docker.io/tjqq/powerjob-server:4.3.3 linux/amd64

docker.io/tjqq/powerjob-server:4.3.3 - Trivy安全扫描结果 扫描时间: 2026-08-20 19:21
全部漏洞信息
低危漏洞:161 中危漏洞:323 高危漏洞:85 严重漏洞:10

系统OS: ubuntu 18.04 扫描引擎: Trivy 扫描时间: 2026-08-20 19:21

docker.io/tjqq/powerjob-server:4.3.3 (ubuntu 18.04) (ubuntu)
低危漏洞:146 中危漏洞:244 高危漏洞:17 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libexpat1 CVE-2022-25235 高危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-25236 高危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

libfreetype6 CVE-2020-15999 高危 2.8.1-2ubuntu2 2.8.1-2ubuntu2.1 freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15999

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-11-03 03:15 修改: 2026-06-17 02:57

libsasl2-2 CVE-2022-24407 高危 2.1.27~101-g0780600+dfsg-3ubuntu2.1 2.1.27~101-g0780600+dfsg-3ubuntu2.4 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31

libsasl2-modules-db CVE-2022-24407 高危 2.1.27~101-g0780600+dfsg-3ubuntu2.1 2.1.27~101-g0780600+dfsg-3ubuntu2.4 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31

libssl1.1 CVE-2020-1971 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.7 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02

libssl1.1 CVE-2021-3449 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.9 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2021-3711 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.13 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2022-0778 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.15 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

libssl1.1 CVE-2023-0286 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.21 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

libsystemd0 CVE-2021-33910 高危 237-3ubuntu10.41 237-3ubuntu10.49 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-07-20 19:15 修改: 2026-06-17 03:55

libudev1 CVE-2021-33910 高危 237-3ubuntu10.41 237-3ubuntu10.49 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-07-20 19:15 修改: 2026-06-17 03:55

openssl CVE-2020-1971 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.7 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02

openssl CVE-2021-3449 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.9 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05

openssl CVE-2021-3711 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.13 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

openssl CVE-2022-0778 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.15 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

openssl CVE-2023-0286 高危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.21 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

curl CVE-2023-23916 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.23 curl: HTTP multi-header compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38

curl CVE-2023-27535 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

dpkg CVE-2022-1664 中危 1.19.0.5ubuntu2.3 1.19.0.5ubuntu2.4 Dpkg::Source::Archive in dpkg, the Debian package management system, b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1664

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-05-26 14:15 修改: 2026-06-17 04:22

e2fsprogs CVE-2022-1304 中危 1.44.1-1ubuntu1.3 1.44.1-1ubuntu1.4 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

gpgv CVE-2022-34903 中危 2.2.4-1ubuntu1.2 2.2.4-1ubuntu1.6 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gzip CVE-2022-1271 中危 1.6-5ubuntu1 1.6-5ubuntu1.2 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

libapt-pkg5.0 CVE-2020-27350 中危 1.6.12ubuntu0.1 1.6.12ubuntu0.2 APT had several integer overflows and underflows while parsing .deb pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27350

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-12-10 04:15 修改: 2026-06-17 03:09

libasn1-8-heimdal CVE-2018-16860 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: S4U2Self with unkeyed checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16860

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-07-31 15:15 修改: 2026-06-17 01:44

libasn1-8-heimdal CVE-2021-44758 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-26 05:15 修改: 2026-06-17 04:12

libasn1-8-heimdal CVE-2022-3116 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 CVE-2022-3116 affecting package samba for versions less than 4.18.3-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-27 22:15 修改: 2026-06-17 04:58

libasn1-8-heimdal CVE-2022-3437 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libasn1-8-heimdal CVE-2022-41916 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.2 Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-11-15 23:15 修改: 2026-06-17 05:04

libasn1-8-heimdal CVE-2022-42898 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libasn1-8-heimdal CVE-2022-44640 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 05:15 修改: 2026-06-17 05:08

libasn1-8-heimdal CVE-2022-45142 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.4 samba: fix introduced a logic inversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-06 23:15 修改: 2026-06-17 05:09

libc-bin CVE-2018-11236 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

libc-bin CVE-2018-11237 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

libc-bin CVE-2018-19591 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19591

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-12-04 16:29 修改: 2026-06-17 01:49

libc-bin CVE-2020-1751 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02

libc-bin CVE-2021-3999 中危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

libc6 CVE-2018-11236 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

libc6 CVE-2018-11237 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

libc6 CVE-2018-19591 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19591

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-12-04 16:29 修改: 2026-06-17 01:49

libc6 CVE-2020-1751 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02

libc6 CVE-2021-3999 中危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

libcom-err2 CVE-2022-1304 中危 1.44.1-1ubuntu1.3 1.44.1-1ubuntu1.4 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

libcurl4 CVE-2020-8177 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.9 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25

libcurl4 CVE-2020-8285 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.12 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libcurl4 CVE-2020-8286 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.12 curl: Inferior OCSP verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libcurl4 CVE-2021-22876 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.13 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-04-01 18:15 修改: 2026-06-17 03:37

libcurl4 CVE-2021-22924 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.14 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

libcurl4 CVE-2021-22925 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.14 curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

libcurl4 CVE-2021-22946 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.15 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libcurl4 CVE-2021-22947 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.15 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libcurl4 CVE-2022-22576 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.17 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28

libcurl4 CVE-2022-27774 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.17 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2022-27782 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.18 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2022-32206 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.19 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libcurl4 CVE-2022-32208 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.19 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libcurl4 CVE-2022-32221 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.21 curl: POST following PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46

libcurl4 CVE-2022-43552 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.22 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06

libcurl4 CVE-2023-23916 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.23 curl: HTTP multi-header compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38

libcurl4 CVE-2023-27535 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

apt CVE-2020-27350 中危 1.6.12ubuntu0.1 1.6.12ubuntu0.2 APT had several integer overflows and underflows while parsing .deb pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27350

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-12-10 04:15 修改: 2026-06-17 03:09

ca-certificates CVE-2022-23491 中危 20190110~18.04.1 20211016ubuntu0.18.04.1 python-certifi: untrusted root certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23491

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-07 22:15 修改: 2026-06-17 04:30

libexpat1 CVE-2021-46143 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Integer overflow in doProlog in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-06 04:15 修改: 2026-06-17 04:14

libexpat1 CVE-2022-22822 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Integer overflow in addBinding in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22823 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Integer overflow in build_model in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22824 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Integer overflow in defineAttribute in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22825 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Integer overflow in lookup in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22826 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Integer overflow in nextScaffoldPart in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22827 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Integer overflow in storeAtts in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-23852 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Integer overflow in function XML_GetBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-24 02:15 修改: 2026-06-17 04:30

libexpat1 CVE-2022-23990 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: integer overflow in the doProlog function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-26 19:15 修改: 2026-06-17 04:31

libexpat1 CVE-2022-25313 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.7 expat: Stack exhaustion in doctype parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-25314 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.7 expat: Integer overflow in copyString()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25314

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-25315 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.7 expat: Integer overflow in storeRawNames()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-40674 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.8 expat: a use-after-free in the doContent function in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-09-14 11:15 修改: 2026-06-17 05:01

libexpat1 CVE-2022-43680 中危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.8 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-10-24 14:15 修改: 2026-06-17 05:07

libext2fs2 CVE-2022-1304 中危 1.44.1-1ubuntu1.3 1.44.1-1ubuntu1.4 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

curl CVE-2020-8177 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.9 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25

libfreetype6 CVE-2022-27404 中危 2.8.1-2ubuntu2 2.8.1-2ubuntu2.2 FreeType: Buffer overflow in sfnt_init_face

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27404

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-04-22 14:15 修改: 2026-06-17 04:36

libfreetype6 CVE-2022-31782 中危 2.8.1-2ubuntu2 2.8.1-2ubuntu2.2 ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based bu ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31782

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:46

libgcrypt20 CVE-2021-40528 中危 1.8.1-4ubuntu1.2 1.8.1-4ubuntu1.3 libgcrypt: ElGamal implementation allows plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40528

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-09-06 19:15 修改: 2026-06-17 04:07

libgnutls30 CVE-2022-2509 中危 3.5.18-1ubuntu1.3 3.5.18-1ubuntu1.6 gnutls: Double free during gnutls_pkcs7_verify

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-08-01 14:15 修改: 2026-06-17 04:42

libgssapi-krb5-2 CVE-2018-20217 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52

libgssapi-krb5-2 CVE-2020-28196 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10

libgssapi-krb5-2 CVE-2021-36222 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.4 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libgssapi-krb5-2 CVE-2021-37750 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.4 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libgssapi-krb5-2 CVE-2022-42898 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libgssapi3-heimdal CVE-2018-16860 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: S4U2Self with unkeyed checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16860

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-07-31 15:15 修改: 2026-06-17 01:44

libgssapi3-heimdal CVE-2021-44758 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-26 05:15 修改: 2026-06-17 04:12

libgssapi3-heimdal CVE-2022-3116 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 CVE-2022-3116 affecting package samba for versions less than 4.18.3-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-27 22:15 修改: 2026-06-17 04:58

libgssapi3-heimdal CVE-2022-3437 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libgssapi3-heimdal CVE-2022-41916 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.2 Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-11-15 23:15 修改: 2026-06-17 05:04

libgssapi3-heimdal CVE-2022-42898 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libgssapi3-heimdal CVE-2022-44640 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 05:15 修改: 2026-06-17 05:08

libgssapi3-heimdal CVE-2022-45142 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.4 samba: fix introduced a logic inversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-06 23:15 修改: 2026-06-17 05:09

libhcrypto4-heimdal CVE-2018-16860 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: S4U2Self with unkeyed checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16860

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-07-31 15:15 修改: 2026-06-17 01:44

libhcrypto4-heimdal CVE-2021-44758 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-26 05:15 修改: 2026-06-17 04:12

libhcrypto4-heimdal CVE-2022-3116 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 CVE-2022-3116 affecting package samba for versions less than 4.18.3-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-27 22:15 修改: 2026-06-17 04:58

libhcrypto4-heimdal CVE-2022-3437 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libhcrypto4-heimdal CVE-2022-41916 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.2 Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-11-15 23:15 修改: 2026-06-17 05:04

libhcrypto4-heimdal CVE-2022-42898 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libhcrypto4-heimdal CVE-2022-44640 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 05:15 修改: 2026-06-17 05:08

libhcrypto4-heimdal CVE-2022-45142 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.4 samba: fix introduced a logic inversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-06 23:15 修改: 2026-06-17 05:09

libheimbase1-heimdal CVE-2018-16860 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: S4U2Self with unkeyed checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16860

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-07-31 15:15 修改: 2026-06-17 01:44

libheimbase1-heimdal CVE-2021-44758 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-26 05:15 修改: 2026-06-17 04:12

libheimbase1-heimdal CVE-2022-3116 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 CVE-2022-3116 affecting package samba for versions less than 4.18.3-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-27 22:15 修改: 2026-06-17 04:58

libheimbase1-heimdal CVE-2022-3437 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libheimbase1-heimdal CVE-2022-41916 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.2 Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-11-15 23:15 修改: 2026-06-17 05:04

libheimbase1-heimdal CVE-2022-42898 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libheimbase1-heimdal CVE-2022-44640 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 05:15 修改: 2026-06-17 05:08

libheimbase1-heimdal CVE-2022-45142 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.4 samba: fix introduced a logic inversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-06 23:15 修改: 2026-06-17 05:09

libheimntlm0-heimdal CVE-2018-16860 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: S4U2Self with unkeyed checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16860

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-07-31 15:15 修改: 2026-06-17 01:44

libheimntlm0-heimdal CVE-2021-44758 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-26 05:15 修改: 2026-06-17 04:12

libheimntlm0-heimdal CVE-2022-3116 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 CVE-2022-3116 affecting package samba for versions less than 4.18.3-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-27 22:15 修改: 2026-06-17 04:58

libheimntlm0-heimdal CVE-2022-3437 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libheimntlm0-heimdal CVE-2022-41916 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.2 Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-11-15 23:15 修改: 2026-06-17 05:04

libheimntlm0-heimdal CVE-2022-42898 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libheimntlm0-heimdal CVE-2022-44640 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 05:15 修改: 2026-06-17 05:08

libheimntlm0-heimdal CVE-2022-45142 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.4 samba: fix introduced a logic inversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-06 23:15 修改: 2026-06-17 05:09

libhogweed4 CVE-2021-20305 中危 3.4-1 3.4-1ubuntu0.1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33

libhogweed4 CVE-2021-3580 中危 3.4-1 3.4.1-0ubuntu0.18.04.1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

libhx509-5-heimdal CVE-2018-16860 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: S4U2Self with unkeyed checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16860

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-07-31 15:15 修改: 2026-06-17 01:44

libhx509-5-heimdal CVE-2021-44758 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-26 05:15 修改: 2026-06-17 04:12

libhx509-5-heimdal CVE-2022-3116 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 CVE-2022-3116 affecting package samba for versions less than 4.18.3-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-27 22:15 修改: 2026-06-17 04:58

libhx509-5-heimdal CVE-2022-3437 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libhx509-5-heimdal CVE-2022-41916 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.2 Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-11-15 23:15 修改: 2026-06-17 05:04

libhx509-5-heimdal CVE-2022-42898 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libhx509-5-heimdal CVE-2022-44640 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 05:15 修改: 2026-06-17 05:08

libhx509-5-heimdal CVE-2022-45142 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.4 samba: fix introduced a logic inversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-06 23:15 修改: 2026-06-17 05:09

libk5crypto3 CVE-2018-20217 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52

libk5crypto3 CVE-2020-28196 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10

libk5crypto3 CVE-2021-36222 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.4 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libk5crypto3 CVE-2021-37750 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.4 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libk5crypto3 CVE-2022-42898 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libkrb5-26-heimdal CVE-2018-16860 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: S4U2Self with unkeyed checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16860

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-07-31 15:15 修改: 2026-06-17 01:44

libkrb5-26-heimdal CVE-2021-44758 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-26 05:15 修改: 2026-06-17 04:12

libkrb5-26-heimdal CVE-2022-3116 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 CVE-2022-3116 affecting package samba for versions less than 4.18.3-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-27 22:15 修改: 2026-06-17 04:58

libkrb5-26-heimdal CVE-2022-3437 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libkrb5-26-heimdal CVE-2022-41916 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.2 Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-11-15 23:15 修改: 2026-06-17 05:04

libkrb5-26-heimdal CVE-2022-42898 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libkrb5-26-heimdal CVE-2022-44640 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 05:15 修改: 2026-06-17 05:08

libkrb5-26-heimdal CVE-2022-45142 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.4 samba: fix introduced a logic inversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-06 23:15 修改: 2026-06-17 05:09

libkrb5-3 CVE-2018-20217 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52

libkrb5-3 CVE-2020-28196 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10

libkrb5-3 CVE-2021-36222 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.4 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libkrb5-3 CVE-2021-37750 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.4 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libkrb5-3 CVE-2022-42898 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libkrb5support0 CVE-2018-20217 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52

libkrb5support0 CVE-2020-28196 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10

libkrb5support0 CVE-2021-36222 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.4 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libkrb5support0 CVE-2021-37750 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.4 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libkrb5support0 CVE-2022-42898 中危 1.16-2ubuntu0.1 1.16-2ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libldap-2.4-2 CVE-2020-25692 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.7 openldap: NULL pointer dereference for unauthenticated packet in slapd

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25692

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-08 01:15 修改: 2026-06-17 03:07

libldap-2.4-2 CVE-2020-25709 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.8 openldap: assertion failure in Certificate List syntax validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25709

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-05-18 12:15 修改: 2026-06-17 03:07

libldap-2.4-2 CVE-2020-25710 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.8 openldap: assertion failure in CSN normalization with invalid input

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25710

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-05-28 11:15 修改: 2026-06-17 03:07

libldap-2.4-2 CVE-2020-36221 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36221

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36222 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Assertion failure in slapd in the saslAuthzTo validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36222

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36223 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Out-of-bounds read in Values Return Filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36223

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36224 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Invalid pointer free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36224

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36225 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Double free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36225

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36226 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Denial of service via length miscalculation in slap_parse_user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36226

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36227 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Infinite loop in slapd with the cancel_extop Cancel operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36227

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36228 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36228

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36229 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Type confusion in ad_keystring in ad.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36229

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36230 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Assertion failure in ber_next_element in decode.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36230

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2021-27212 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.10 openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27212

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-02-14 03:15 修改: 2026-06-17 03:44

libldap-2.4-2 CVE-2022-29155 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.11 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-05-04 20:15 修改: 2026-06-17 04:39

libldap-common CVE-2020-25692 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.7 openldap: NULL pointer dereference for unauthenticated packet in slapd

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25692

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-08 01:15 修改: 2026-06-17 03:07

libldap-common CVE-2020-25709 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.8 openldap: assertion failure in Certificate List syntax validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25709

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-05-18 12:15 修改: 2026-06-17 03:07

libldap-common CVE-2020-25710 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.8 openldap: assertion failure in CSN normalization with invalid input

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25710

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-05-28 11:15 修改: 2026-06-17 03:07

libldap-common CVE-2020-36221 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36221

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36222 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Assertion failure in slapd in the saslAuthzTo validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36222

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36223 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Out-of-bounds read in Values Return Filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36223

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36224 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Invalid pointer free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36224

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36225 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Double free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36225

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36226 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Denial of service via length miscalculation in slap_parse_user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36226

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36227 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Infinite loop in slapd with the cancel_extop Cancel operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36227

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36228 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36228

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36229 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Type confusion in ad_keystring in ad.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36229

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36230 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.9 openldap: Assertion failure in ber_next_element in decode.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36230

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2021-27212 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.10 openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27212

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-02-14 03:15 修改: 2026-06-17 03:44

libldap-common CVE-2022-29155 中危 2.4.45+dfsg-1ubuntu1.5 2.4.45+dfsg-1ubuntu1.11 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-05-04 20:15 修改: 2026-06-17 04:39

liblz4-1 CVE-2021-3520 中危 0.0~r131-2ubuntu3 0.0~r131-2ubuntu3.1 lz4: memory corruption due to an integer overflow bug caused by memmove argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3520

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-06-02 13:15 修改: 2026-06-17 04:05

liblzma5 CVE-2022-1271 中危 5.2.2-1.3 5.2.2-1.3ubuntu0.1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

libncurses5 CVE-2023-29491 中危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

libncursesw5 CVE-2023-29491 中危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

libnettle6 CVE-2021-20305 中危 3.4-1 3.4-1ubuntu0.1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33

libnettle6 CVE-2021-3580 中危 3.4-1 3.4.1-0ubuntu0.18.04.1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

libp11-kit0 CVE-2020-29361 中危 0.23.9-2 0.23.9-2ubuntu0.1 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11

libp11-kit0 CVE-2020-29362 中危 0.23.9-2 0.23.9-2ubuntu0.1 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11

libp11-kit0 CVE-2020-29363 中危 0.23.9-2 0.23.9-2ubuntu0.1 p11-kit: out-of-bounds write in p11_rpc_buffer_get_byte_array_value function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29363

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11

libroken18-heimdal CVE-2018-16860 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: S4U2Self with unkeyed checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16860

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-07-31 15:15 修改: 2026-06-17 01:44

libroken18-heimdal CVE-2021-44758 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-26 05:15 修改: 2026-06-17 04:12

libroken18-heimdal CVE-2022-3116 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 CVE-2022-3116 affecting package samba for versions less than 4.18.3-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-27 22:15 修改: 2026-06-17 04:58

libroken18-heimdal CVE-2022-3437 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libroken18-heimdal CVE-2022-41916 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.2 Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-11-15 23:15 修改: 2026-06-17 05:04

libroken18-heimdal CVE-2022-42898 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libroken18-heimdal CVE-2022-44640 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 05:15 修改: 2026-06-17 05:08

libroken18-heimdal CVE-2022-45142 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.4 samba: fix introduced a logic inversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-06 23:15 修改: 2026-06-17 05:09

curl CVE-2020-8285 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.12 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

curl CVE-2020-8286 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.12 curl: Inferior OCSP verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libsqlite3-0 CVE-2020-35525 中危 3.22.0-1ubuntu0.4 3.22.0-1ubuntu0.6 sqlite: Null pointer derreference in src/select.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35525

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-09-01 18:15 修改: 2026-06-17 03:13

libsqlite3-0 CVE-2022-35737 中危 3.22.0-1ubuntu0.4 3.22.0-1ubuntu0.7 sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-08-03 06:15 修改: 2026-06-17 04:52

libss2 CVE-2022-1304 中危 1.44.1-1ubuntu1.3 1.44.1-1ubuntu1.4 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

curl CVE-2021-22876 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.13 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-04-01 18:15 修改: 2026-06-17 03:37

curl CVE-2021-22924 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.14 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

curl CVE-2021-22925 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.14 curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

curl CVE-2021-22946 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.15 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

curl CVE-2021-22947 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.15 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libssl1.1 CVE-2021-23841 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.8 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

libssl1.1 CVE-2021-3712 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.13 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2022-1292 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.17 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

libssl1.1 CVE-2022-2068 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.19 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-21 15:15 修改: 2026-06-17 04:41

libssl1.1 CVE-2022-2097 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.20 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

libssl1.1 CVE-2022-4304 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.21 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

libssl1.1 CVE-2022-4450 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.21 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

libssl1.1 CVE-2023-0215 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.21 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-2650 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.23 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53

curl CVE-2022-22576 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.17 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28

libsystemd0 CVE-2022-2526 中危 237-3ubuntu10.41 237-3ubuntu10.54 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-09-09 15:15 修改: 2026-06-17 04:42

libsystemd0 CVE-2022-3821 中危 237-3ubuntu10.41 237-3ubuntu10.57 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

libtinfo5 CVE-2023-29491 中危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

curl CVE-2022-27774 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.17 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libudev1 CVE-2022-2526 中危 237-3ubuntu10.41 237-3ubuntu10.54 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-09-09 15:15 修改: 2026-06-17 04:42

libudev1 CVE-2022-3821 中危 237-3ubuntu10.41 237-3ubuntu10.57 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

libwind0-heimdal CVE-2018-16860 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: S4U2Self with unkeyed checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16860

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-07-31 15:15 修改: 2026-06-17 01:44

libwind0-heimdal CVE-2021-44758 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows attackers to cause a NULL pointer derefere ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44758

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-26 05:15 修改: 2026-06-17 04:12

libwind0-heimdal CVE-2022-3116 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 CVE-2022-3116 affecting package samba for versions less than 4.18.3-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3116

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-27 22:15 修改: 2026-06-17 04:58

libwind0-heimdal CVE-2022-3437 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3437

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libwind0-heimdal CVE-2022-41916 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.2 Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Version ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41916

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-11-15 23:15 修改: 2026-06-17 05:04

libwind0-heimdal CVE-2022-42898 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libwind0-heimdal CVE-2022-44640 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.3 Heimdal before 7.7.1 allows remote attackers to execute arbitrary code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44640

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-25 05:15 修改: 2026-06-17 05:08

libwind0-heimdal CVE-2022-45142 中危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.4 samba: fix introduced a logic inversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45142

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-06 23:15 修改: 2026-06-17 05:09

libzstd1 CVE-2021-24031 中危 1.3.3+dfsg-2ubuntu1.1 1.3.3+dfsg-2ubuntu1.2 zstd: adds read permissions to files while being compressed or uncompressed

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24031

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-03-04 21:15 修改: 2026-06-17 03:39

libzstd1 CVE-2021-24032 中危 1.3.3+dfsg-2ubuntu1.1 1.3.3+dfsg-2ubuntu1.2 zstd: Race condition allows attacker to access world-readable destination file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24032

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-03-04 21:15 修改: 2026-06-17 03:39

locales CVE-2018-11236 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

locales CVE-2018-11237 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

locales CVE-2018-19591 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19591

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2018-12-04 16:29 修改: 2026-06-17 01:49

locales CVE-2020-1751 中危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02

locales CVE-2021-3999 中危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

ncurses-base CVE-2023-29491 中危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2023-29491 中危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

curl CVE-2022-27782 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.18 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

curl CVE-2022-32206 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.19 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

curl CVE-2022-32208 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.19 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

curl CVE-2022-32221 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.21 curl: POST following PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46

curl CVE-2022-43552 中危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.22 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06

openssl CVE-2021-23841 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.8 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl CVE-2021-3712 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.13 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

openssl CVE-2022-1292 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.17 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

openssl CVE-2022-2068 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.19 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-21 15:15 修改: 2026-06-17 04:41

openssl CVE-2022-2097 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.20 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

openssl CVE-2022-4304 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.21 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl CVE-2022-4450 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.21 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl CVE-2023-0215 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.21 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl CVE-2023-2650 中危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.23 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53

perl-base CVE-2020-16156 中危 5.26.1-6ubuntu0.3 5.26.1-6ubuntu0.6 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57

perl-base CVE-2023-31484 中危 5.26.1-6ubuntu0.3 5.26.1-6ubuntu0.7 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57

tar CVE-2022-48303 中危 1.29b-2ubuntu0.1 1.29b-2ubuntu0.4 tar: heap buffer overflow at from_header() in list.c via specially crafted checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2023-01-30 04:15 修改: 2026-06-17 05:14

zlib1g CVE-2018-25032 中危 1:1.2.11.dfsg-0ubuntu2 1:1.2.11.dfsg-0ubuntu2.1 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-03-25 09:15 修改: 2026-07-14 12:16

zlib1g CVE-2022-37434 中危 1:1.2.11.dfsg-0ubuntu2 1:1.2.11.dfsg-0ubuntu2.2 zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-08-05 07:15 修改: 2026-07-14 12:16

libncurses5 CVE-2019-17595 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

libncurses5 CVE-2021-39537 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

libncurses5 CVE-2022-29458 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

libc-bin CVE-2021-3326 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-01-27 20:15 修改: 2026-06-17 04:04

libncursesw5 CVE-2019-17594 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

libncursesw5 CVE-2019-17595 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

libncursesw5 CVE-2021-39537 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

libncursesw5 CVE-2022-29458 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

libheimntlm0-heimdal CVE-2019-12098 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 In the client side of Heimdal before 7.6.0, failure to verify anonymou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12098

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-05-15 23:29 修改: 2026-06-17 02:14

libheimntlm0-heimdal CVE-2021-3671 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: Null pointer dereference on missing sname in TGS-REQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-10-12 18:15 修改: 2026-06-17 04:05

libnettle6 CVE-2018-16869 低危 3.4-1 3.4.1-0ubuntu0.18.04.1 nettle: Leaky data conversion exposing a manager oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44

libc-bin CVE-2021-35942 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

libc-bin CVE-2022-23218 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libhogweed4 CVE-2018-16869 低危 3.4-1 3.4.1-0ubuntu0.18.04.1 nettle: Leaky data conversion exposing a manager oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44

libpam-modules CVE-2022-28321 低危 1.1.8-3.6ubuntu2.18.04.1 1.1.8-3.6ubuntu2.18.04.4 pam: authentication bypass for SSH logins

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28321

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-09-19 22:15 修改: 2026-06-17 04:38

libpam-modules-bin CVE-2022-28321 低危 1.1.8-3.6ubuntu2.18.04.1 1.1.8-3.6ubuntu2.18.04.4 pam: authentication bypass for SSH logins

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28321

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-09-19 22:15 修改: 2026-06-17 04:38

libpam-runtime CVE-2022-28321 低危 1.1.8-3.6ubuntu2.18.04.1 1.1.8-3.6ubuntu2.18.04.4 pam: authentication bypass for SSH logins

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28321

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-09-19 22:15 修改: 2026-06-17 04:38

libpam0g CVE-2022-28321 低危 1.1.8-3.6ubuntu2.18.04.1 1.1.8-3.6ubuntu2.18.04.4 pam: authentication bypass for SSH logins

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28321

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-09-19 22:15 修改: 2026-06-17 04:38

libpcre3 CVE-2019-20838 低危 2:8.39-9 2:8.39-9ubuntu0.1 pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20838

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:31

libpcre3 CVE-2020-14155 低危 2:8.39-9 2:8.39-9ubuntu0.1 pcre: Integer overflow when parsing callout numeric arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:54

libc-bin CVE-2022-23219 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

curl CVE-2020-8284 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.12 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

curl CVE-2021-22898 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.14 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37

curl CVE-2022-27776 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.17 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

curl CVE-2022-27781 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.18 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

curl CVE-2022-35252 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.20 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51

libc6 CVE-2016-10228 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2017-03-02 01:59 修改: 2026-06-17 00:39

libc6 CVE-2019-19126 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26

libroken18-heimdal CVE-2019-12098 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 In the client side of Heimdal before 7.6.0, failure to verify anonymou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12098

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-05-15 23:29 修改: 2026-06-17 02:14

libroken18-heimdal CVE-2021-3671 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: Null pointer dereference on missing sname in TGS-REQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-10-12 18:15 修改: 2026-06-17 04:05

libhx509-5-heimdal CVE-2019-12098 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 In the client side of Heimdal before 7.6.0, failure to verify anonymou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12098

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-05-15 23:29 修改: 2026-06-17 02:14

libhx509-5-heimdal CVE-2021-3671 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: Null pointer dereference on missing sname in TGS-REQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-10-12 18:15 修改: 2026-06-17 04:05

libsepol1 CVE-2021-36084 低危 2.7-1 2.7-1ubuntu0.1 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36085 低危 2.7-1 2.7-1ubuntu0.1 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36086 低危 2.7-1 2.7-1ubuntu0.1 libsepol: use-after-free in cil_reset_classpermission()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36087 低危 2.7-1 2.7-1ubuntu0.1 libsepol: heap-based buffer overflow in ebitmap_match_any()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsmartcols1 CVE-2018-7738 低危 2.31.1-0.4ubuntu3.6 2.31.1-0.4ubuntu3.7 util-linux: Shell command injection in unescaped bash-completed mount point names

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7738

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-03-07 02:29 修改: 2026-06-17 02:03

libc6 CVE-2019-25013 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-01-04 18:15 修改: 2026-06-17 02:31

libexpat1 CVE-2021-45960 低危 2.2.5-3ubuntu0.2 2.2.5-3ubuntu0.4 expat: Large number of prefixed XML attributes on a single tag can crash libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-01 19:15 修改: 2026-06-17 04:14

libsqlite3-0 CVE-2021-36690 低危 3.22.0-1ubuntu0.4 3.22.0-1ubuntu0.5 A segmentation fault can occur in the sqlite3.exe command-line compone ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36690

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-08-24 14:15 修改: 2026-06-17 03:59

libc6 CVE-2019-9169 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-02-26 02:29 修改: 2026-06-17 02:43

libfdisk1 CVE-2018-7738 低危 2.31.1-0.4ubuntu3.6 2.31.1-0.4ubuntu3.7 util-linux: Shell command injection in unescaped bash-completed mount point names

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7738

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-03-07 02:29 修改: 2026-06-17 02:03

libc6 CVE-2020-10029 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47

libc6 CVE-2020-1752 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02

libc6 CVE-2020-27618 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-02-26 23:15 修改: 2026-06-17 03:09

libfreetype6 CVE-2022-27405 低危 2.8.1-2ubuntu2 2.8.1-2ubuntu2.2 FreeType: Segmentation violation via FNT_Size_Request

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27405

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

libfreetype6 CVE-2022-27406 低危 2.8.1-2ubuntu2 2.8.1-2ubuntu2.2 Freetype: Segmentation violation via FT_Request_Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27406

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

libc6 CVE-2020-29562 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: assertion failure in iconv when converting invalid UCS4

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29562

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-12-04 07:15 修改: 2026-06-17 03:11

libgcrypt20 CVE-2021-33560 低危 1.8.1-4ubuntu1.2 1.8.1-4ubuntu1.3 libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-06-08 11:15 修改: 2026-06-17 03:54

libgmp10 CVE-2021-43618 低危 2:6.1.2+dfsg-2 2:6.1.2+dfsg-2ubuntu0.1 gmp: Integer overflow and resultant buffer overflow via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-11-15 04:15 修改: 2026-06-17 04:11

libc6 CVE-2020-6096 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22

libkrb5-26-heimdal CVE-2019-12098 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 In the client side of Heimdal before 7.6.0, failure to verify anonymou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12098

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-05-15 23:29 修改: 2026-06-17 02:14

libkrb5-26-heimdal CVE-2021-3671 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: Null pointer dereference on missing sname in TGS-REQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-10-12 18:15 修改: 2026-06-17 04:05

libgnutls30 CVE-2021-4209 低危 3.5.18-1ubuntu1.3 3.5.18-1ubuntu1.6 GnuTLS: Null pointer dereference in MD_UPDATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19

libc6 CVE-2021-3326 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-01-27 20:15 修改: 2026-06-17 04:04

libssl1.1 CVE-2021-23840 低危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.8 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

libssl1.1 CVE-2023-0464 低危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.22 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0465 低危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.22 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0466 低危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.22 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

libc6 CVE-2021-35942 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

libc6 CVE-2022-23218 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libc6 CVE-2022-23219 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libsystemd0 CVE-2020-13529 低危 237-3ubuntu10.41 237-3ubuntu10.49 systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-05-10 16:15 修改: 2026-06-17 02:53

curl CVE-2023-27533 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: TELNET option IAC injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libtinfo5 CVE-2019-17594 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

libtinfo5 CVE-2019-17595 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

libtinfo5 CVE-2021-39537 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

libtinfo5 CVE-2022-29458 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

curl CVE-2023-27534 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

curl CVE-2023-27536 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

curl CVE-2023-27538 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libudev1 CVE-2020-13529 低危 237-3ubuntu10.41 237-3ubuntu10.49 systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-05-10 16:15 修改: 2026-06-17 02:53

libuuid1 CVE-2018-7738 低危 2.31.1-0.4ubuntu3.6 2.31.1-0.4ubuntu3.7 util-linux: Shell command injection in unescaped bash-completed mount point names

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7738

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-03-07 02:29 修改: 2026-06-17 02:03

bash CVE-2019-18276 低危 4.4.18-2ubuntu1.2 4.4.18-2ubuntu1.3 bash: when effective UID is not equal to its real UID the saved UID is not dropped

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18276

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-11-28 01:15 修改: 2026-06-17 02:24

libasn1-8-heimdal CVE-2019-12098 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 In the client side of Heimdal before 7.6.0, failure to verify anonymou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12098

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-05-15 23:29 修改: 2026-06-17 02:14

libasn1-8-heimdal CVE-2021-3671 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: Null pointer dereference on missing sname in TGS-REQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-10-12 18:15 修改: 2026-06-17 04:05

libblkid1 CVE-2018-7738 低危 2.31.1-0.4ubuntu3.6 2.31.1-0.4ubuntu3.7 util-linux: Shell command injection in unescaped bash-completed mount point names

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7738

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-03-07 02:29 修改: 2026-06-17 02:03

bsdutils CVE-2018-7738 低危 1:2.31.1-0.4ubuntu3.6 2.31.1-0.4ubuntu3.7 util-linux: Shell command injection in unescaped bash-completed mount point names

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7738

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-03-07 02:29 修改: 2026-06-17 02:03

libgssapi3-heimdal CVE-2019-12098 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 In the client side of Heimdal before 7.6.0, failure to verify anonymou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12098

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-05-15 23:29 修改: 2026-06-17 02:14

libgssapi3-heimdal CVE-2021-3671 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: Null pointer dereference on missing sname in TGS-REQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-10-12 18:15 修改: 2026-06-17 04:05

fdisk CVE-2018-7738 低危 2.31.1-0.4ubuntu3.6 2.31.1-0.4ubuntu3.7 util-linux: Shell command injection in unescaped bash-completed mount point names

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7738

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-03-07 02:29 修改: 2026-06-17 02:03

libwind0-heimdal CVE-2019-12098 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 In the client side of Heimdal before 7.6.0, failure to verify anonymou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12098

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-05-15 23:29 修改: 2026-06-17 02:14

libwind0-heimdal CVE-2021-3671 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: Null pointer dereference on missing sname in TGS-REQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-10-12 18:15 修改: 2026-06-17 04:05

curl CVE-2020-8231 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.10 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

gpgv CVE-2019-13050 低危 2.2.4-1ubuntu1.2 2.2.4-1ubuntu1.5 GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13050

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-06-29 17:15 修改: 2026-06-17 02:15

gpgv CVE-2019-14855 低危 2.2.4-1ubuntu1.2 2.2.4-1ubuntu1.3 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

libc-bin CVE-2016-10228 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2017-03-02 01:59 修改: 2026-06-17 00:39

libc-bin CVE-2019-19126 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26

libc-bin CVE-2019-25013 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-01-04 18:15 修改: 2026-06-17 02:31

libc-bin CVE-2019-9169 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-02-26 02:29 修改: 2026-06-17 02:43

locales CVE-2016-10228 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2017-03-02 01:59 修改: 2026-06-17 00:39

locales CVE-2019-19126 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26

locales CVE-2019-25013 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-04 18:15 修改: 2026-06-17 02:31

locales CVE-2019-9169 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-02-26 02:29 修改: 2026-06-17 02:43

locales CVE-2020-10029 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47

locales CVE-2020-1752 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02

locales CVE-2020-27618 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-02-26 23:15 修改: 2026-06-17 03:09

locales CVE-2020-29562 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: assertion failure in iconv when converting invalid UCS4

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29562

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-04 07:15 修改: 2026-06-17 03:11

locales CVE-2020-6096 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22

locales CVE-2021-3326 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-01-27 20:15 修改: 2026-06-17 04:04

locales CVE-2021-35942 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

locales CVE-2022-23218 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

locales CVE-2022-23219 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

login CVE-2018-7169 低危 1:4.5-1ubuntu2 1:4.5-1ubuntu2.2 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02

mount CVE-2018-7738 低危 2.31.1-0.4ubuntu3.6 2.31.1-0.4ubuntu3.7 util-linux: Shell command injection in unescaped bash-completed mount point names

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7738

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-03-07 02:29 修改: 2026-06-17 02:03

libhcrypto4-heimdal CVE-2019-12098 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 In the client side of Heimdal before 7.6.0, failure to verify anonymou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12098

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-05-15 23:29 修改: 2026-06-17 02:14

ncurses-base CVE-2019-17594 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

ncurses-base CVE-2019-17595 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

ncurses-base CVE-2021-39537 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

ncurses-base CVE-2022-29458 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

libhcrypto4-heimdal CVE-2021-3671 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: Null pointer dereference on missing sname in TGS-REQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-10-12 18:15 修改: 2026-06-17 04:05

ncurses-bin CVE-2019-17594 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2019-17595 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2021-39537 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2022-29458 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

libc-bin CVE-2020-10029 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47

libcurl4 CVE-2020-8231 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.10 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libcurl4 CVE-2020-8284 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.12 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libcurl4 CVE-2021-22898 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.14 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37

libcurl4 CVE-2022-27776 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.17 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2022-27781 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.18 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2022-35252 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.20 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51

libcurl4 CVE-2023-27533 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: TELNET option IAC injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libheimbase1-heimdal CVE-2019-12098 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 In the client side of Heimdal before 7.6.0, failure to verify anonymou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12098

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2019-05-15 23:29 修改: 2026-06-17 02:14

libheimbase1-heimdal CVE-2021-3671 低危 7.5.0+dfsg-1 7.5.0+dfsg-1ubuntu0.1 samba: Null pointer dereference on missing sname in TGS-REQ

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3671

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-10-12 18:15 修改: 2026-06-17 04:05

libcurl4 CVE-2023-27534 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl4 CVE-2023-27536 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl4 CVE-2023-27538 低危 7.58.0-2ubuntu3.8 7.58.0-2ubuntu3.24 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libc-bin CVE-2020-1752 低危 2.27-3ubuntu1 2.27-3ubuntu1.2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02

openssl CVE-2021-23840 低危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.8 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl CVE-2023-0464 低危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.22 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

openssl CVE-2023-0465 低危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.22 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

openssl CVE-2023-0466 低危 1.1.1-1ubuntu2.1~18.04.6 1.1.1-1ubuntu2.1~18.04.22 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:80b956beb7fc1019284b1c3607915f9ca1fe2abe574b3a58db481c64cc3d52e9

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

passwd CVE-2018-7169 低危 1:4.5-1ubuntu2 1:4.5-1ubuntu2.2 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02

libc-bin CVE-2020-27618 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-02-26 23:15 修改: 2026-06-17 03:09

libc-bin CVE-2020-29562 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: assertion failure in iconv when converting invalid UCS4

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29562

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-12-04 07:15 修改: 2026-06-17 03:11

perl-base CVE-2020-10543 低危 5.26.1-6ubuntu0.3 5.26.1-6ubuntu0.5 perl: heap-based buffer overflow in regular expression compiler leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10543

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-06-05 14:15 修改: 2026-06-17 02:47

perl-base CVE-2020-10878 低危 5.26.1-6ubuntu0.3 5.26.1-6ubuntu0.5 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10878

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-06-05 14:15 修改: 2026-06-17 02:48

perl-base CVE-2020-12723 低危 5.26.1-6ubuntu0.3 5.26.1-6ubuntu0.5 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12723

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-06-05 15:15 修改: 2026-06-17 02:52

libmount1 CVE-2018-7738 低危 2.31.1-0.4ubuntu3.6 2.31.1-0.4ubuntu3.7 util-linux: Shell command injection in unescaped bash-completed mount point names

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7738

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-03-07 02:29 修改: 2026-06-17 02:03

tar CVE-2018-20482 低危 1.29b-2ubuntu0.1 1.29b-2ubuntu0.2 tar: Infinite read loop in sparse_dump_region function in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20482

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-12-26 18:29 修改: 2026-06-17 01:52

tar CVE-2019-9923 低危 1.29b-2ubuntu0.1 1.29b-2ubuntu0.2 tar: null-pointer dereference in pax_decode_header in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9923

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44

tar CVE-2021-20193 低危 1.29b-2ubuntu0.1 1.29b-2ubuntu0.3 tar: Memory leak in read_header() in list.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20193

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2021-03-26 17:15 修改: 2026-06-17 03:33

util-linux CVE-2018-7738 低危 2.31.1-0.4ubuntu3.6 2.31.1-0.4ubuntu3.7 util-linux: Shell command injection in unescaped bash-completed mount point names

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7738

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2018-03-07 02:29 修改: 2026-06-17 02:03

libc-bin CVE-2020-6096 低危 2.27-3ubuntu1 2.27-3ubuntu1.5 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22

libncurses5 CVE-2019-17594 低危 6.1-1ubuntu1.18.04 6.1-1ubuntu1.18.04.1 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:b187ff70b2e47a4cf3d735dd04b4309cb3004c3069846969716b7f804a01576b

发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43

Java (jar)
低危漏洞:15 中危漏洞:79 高危漏洞:68 严重漏洞:10
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.alibaba:fastjson CVE-2026-16723 严重 1.2.83 fastjson has a remote code execution (RCE) vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16723

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-23 09:16 修改: 2026-07-23 15:01

io.undertow:undertow-core CVE-2022-4492 严重 2.2.19.Final 2.3.5.Final, 2.2.24.Final undertow: Server identity in https connection is not checked by the undertow client

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4492

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:21

io.undertow:undertow-core CVE-2025-12543 严重 2.2.19.Final 2.3.21.Final, 2.2.39.Final undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12543

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-01-07 17:15 修改: 2026-08-19 12:16

org.apache.maven.shared:maven-shared-utils CVE-2022-29599 严重 3.2.1 3.3.3 maven-shared-utils: Command injection via Commandline class

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29599

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-05-23 11:16 修改: 2026-06-17 04:40

org.postgresql:postgresql CVE-2024-1597 严重 42.2.14 42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2 pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1597

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-02-19 13:15 修改: 2026-06-17 07:04

org.scala-lang:scala-library CVE-2022-36944 严重 2.13.3 2.13.9 scala: deserialization gadget chain

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36944

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-09-23 18:15 修改: 2026-06-17 04:54

org.springframework.boot:spring-boot-actuator-autoconfigure CVE-2023-20873 严重 2.7.4 3.0.6, 2.7.11, 2.6.15, 2.5.15 spring-boot: Security Bypass With Wildcard Pattern Matching on Cloud Foundry

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20873

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-04-20 21:15 修改: 2026-06-17 05:31

org.springframework:spring-web CVE-2016-1000027 严重 5.3.23 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42

org.springframework:spring-webmvc CVE-2023-20860 严重 5.3.23 6.0.7, 5.3.26 springframework: Security Bypass With Un-Prefixed Double Wildcard Pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20860

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-03-27 22:15 修改: 2026-06-17 05:31

tech.powerjob:powerjob-common CVE-2023-37754 严重 4.3.3 Code injection in PowerJob

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37754

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-07-28 15:15 修改: 2026-06-17 06:08

com.h2database:h2 CVE-2022-45868 高危 2.1.214 2.2.220 The web-based admin console in H2 Database Engine before 2.2.220 can b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45868

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-11-23 21:15 修改: 2026-06-17 05:10

com.squareup.okhttp3:okhttp CVE-2021-0341 高危 3.14.9 4.9.2 okhttp: information disclosure via improperly used cryptographic function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-0341

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2021-02-10 17:15 修改: 2026-06-17 03:29

commons-io:commons-io CVE-2024-47554 高危 2.11.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57

io.micrometer:micrometer-core CVE-2026-40984 高危 1.9.4 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-08-13 13:18

io.netty:netty-codec CVE-2026-42583 高危 4.1.86.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec CVE-2026-59901 高危 4.1.86.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29

io.netty:netty-codec-dns CVE-2026-42579 高危 4.1.86.Final 4.2.13.Final, 4.1.133.Final netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http CVE-2026-33870 高危 4.1.86.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18

io.netty:netty-codec-http CVE-2026-42584 高危 4.1.86.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http CVE-2026-42587 高危 4.1.86.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http CVE-2026-55831 高危 4.1.86.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17

io.netty:netty-codec-http CVE-2026-55833 高危 4.1.86.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34

io.netty:netty-codec-http CVE-2026-56745 高危 4.1.86.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46

io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.86.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41

io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.86.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-03-27 20:16 修改: 2026-08-18 12:18

io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.86.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.86.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46

io.netty:netty-codec-http2 GHSA-xpw8-rcwv-8f8p 高危 4.1.86.Final 4.1.100.Final io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08

io.netty:netty-handler CVE-2026-44249 高危 4.1.86.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-11 22:16 修改: 2026-08-17 12:18

io.netty:netty-handler CVE-2026-45416 高危 4.1.86.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-12 15:16 修改: 2026-08-17 12:18

io.netty:netty-handler CVE-2026-50010 高危 4.1.86.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-12 16:16 修改: 2026-08-17 12:18

io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.86.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-12 15:16 修改: 2026-08-13 13:19

io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.86.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-12 16:16 修改: 2026-08-13 13:19

ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.11 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.11 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

io.undertow:undertow-core CVE-2023-1108 高危 2.2.19.Final 2.3.5.Final, 2.2.24.Final Undertow: Infinite loop in SslConduit during close

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1108

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-09-14 15:15 修改: 2026-06-17 05:27

io.undertow:undertow-core CVE-2023-4639 高危 2.2.19.Final 2.3.11.Final, 2.2.30.Final undertow: Cookie Smuggling/Spoofing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4639

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-11-17 11:15 修改: 2026-06-17 06:38

io.undertow:undertow-core CVE-2024-1635 高危 2.2.19.Final 2.3.12.Final, 2.2.31.Final undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1635

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-02-19 22:15 修改: 2026-08-04 18:16

io.undertow:undertow-core CVE-2024-3884 高危 2.2.19.Final 2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final undertow: OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3884

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-12-03 19:15 修改: 2026-08-19 08:17

io.undertow:undertow-core CVE-2024-4027 高危 2.2.19.Final 2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final undertow: OutOfMemoryError in HttpServletRequestImpl.getParameterNames() can cause remote DoS attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4027

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-01-30 15:16 修改: 2026-08-05 13:17

io.undertow:undertow-core CVE-2024-5971 高危 2.2.19.Final 2.3.15.Final, 2.2.34.Final undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5971

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-07-08 21:15 修改: 2026-08-08 17:16

io.undertow:undertow-core CVE-2024-6162 高危 2.2.19.Final 2.3.14.Final, 2.2.33.Final undertow: url-encoded request path information can be broken on ajp-listener

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6162

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-06-20 15:15 修改: 2026-06-17 08:17

io.undertow:undertow-core CVE-2024-7885 高危 2.2.19.Final 2.2.36.Final, 2.3.17.Final undertow: Improper State Management in Proxy Protocol parsing causes information leakage

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7885

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-08-21 14:15 修改: 2026-08-07 10:16

io.undertow:undertow-core CVE-2025-9784 高危 2.2.19.Final 2.2.38.Final, 2.3.20.Final undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9784

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-09-02 14:15 修改: 2026-08-19 08:17

mysql:mysql-connector-java CVE-2023-22102 高危 8.0.30 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.14.0-rc1 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

org.bouncycastle:bcpg-jdk15on CVE-2026-3505 高危 1.64 bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3505

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-04-15 10:16 修改: 2026-08-18 12:18

org.codehaus.plexus:plexus-utils CVE-2025-67030 高危 3.5.1 4.0.3, 3.6.1 org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67030

镜像层: sha256:cbc4d43b53c384ea858637584a0d0e3b46bd082ac4e106b82a2951dea5a4953f

发布日期: 2026-03-25 18:16 修改: 2026-07-21 12:17

org.eclipse.jgit:org.eclipse.jgit CVE-2023-4759 高危 5.7.0.202003110725-r 6.6.1.202309021850-r, 5.13.3.202401111512-r jgit: arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4759

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-09-12 10:15 修改: 2026-06-17 06:38

org.hibernate:hibernate-core CVE-2026-0603 高危 5.6.11.Final org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0603

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-01-23 07:15 修改: 2026-08-19 12:17

org.jboss.xnio:xnio-api CVE-2023-5685 高危 3.8.7.Final 3.8.14.Final xnio: StackOverflowException when the chain of notifier states becomes problematically big

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5685

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-03-22 19:15 修改: 2026-06-17 06:49

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.14.0-rc1 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30

org.postgresql:postgresql CVE-2022-21724 高危 42.2.14 42.2.25, 42.3.2 jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21724

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-02-02 12:15 修改: 2026-06-17 04:26

org.postgresql:postgresql CVE-2022-31197 高危 42.2.14 42.2.26, 42.4.1, 42.3.7 postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31197

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-08-03 19:15 修改: 2026-06-17 04:45

org.postgresql:postgresql CVE-2026-42198 高危 42.2.14 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-04-29 16:16 修改: 2026-08-18 12:19

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.14.0-rc1 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

org.springframework.boot:spring-boot CVE-2025-22235 高危 2.7.4 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45

org.springframework.boot:spring-boot CVE-2026-40973 高危 2.7.4 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.14.0-rc1 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19

org.springframework.boot:spring-boot-autoconfigure CVE-2023-20883 高危 2.7.4 3.0.7, 2.7.12, 2.6.15, 2.5.15 spring-boot: Spring Boot Welcome Page DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31

org.springframework.data:spring-data-commons CVE-2026-41716 高危 2.7.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-mongodb CVE-2026-41717 高危 3.4.3 5.0.6, 4.5.12 Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41717

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework:spring-core CVE-2025-41249 高危 5.3.23 6.2.11 org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22

org.springframework:spring-expression CVE-2023-20863 高危 5.3.23 6.0.8, 5.3.27, 5.2.24.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2026-41849 高危 5.3.23 spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41849

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-expression CVE-2026-41850 高危 5.3.23 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

com.google.protobuf:protobuf-java CVE-2022-3509 高危 3.19.4 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Textformat parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

org.springframework:spring-web CVE-2024-22243 高危 5.3.23 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22259 高危 5.3.23 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22262 高危 5.3.23 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11

com.google.protobuf:protobuf-java CVE-2022-3510 高危 3.19.4 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Message-Type Extensions parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

org.springframework:spring-webmvc CVE-2024-38816 高危 5.3.23 6.1.13 spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38816

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-09-13 06:15 修改: 2026-06-17 07:41

org.springframework:spring-webmvc CVE-2024-38819 高危 5.3.23 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41

org.springframework:spring-webmvc CVE-2026-41842 高危 5.3.23 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41845 高危 5.3.23 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.yaml:snakeyaml CVE-2022-1471 高危 1.30 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22

org.yaml:snakeyaml CVE-2022-25857 高危 1.30 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34

com.google.protobuf:protobuf-java CVE-2024-7254 高危 3.19.4 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19

io.undertow:undertow-core CVE-2024-1459 中危 2.2.19.Final 2.2.31.Final, 2.3.12.Final undertow: directory traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1459

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-02-12 21:15 修改: 2026-08-04 22:17

io.undertow:undertow-core CVE-2024-3653 中危 2.2.19.Final 2.3.15.Final, 2.2.34.Final undertow: LearningPushHandler can lead to remote memory DoS attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3653

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-07-08 22:15 修改: 2026-08-05 00:16

io.vertx:vertx-core CVE-2024-1300 中危 4.3.7 4.4.8, 4.5.3 io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1300

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-04-02 08:15 修改: 2026-08-04 20:16

io.vertx:vertx-core CVE-2026-1002 中危 4.3.7 4.5.24, 5.0.7 io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1002

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-01-15 21:16 修改: 2026-06-17 10:14

io.vertx:vertx-core CVE-2026-6860 中危 4.3.7 4.5.27, 5.0.12 eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6860

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-06 10:16 修改: 2026-06-17 11:01

io.vertx:vertx-web CVE-2023-24815 中危 4.3.7 4.3.8 vertx-web: StaticHandler disclosure of classpath resources on Windows when mounted on a wildcard route

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24815

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-02-09 18:15 修改: 2026-06-17 05:39

io.vertx:vertx-web CVE-2025-11965 中危 4.3.7 4.5.22, 5.0.5 io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11965

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-10-22 15:15 修改: 2026-06-17 08:31

io.netty:netty-codec-http CVE-2026-59898 中危 4.1.86.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35

net.lingala.zip4j:zip4j CVE-2023-22899 中危 2.11.2 2.11.3 zip4j: does not always check the MAC when decrypting a ZIP archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22899

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-01-10 02:15 修改: 2026-06-17 05:36

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.12.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:cbc4d43b53c384ea858637584a0d0e3b46bd082ac4e106b82a2951dea5a4953f

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.12.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.17.2 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03

io.netty:netty-codec-http CVE-2026-59899 中危 4.1.86.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25

io.netty:netty-codec-http CVE-2026-59903 中危 4.1.86.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16

org.bouncycastle:bcpkix-jdk15on CVE-2025-8916 中危 1.64 1.79 org.bouncycastle: BouncyCastle denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07

org.bouncycastle:bcpkix-jdk15on CVE-2026-5588 中危 1.64 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:19

io.netty:netty-codec-http CVE-2026-59921 中危 4.1.86.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05

commons-net:commons-net CVE-2021-37533 中危 3.8.0 3.9.0 apache-commons-net: FTP client trusts the host from PASV response by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00

org.eclipse.jgit:org.eclipse.jgit CVE-2025-4949 中危 5.7.0.202003110725-r 7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r org.eclipse.jgit: XXE vulnerability in Eclipse JGit

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4949

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-05-21 07:16 修改: 2026-06-17 09:34

org.glassfish:javax.el CVE-2021-28170 中危 3.0.0 jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28170

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2021-05-26 22:15 修改: 2026-06-17 03:45

com.google.guava:guava CVE-2023-2976 中危 31.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53

ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.11 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.11 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00

io.netty:netty-codec CVE-2025-58057 中危 4.1.86.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43

io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.86.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54

io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.86.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-12 16:16 修改: 2026-08-13 13:19

org.postgresql:postgresql CVE-2022-41946 中危 42.2.14 42.2.27, 42.3.8, 42.4.3, 42.5.1 postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41946

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-11-23 20:15 修改: 2026-06-17 05:04

org.postgresql:postgresql GHSA-673j-qm5f-xpv8 中危 42.2.14 42.3.3 pgjdbc Arbitrary File Write Vulnerability

漏洞详情: https://github.com/advisories/GHSA-673j-qm5f-xpv8

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-02-16 00:08 修改: 2024-01-22 19:35

io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.86.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.86.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29

io.netty:netty-common CVE-2024-47535 中危 4.1.86.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57

org.springframework.boot:spring-boot-actuator CVE-2023-34055 中危 2.7.4 2.7.18, 3.0.13, 3.1.6 spring-boot: org.springframework.boot: spring-boot-actuator class vulnerable to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34055

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-11-28 09:15 修改: 2026-06-17 06:02

io.netty:netty-common CVE-2025-25193 中危 4.1.86.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00

com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.14.0-rc1 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05

io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.86.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18

org.springframework.data:spring-data-commons CVE-2026-41711 中危 2.7.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-commons CVE-2026-41721 中危 2.7.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

com.google.protobuf:protobuf-java CVE-2022-3171 中危 3.19.4 3.21.7, 3.20.3, 3.19.6, 3.16.3 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58

org.springframework.data:spring-data-mongodb CVE-2026-41696 中危 3.4.3 5.0.6, 4.5.12 org.springframework.data/spring-data-mongodb: Spring Data MongoDB: Information disclosure via insufficient regex parameter validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41696

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework:spring-context CVE-2024-38820 中危 5.3.23 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

io.netty:netty-handler CVE-2023-34462 中危 4.1.86.Final 4.1.94.Final netty: SniHandler 16MB allocation leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.14.0-rc1 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.14.0-rc1 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.86.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

org.springframework:spring-expression CVE-2023-20861 中危 5.3.23 6.0.7, 5.3.26, 5.2.23.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2024-38808 中危 5.3.23 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41

org.springframework:spring-expression CVE-2026-41851 中危 5.3.23 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

com.squareup.okio:okio CVE-2023-3635 中危 1.17.2 3.4.0, 1.17.6 okio: GzipSource class improper exception handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14

com.sun.mail:jakarta.mail CVE-2025-7962 中危 1.6.7 1.6.8, 2.0.2 com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7962

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-07-21 18:15 修改: 2026-06-23 12:16

com.google.guava:guava CVE-2023-2976 中危 31.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:cbc4d43b53c384ea858637584a0d0e3b46bd082ac4e106b82a2951dea5a4953f

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53

io.netty:netty-codec-http CVE-2024-29025 中危 4.1.86.Final 4.1.108.Final netty-codec-http: Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22

org.springframework:spring-web CVE-2024-38809 中危 5.3.23 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41

org.springframework:spring-web CVE-2024-38820 中危 5.3.23 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

io.netty:netty-codec-http CVE-2025-67735 中危 4.1.86.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58

io.netty:netty-codec-http CVE-2026-41417 中危 4.1.86.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46

io.netty:netty-codec-http CVE-2026-42580 中危 4.1.86.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42581 中危 4.1.86.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http CVE-2026-42585 中危 4.1.86.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

org.springframework:spring-webmvc CVE-2024-38828 中危 5.3.23 5.3.42 org.springframework:spring-webmvc: DoS via Spring MVC controller method with byte[] parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38828

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-11-18 04:15 修改: 2026-06-17 07:41

org.springframework:spring-webmvc CVE-2025-41242 中危 5.3.23 6.2.10 org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41242

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-08-18 09:15 修改: 2026-06-17 09:22

org.springframework:spring-webmvc CVE-2026-22737 中危 5.3.23 7.0.6, 6.2.17 Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20

org.springframework:spring-webmvc CVE-2026-22745 中危 5.3.23 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

org.springframework:spring-webmvc CVE-2026-41841 中危 5.3.23 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41843 中危 5.3.23 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41844 中危 5.3.23 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41846 中危 5.3.23 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41853 中危 5.3.23 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-websocket CVE-2025-41254 中危 5.3.23 6.2.12 org.springframework/spring-core: Spring Framework STOMP CSRF Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41254

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-10-16 15:15 修改: 2026-06-17 09:22

org.springframework:spring-websocket CVE-2026-41838 中危 5.3.23 7.0.8, 6.2.19 IDs for WebSocket sessions in the spring-websocket module are not cryp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41838

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

io.netty:netty-codec-http CVE-2026-50020 中危 4.1.86.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-codec-http CVE-2026-56746 中危 4.1.86.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47

org.yaml:snakeyaml CVE-2022-38749 中危 1.30 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38750 中危 1.30 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38751 中危 1.30 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38752 中危 1.30 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-41854 中危 1.30 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03

io.undertow:undertow-core CVE-2023-1973 中危 2.2.19.Final 2.2.32.Final, 2.3.13.Final undertow: unrestricted request storage leads to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1973

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-11-07 10:15 修改: 2026-06-17 05:29

tech.powerjob:powerjob-common CVE-2025-14518 中危 4.3.3 PowerJob has a server-side request forgery vulnerability in PingPongUtils.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14518

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-12-11 15:15 修改: 2026-06-17 08:36

tech.powerjob:powerjob-server-starter CVE-2025-11581 中危 4.3.3 PowerJob OpenAPIController is missing authorization

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11581

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-10-10 19:15 修改: 2026-06-17 08:30

ch.qos.logback:logback-core CVE-2026-10532 低危 1.2.11 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10

org.springframework:spring-webmvc CVE-2026-22735 低危 5.3.23 7.0.6, 6.2.17 org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20

org.springframework:spring-webmvc CVE-2026-22741 低危 5.3.23 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

io.netty:netty-codec-http CVE-2025-58056 低危 4.1.86.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43

io.vertx:vertx-web CVE-2025-11966 低危 4.3.7 4.5.22, 5.0.5 io.vertx/vertx-web: Eclipse Vert.x cross site scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11966

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-10-22 15:15 修改: 2026-06-17 08:31

com.google.guava:guava CVE-2020-8908 低危 31.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:cbc4d43b53c384ea858637584a0d0e3b46bd082ac4e106b82a2951dea5a4953f

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27

io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.86.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

com.google.guava:guava CVE-2020-8908 低危 31.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27

org.springframework:spring-expression CVE-2026-41852 低危 5.3.23 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.postgresql:postgresql CVE-2022-26520 低危 42.2.14 42.3.3 postgresql-jdbc: Arbitrary File Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26520

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2022-03-10 17:47 修改: 2026-06-17 04:35

ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.11 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

ch.qos.logback:logback-core CVE-2026-9828 低危 1.2.11 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

org.springframework:spring-context CVE-2025-22233 低危 5.3.23 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45

ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.11 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00

org.springframework:spring-core CVE-2026-41848 低危 5.3.23 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:a6fe3c574ce6a43c583bcbd13365fbb2b1f71fc81bc8d615f38bc6a77fea3053

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×