16.7	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-02-28 18:15 修改: 2023-11-07 03:52
stdlib	CVE-2022-41723	高危	1.16.7	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
stdlib	CVE-2022-41724	高危	1.16.7	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
stdlib	CVE-2022-41725	高危	1.16.7	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24534	高危	1.16.7	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24536	高危	1.16.7	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24537	高危	1.16.7	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24539	高危	1.16.7	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:08
stdlib	CVE-2023-29400	高危	1.16.7	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:11
stdlib	CVE-2023-29403	高危	1.16.7	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-06-08 21:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39325	高危	1.16.7	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.16.7	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45287	高危	1.16.7	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-12-05 17:15 修改: 2024-01-12 14:15
stdlib	CVE-2023-45288	高危	1.16.7	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-34156	高危	1.16.7	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/sys	CVE-2022-29526	中危	v0.0.0-20210817142637-7d9622a276b7	0.0.0-20220412211240-33da011f77ad	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-06-23 17:15 修改: 2023-11-07 03:46
github.com/opencontainers/runc	CVE-2021-43784	中危	v1.0.1	1.0.3	runc: integer overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43784 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2021-12-06 18:15 修改: 2024-02-19 03:15
github.com/opencontainers/runc	CVE-2022-29162	中危	v1.0.1	1.1.2	runc: incorrect handling of inheritable capabilities 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29162 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-05-17 21:15 修改: 2023-11-07 03:45
github.com/opencontainers/runc	CVE-2023-28642	中危	v1.0.1	1.1.5	runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28642 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-03-29 19:15 修改: 2023-11-07 04:10
stdlib	CVE-2021-44717	中危	1.16.7	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-01-01 05:15 修改: 2023-08-08 14:22
stdlib	CVE-2022-1705	中危	1.16.7	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:42
stdlib	CVE-2022-1962	中危	1.16.7	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:42
stdlib	CVE-2022-29526	中危	1.16.7	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-06-23 17:15 修改: 2023-11-07 03:46
stdlib	CVE-2022-32148	中危	1.16.7	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-41717	中危	1.16.7	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-12-08 20:15 修改: 2024-01-18 03:15
stdlib	CVE-2023-24532	中危	1.16.7	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-03-08 20:15 修改: 2023-11-07 04:08
stdlib	CVE-2023-29406	中危	1.16.7	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-07-11 20:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-29409	中危	1.16.7	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-08-02 20:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39318	中危	1.16.7	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.16.7	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.16.7	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.16.7	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.16.7	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2023-45290	中危	1.16.7	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24783	中危	1.16.7	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24784	中危	1.16.7	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.16.7	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.16.7	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.16.7	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.16.7	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-09-06 21:15 修改: 2024-09-09 13:03
stdlib	CVE-2024-34158	中危	1.16.7	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/opencontainers/runc	CVE-2023-25809	低危	v1.0.1	1.1.5	runc: Rootless runc makes `/sys/fs/cgroup` writable 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25809 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2023-03-29 19:15 修改: 2023-11-07 04:09
github.com/opencontainers/runc	CVE-2024-45310	低危	v1.0.1	1.1.14, 1.2.0-rc.3	runc: runc can be tricked into creating empty files/directories on host 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45310 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2024-09-03 19:15 修改: 2024-09-03 19:40
stdlib	CVE-2022-30629	低危	1.16.7	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:7a955f50310d3409075b908eb7da1ea27b89568dac42d159f967d4b9798699cc 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47

/etc/ssh/ssh_host_rsa_key ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/root/.ssh/id_rsa ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/etc/ssh/ssh_host_ecdsa_key ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/etc/ssh/ssh_host_ed25519_key ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息