docker.io/tomcat:9.0.119-jre8-temurin-jammy linux/amd64

docker.io/tomcat:9.0.119-jre8-temurin-jammy - Trivy安全扫描结果 扫描时间: 2026-07-03 18:59
全部漏洞信息
低危漏洞:28 中危漏洞:29 高危漏洞:0 严重漏洞:0

系统OS: ubuntu 22.04 扫描引擎: Trivy 扫描时间: 2026-07-03 18:59

docker.io/tomcat:9.0.119-jre8-temurin-jammy (ubuntu 22.04) (ubuntu)
低危漏洞:28 中危漏洞:29 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-27456 中危 1:2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

curl CVE-2026-11856 中危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-8925 中危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-8927 中危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libblkid1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

libc-bin CVE-2026-4046 中危 2.35-0ubuntu3.13 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55

libc-bin CVE-2026-5435 中危 2.35-0ubuntu3.13 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59

libc-bin CVE-2026-6238 中危 2.35-0ubuntu3.13 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17

libc6 CVE-2026-4046 中危 2.35-0ubuntu3.13 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55

libc6 CVE-2026-5435 中危 2.35-0ubuntu3.13 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59

libc6 CVE-2026-6238 中危 2.35-0ubuntu3.13 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17

libcurl4 CVE-2026-11856 中危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4 CVE-2026-8925 中危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4 CVE-2026-8927 中危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libexpat1 CVE-2025-66382 中危 2.4.7-1ubuntu0.7 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

libmount1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

libp11-kit0 CVE-2026-13757 中危 0.24.0-6build1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-29 19:16 修改: 2026-07-01 15:16

libpng16-16 CVE-2026-40930 中危 1.6.37-3ubuntu0.5 LIBPNG is a reference library for use in applications that process PNG ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40930

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 2026-06-04 16:16 修改: 2026-06-17 10:45

libsmartcols1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

libuuid1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

locales CVE-2026-4046 中危 2.35-0ubuntu3.13 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55

locales CVE-2026-5435 中危 2.35-0ubuntu3.13 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59

locales CVE-2026-6238 中危 2.35-0ubuntu3.13 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17

mount CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

p11-kit CVE-2026-13757 中危 0.24.0-6build1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 2026-06-29 19:16 修改: 2026-07-01 15:16

p11-kit-modules CVE-2026-13757 中危 0.24.0-6build1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 2026-06-29 19:16 修改: 2026-07-01 15:16

tar CVE-2025-45582 中危 1.34+dfsg-1ubuntu0.1.22.04.3 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25

util-linux CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27

wget CVE-2021-31879 中危 1.21.2-2ubuntu1.1 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52

libncurses6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libncursesw6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

curl CVE-2026-12064 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libpcre2-8-0 CVE-2022-41409 低危 10.39-3ubuntu0.1 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03

libpcre3 CVE-2017-11164 低危 2:8.39-13ubuntu0.22.04.1 pcre: OP_KETRMAX feature in the match function in pcre_exec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2017-07-11 03:29 修改: 2026-06-17 01:01

curl CVE-2026-8286 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-8458 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libstdc++6 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libsystemd0 CVE-2026-40228 低危 249.11-0ubuntu3.21 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libtinfo6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libudev1 CVE-2026-40228 低危 249.11-0ubuntu3.21 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

curl CVE-2026-8924 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libzstd1 CVE-2022-4899 低危 1.4.8+dfsg-3build1 zstd: mysql: buffer overrun in util.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22

libcurl4 CVE-2026-12064 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4 CVE-2026-8286 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libcurl4 CVE-2026-8458 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

login CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

login CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libcurl4 CVE-2026-8924 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

ncurses-base CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

ncurses-bin CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libcurl4 CVE-2026-9547 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-9547 低危 7.81.0-1ubuntu1.25

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:fcc349ab186b844d05e8cc2e903d8c9559a77f394921cea888de9f3cc7de67e3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

passwd CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

passwd CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libgcc-s1 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libgcrypt20 CVE-2024-2236 低危 1.9.4-3ubuntu3.2 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24

gcc-12-base CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

Java (jar)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×