docker.io/vulhub/fastjson:1.2.45 linux/amd64

docker.io/vulhub/fastjson:1.2.45 - Trivy安全扫描结果扫描时间: 2026-08-11 13:42

全部漏洞信息

低危漏洞:77

中危漏洞:228

高危漏洞:267

严重漏洞:109

系统OS: debian 8.6 扫描引擎: Trivy 扫描时间: 2026-08-11 13:42

docker.io/vulhub/fastjson:1.2.45 (debian 8.6) (debian)

低危漏洞:66

中危漏洞:184

高危漏洞:182

严重漏洞:87

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
bzip2	CVE-2019-12900	严重	1.0.6-7+b3	1.0.6-7+deb8u1	bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900 镜像层: sha256:0de9d866d419b5c7a38e6d60b8eca9eedfb5fee763834c9ec3cbfaae6a056a80 发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15
curl	CVE-2016-7167	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: escape and unescape integer overflows 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7167 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-10-07 14:59 修改: 2026-06-17 00:52
curl	CVE-2016-8618	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Double-free in curl_maprintf 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8618 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 21:29 修改: 2026-06-17 00:54
curl	CVE-2016-8619	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Double-free in krb5 code 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8619 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
curl	CVE-2016-8620	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Glob parser write/read out of bounds 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8620 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
curl	CVE-2016-8622	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: URL unescape heap overflow via integer truncation 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8622 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 21:29 修改: 2026-06-17 00:54
curl	CVE-2017-1000257	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u7	curl: IMAP FETCH response out of bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000257 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-31 21:29 修改: 2026-06-17 00:59
curl	CVE-2017-8816	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u8	curl: NTLM buffer overflow via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8816 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-11-29 18:29 修改: 2026-06-17 01:27
curl	CVE-2017-8817	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u8	curl: FTP wildcard out of bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8817 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-11-29 18:29 修改: 2026-06-17 01:27
curl	CVE-2018-1000007	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u9	curl: HTTP authentication leak in redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000007 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-01-24 22:29 修改: 2026-06-17 01:32
curl	CVE-2018-1000120	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u10	curl: FTP path trickery leads to NIL byte out of bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000120 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-14 18:29 修改: 2026-06-17 01:32
curl	CVE-2018-1000122	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u10	curl: RTSP RTP buffer over-read 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000122 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-14 18:29 修改: 2026-06-17 01:32
curl	CVE-2018-1000301	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u11	curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000301 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-05-24 13:29 修改: 2026-06-17 01:32
curl	CVE-2018-14618	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u12	curl: NTLM password overflow via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14618 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-09-05 19:29 修改: 2026-06-17 01:41
curl	CVE-2018-16839	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message() 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16839 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-10-31 18:29 修改: 2026-06-17 01:44
curl	CVE-2018-16842	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: Heap-based buffer over-read in the curl tool warning formatting 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16842 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-10-31 19:29 修改: 2026-06-17 01:44
curl	CVE-2019-3822	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u14	curl: NTLMv2 type-3 header stack buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3822 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-02-06 20:29 修改: 2026-06-17 02:35
curl	CVE-2019-5482	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u16	curl: heap buffer overflow in function tftp_receive_packet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5482 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-09-16 19:15 修改: 2026-06-17 02:37
inetutils-ping	CVE-2020-10188	严重	2:1.9.2.39.3a460-3	2:1.9.2.39.3a460-3+deb8u1	telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10188 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-03-06 15:15 修改: 2026-06-17 02:47
libbz2-1.0	CVE-2019-12900	严重	1.0.6-7+b3	1.0.6-7+deb8u1	bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15
libcurl3	CVE-2016-7167	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: escape and unescape integer overflows 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7167 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-10-07 14:59 修改: 2026-06-17 00:52
libcurl3	CVE-2016-8618	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Double-free in curl_maprintf 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8618 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 21:29 修改: 2026-06-17 00:54
libcurl3	CVE-2016-8619	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Double-free in krb5 code 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8619 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
libcurl3	CVE-2016-8620	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Glob parser write/read out of bounds 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8620 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
libcurl3	CVE-2016-8622	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: URL unescape heap overflow via integer truncation 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8622 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 21:29 修改: 2026-06-17 00:54
libcurl3	CVE-2017-1000257	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u7	curl: IMAP FETCH response out of bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000257 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-31 21:29 修改: 2026-06-17 00:59
libcurl3	CVE-2017-8816	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u8	curl: NTLM buffer overflow via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8816 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-11-29 18:29 修改: 2026-06-17 01:27
libcurl3	CVE-2017-8817	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u8	curl: FTP wildcard out of bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8817 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-11-29 18:29 修改: 2026-06-17 01:27
libcurl3	CVE-2018-1000007	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u9	curl: HTTP authentication leak in redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000007 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-01-24 22:29 修改: 2026-06-17 01:32
libcurl3	CVE-2018-1000120	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u10	curl: FTP path trickery leads to NIL byte out of bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000120 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-14 18:29 修改: 2026-06-17 01:32
libcurl3	CVE-2018-1000122	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u10	curl: RTSP RTP buffer over-read 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000122 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-14 18:29 修改: 2026-06-17 01:32
libcurl3	CVE-2018-1000301	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u11	curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000301 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-05-24 13:29 修改: 2026-06-17 01:32
libcurl3	CVE-2018-14618	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u12	curl: NTLM password overflow via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14618 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-09-05 19:29 修改: 2026-06-17 01:41
libcurl3	CVE-2018-16839	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message() 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16839 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-10-31 18:29 修改: 2026-06-17 01:44
libcurl3	CVE-2018-16842	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: Heap-based buffer over-read in the curl tool warning formatting 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16842 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-10-31 19:29 修改: 2026-06-17 01:44
libcurl3	CVE-2019-3822	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u14	curl: NTLMv2 type-3 header stack buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3822 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-02-06 20:29 修改: 2026-06-17 02:35
libcurl3	CVE-2019-5482	严重	7.38.0-4+deb8u4	7.38.0-4+deb8u16	curl: heap buffer overflow in function tftp_receive_packet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5482 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-09-16 19:15 修改: 2026-06-17 02:37
libexpat1	CVE-2016-9063	严重	2.1.0-6+deb8u3	2.1.0-6+deb8u4	firefox: Possible integer overflow to fix inside XML_Parse in Expat 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9063 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-06-11 21:29 修改: 2026-06-17 00:55
libfreetype6	CVE-2015-9290	严重	2.5.2-3+deb8u1	2.5.2-3+deb8u3	freetype: buffer over-read in function T1_Get_Private_Dict in type1/t1parse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9290 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-07-30 13:15 修改: 2024-11-21 02:40
libfreetype6	CVE-2017-8105	严重	2.5.2-3+deb8u1	2.5.2-3+deb8u2	freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8105 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-04-24 18:59 修改: 2026-06-17 01:25
libfreetype6	CVE-2017-8287	严重	2.5.2-3+deb8u1	2.5.2-3+deb8u2	freetype: heap-based buffer overflow related to the t1_builder_close_contour function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8287 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-04-27 00:59 修改: 2026-06-17 01:26
libgnutls-deb0-28	CVE-2017-5334	严重	3.3.8-6+deb8u3	3.3.8-6+deb8u5	gnutls: Double-free while decoding crafted X.509 certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5334 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-03-24 15:59 修改: 2026-06-17 01:20
libgnutls-deb0-28	CVE-2017-5336	严重	3.3.8-6+deb8u3	3.3.8-6+deb8u5	gnutls: Stack overflow in cdk_pk_get_keyid 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5336 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-03-24 15:59 修改: 2026-06-17 01:20
libgnutls-deb0-28	CVE-2017-5337	严重	3.3.8-6+deb8u3	3.3.8-6+deb8u5	gnutls: Heap read overflow in read-packet.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5337 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-03-24 15:59 修改: 2026-06-17 01:20
libicu52	CVE-2014-9911	严重	52.1-8+deb8u3	52.1-8+deb8u4	icu: stack-based buffer overflow in uloc_getDisplayName 漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9911 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-01-04 20:59 修改: 2026-05-06 22:30
libicu52	CVE-2016-6293	严重	52.1-8+deb8u3	52.1-8+deb8u4	icu: Out-of-bounds access in uloc_acceptLanguageFromHTTP 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6293 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-07-25 14:59 修改: 2026-06-17 00:50
libicu52	CVE-2016-7415	严重	52.1-8+deb8u3	52.1-8+deb8u4	icu: Stack based buffer overflow in locid.cpp 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7415 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-09-17 21:59 修改: 2026-06-17 00:53
libicu52	CVE-2017-14952	严重	52.1-8+deb8u3	52.1-8+deb8u6	icu: Double free in i18n/zonemeta.cpp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14952 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-16 16:29 修改: 2026-06-17 01:07
libidn11	CVE-2017-14062	严重	1.29-1+deb8u2	1.29-1+deb8u3	libidn2: Integer overflow in puny_decode.c/decode_digit 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14062 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-08-31 16:29 修改: 2026-06-17 01:05
libncurses5	CVE-2017-10684	严重	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
libncurses5	CVE-2017-10685	严重	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2017-10684	严重	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2017-10685	严重	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
libnss3	CVE-2017-5461	严重	2:3.26-1+debu8u1	2:3.26-1+debu8u2	nss: Write beyond bounds caused by bugs in Base64 de/encoding in nssb64d.c and nssb64e.c (MFSA 2017-10) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5461 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-05-11 01:29 修改: 2026-06-17 01:20
libnss3	CVE-2019-17006	严重	2:3.26-1+debu8u1	2:3.26-1+debu8u10	nss: Check length of inputs for cryptographic primitives 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-10-22 21:15 修改: 2026-06-17 02:23
libprocps3	CVE-2018-1126	严重	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1126 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 13:29 修改: 2026-06-17 01:50
librtmp1	CVE-2015-8271	严重	2.4+20150115.gita107cef-1	2.4+20150115.gita107cef-1+deb8u1	The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTM ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8271 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-04-13 14:59 修改: 2026-05-13 00:24
libsqlite3-0	CVE-2017-10989	严重	3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u4	sqlite: Heap-buffer overflow in the getNodeSize function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10989 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-07-07 12:29 修改: 2026-06-17 01:01
libsqlite3-0	CVE-2017-2518	严重	3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u4	An issue was discovered in certain Apple products. iOS before 10.3.2 i ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2518 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-05-22 05:29 修改: 2026-06-17 01:16
libsqlite3-0	CVE-2017-2519	严重	3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u4	An issue was discovered in certain Apple products. iOS before 10.3.2 i ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2519 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-05-22 05:29 修改: 2026-06-17 01:16
libsqlite3-0	CVE-2017-2520	严重	3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u4	An issue was discovered in certain Apple products. iOS before 10.3.2 i ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2520 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-05-22 05:29 修改: 2026-06-17 01:16
libsqlite3-0	CVE-2019-8457	严重	3.8.7.1-1+deb8u2		sqlite: heap out-of-bound read in function rtreenode() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42
libssh2-1	CVE-2019-3858	严重	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u2	libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3858 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-03-21 21:29 修改: 2026-06-17 02:35
libssh2-1	CVE-2019-3859	严重	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u4	libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3859 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:35
libssh2-1	CVE-2019-3860	严重	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u5	libssh2: Out-of-bounds reads with specially crafted SFTP packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3860 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-03-25 19:29 修改: 2026-06-17 02:35
libssh2-1	CVE-2019-3861	严重	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u2	libssh2: Out-of-bounds reads with specially crafted SSH packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3861 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-03-25 19:29 修改: 2026-06-17 02:35
libssh2-1	CVE-2019-3862	严重	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u2	libssh2: Out-of-bounds memory comparison with specially crafted message channel request 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3862 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:35
libtinfo5	CVE-2017-10684	严重	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2017-10685	严重	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
libx11-6	CVE-2018-14599	严重	2:1.6.2-3	2:1.6.2-3+deb8u2	libX11: Off-by-one error in XListExtensions in ListExt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14599 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41
libx11-6	CVE-2018-14600	严重	2:1.6.2-3	2:1.6.2-3+deb8u2	libX11: Out of Bounds write in XListExtensions in ListExt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14600 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41
libx11-data	CVE-2018-14599	严重	2:1.6.2-3	2:1.6.2-3+deb8u2	libX11: Off-by-one error in XListExtensions in ListExt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14599 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41
libx11-data	CVE-2018-14600	严重	2:1.6.2-3	2:1.6.2-3+deb8u2	libX11: Out of Bounds write in XListExtensions in ListExt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14600 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41
login	CVE-2017-12424	严重	1:4.2-3+deb8u1		shadow-utils: Buffer overflow via newusers tool 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12424 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-04 09:29 修改: 2026-06-17 01:03
ncurses-base	CVE-2017-10684	严重	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-10685	严重	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-10684	严重	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-10685	严重	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-29 23:29 修改: 2026-07-23 18:58
passwd	CVE-2017-12424	严重	1:4.2-3+deb8u1		shadow-utils: Buffer overflow via newusers tool 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12424 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-04 09:29 修改: 2026-06-17 01:03
perl-base	CVE-2017-12883	严重	5.20.2-3+deb8u6	5.20.2-3+deb8u9	perl: Buffer over-read in regular expression parser 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12883 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-09-19 18:29 修改: 2026-06-17 01:04
perl-base	CVE-2018-18311	严重	5.20.2-3+deb8u6	5.20.2-3+deb8u12	perl: Integer overflow leading to buffer overflow in Perl_my_setenv() 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18311 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-12-07 21:29 修改: 2026-06-17 01:46
perl-base	CVE-2018-6797	严重	5.20.2-3+deb8u6		perl: heap write overflow in regcomp.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6797 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-04-17 20:29 修改: 2026-06-17 02:02
perl-base	CVE-2018-6913	严重	5.20.2-3+deb8u6	5.20.2-3+deb8u10	perl: heap buffer overflow in pp_pack.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6913 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-04-17 20:29 修改: 2026-06-17 02:02
procps	CVE-2018-1126	严重	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1126 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 13:29 修改: 2026-06-17 01:50
wget	CVE-2019-5953	严重	1.16-1+deb8u1	1.16-1+deb8u6	wget: do_conversion() heap-based buffer overflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5953 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-05-17 16:29 修改: 2026-06-17 02:38
zlib1g	CVE-2016-9841	严重	1:1.2.8.dfsg-2+b1	1:1.2.8.dfsg-2+deb8u1	zlib: Out-of-bounds pointer arithmetic in inffast.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9841 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-05-23 04:29 修改: 2026-07-14 12:16
zlib1g	CVE-2016-9843	严重	1:1.2.8.dfsg-2+b1	1:1.2.8.dfsg-2+deb8u1	zlib: Big-endian out-of-bounds pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9843 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-05-23 04:29 修改: 2026-06-17 00:56
libexpat1	CVE-2019-15903	高危	2.1.0-6+deb8u3	2.1.0-6+deb8u6	expat: heap-based buffer over-read via crafted XML input 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15903 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-09-04 06:15 修改: 2026-06-17 02:21
libffi6	CVE-2017-1000376	高危	3.1-2+b2	3.1-2+deb8u1	libffi: Requests an executable stack 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000376 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-06-19 16:29 修改: 2026-06-17 00:59
gnupg	CVE-2018-12020	高危	1.4.18-7+deb8u3	1.4.18-7+deb8u5	gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12020 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-06-08 21:29 修改: 2026-06-17 01:37
gpgv	CVE-2018-12020	高危	1.4.18-7+deb8u3	1.4.18-7+deb8u5	gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12020 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-06-08 21:29 修改: 2026-06-17 01:37
bash	CVE-2019-9924	高危	4.3-11+b1	4.3-11+deb8u2	bash: BASH_CMD is writable in restricted bash shells 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9924 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44
libfreetype6	CVE-2015-9381	高危	2.5.2-3+deb8u1	2.5.2-3+deb8u4	freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9381 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-09-03 05:15 修改: 2024-11-21 02:40
libfreetype6	CVE-2016-10244	高危	2.5.2-3+deb8u1	2.5.2-3+deb8u2	freetype: parse_charstrings function in type1/t1load.c does not ensure that a font contains a glyph name 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10244 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-03-06 06:59 修改: 2026-06-17 00:39
libgcc1	CVE-2018-12886	高危	1:4.9.2-10		gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38
libapt-pkg4.12	CVE-2019-3462	高危	1.0.9.8.3	1.0.9.8.5	Incorrect sanitation of the 302 redirect field in HTTP transport metho ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3462 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-28 21:29 修改: 2026-06-17 02:35
libblkid1	CVE-2016-2779	高危	2.25.2-6		util-linux: runuser tty hijack via TIOCSTI ioctl 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
bsdutils	CVE-2016-2779	高危	1:2.25.2-6		util-linux: runuser tty hijack via TIOCSTI ioctl 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
libgnutls-deb0-28	CVE-2016-7444	高危	3.3.8-6+deb8u3	3.3.8-6+deb8u4	gnutls: Incorrect certificate validation when using OCSP responses (GNUTLS-SA-2016-3) 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7444 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-09-27 15:59 修改: 2026-06-17 00:53
libgnutls-deb0-28	CVE-2017-5335	高危	3.3.8-6+deb8u3	3.3.8-6+deb8u5	gnutls: Out of memory while parsing crafted OpenPGP certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5335 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-03-24 15:59 修改: 2026-06-17 01:20
libgnutls-deb0-28	CVE-2017-7507	高危	3.3.8-6+deb8u3	3.3.8-6+deb8u6	gnutls: Crash upon receiving well-formed status_request extension 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7507 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-06-16 19:29 修改: 2026-06-17 01:24
libgnutls-deb0-28	CVE-2017-7869	高危	3.3.8-6+deb8u3	3.3.8-6+deb8u5	gnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7869 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-04-14 04:59 修改: 2026-06-17 01:25
libhogweed2	CVE-2016-6489	高危	2.7.1-5+deb8u1	2.7.1-5+deb8u2	nettle: RSA/DSA code is vulnerable to cache-timing related attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6489 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-04-14 18:59 修改: 2026-06-17 00:51
libc-bin	CVE-2017-1000366	高危	2.19-18+deb8u6	2.19-18+deb8u10	glibc: heap/stack gap jumping via unbounded stack allocations 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000366 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-19 16:29 修改: 2026-06-17 00:59
libc6	CVE-2017-1000366	高危	2.19-18+deb8u6	2.19-18+deb8u10	glibc: heap/stack gap jumping via unbounded stack allocations 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000366 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-19 16:29 修改: 2026-06-17 00:59
libcups2	CVE-2017-18190	高危	1.7.5-11+deb8u1	1.7.5-11+deb8u3	cups: DNS rebinding attacks via incorrect whitelist 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18190 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-02-16 17:29 修改: 2026-06-17 01:12
libcups2	CVE-2018-4180	高危	1.7.5-11+deb8u1	1.7.5-11+deb8u4	cups: Local privilege escalation to root due to insecure environment variable handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4180 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-01-11 18:29 修改: 2026-06-17 01:58
libicu52	CVE-2015-4844	高危	52.1-8+deb8u3	52.1-8+deb8u4	ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042) 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-4844 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2015-10-21 23:59 修改: 2026-05-06 22:30
libicu52	CVE-2016-0494	高危	52.1-8+deb8u3	52.1-8+deb8u4	ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543) 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-0494 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-01-21 03:00 修改: 2026-05-06 22:30
libicu52	CVE-2017-7867	高危	52.1-8+deb8u3	52.1-8+deb8u5	icu: Heap-buffer overflow in utext_setNativeIndex function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7867 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-04-14 04:59 修改: 2026-06-17 01:25
libicu52	CVE-2017-7868	高危	52.1-8+deb8u3	52.1-8+deb8u5	icu: Heap-buffer overflow in utext_moveIndex32 function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7868 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-04-14 04:59 修改: 2026-06-17 01:25
libicu52	CVE-2020-10531	高危	52.1-8+deb8u3	52.1-8+deb8u8	ICU: Integer overflow in UnicodeString::doAppend() 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10531 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2020-03-12 19:15 修改: 2026-06-17 02:47
libcups2	CVE-2018-6553	高危	1.7.5-11+deb8u1	1.7.5-11+deb8u4	cups: AppArmor cupsd Sandbox Bypass Due to Use of Hard Links 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6553 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-08-10 15:29 修改: 2026-06-17 02:02
libjpeg62-turbo	CVE-2016-3616	高危	1:1.3.1-12	1:1.3.1-12+deb8u1	libjpeg: null pointer dereference in cjpeg 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3616 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-02-13 18:59 修改: 2026-06-17 00:46
libjpeg62-turbo	CVE-2020-13790	高危	1:1.3.1-12		libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13790 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-06-03 19:15 修改: 2026-06-17 02:53
liblcms2-2	CVE-2016-10165	高危	2.6-3+b3	2.6-3+deb8u1	lcms2: Out-of-bounds read in Type_MLU_Read() 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10165 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-02-03 19:59 修改: 2026-05-13 00:24
libldap-2.4-2	CVE-2019-13565	高危	2.4.40+dfsg-1+deb8u2	2.4.40+dfsg-1+deb8u5	openldap: ACL restrictions bypass due to sasl_ssf value being set permanently 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13565 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-07-26 13:15 修改: 2026-06-17 02:16
libldap-2.4-2	CVE-2020-12243	高危	2.4.40+dfsg-1+deb8u2	2.4.40+dfsg-1+deb8u6	openldap: denial of service via nested boolean expressions in LDAP search filters 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12243 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2020-04-28 19:15 修改: 2026-06-17 02:51
libmount1	CVE-2016-2779	高危	2.25.2-6		util-linux: runuser tty hijack via TIOCSTI ioctl 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
libcups2	CVE-2019-8675	高危	1.7.5-11+deb8u1	1.7.5-11+deb8u5	cups: stack-buffer-overflow in libcups's asn1_get_type function 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8675 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-10-27 20:15 修改: 2026-06-17 02:42
libcups2	CVE-2019-8696	高危	1.7.5-11+deb8u1	1.7.5-11+deb8u5	cups: stack-buffer-overflow in libcups's asn1_get_packed function 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8696 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-10-27 20:15 修改: 2026-06-17 02:42
libncurses5	CVE-2017-11112	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in append_acs function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
libncurses5	CVE-2017-11113	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference vulnerability in _nc_parse_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
libncurses5	CVE-2017-13728	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Infinite loop in the next_char function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncurses5	CVE-2017-16879	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u3	ncurses: Stack-based buffer overflow in the _nc_write_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-11-22 22:29 修改: 2026-07-23 18:58
libcups2	CVE-2020-3898	高危	1.7.5-11+deb8u1	1.7.5-11+deb8u8	cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3898 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-10-22 18:15 修改: 2026-06-17 03:19
apt	CVE-2019-3462	高危	1.0.9.8.3	1.0.9.8.5	Incorrect sanitation of the 302 redirect field in HTTP transport metho ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3462 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-28 21:29 修改: 2026-06-17 02:35
libncursesw5	CVE-2017-11112	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in append_acs function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2017-11113	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference vulnerability in _nc_parse_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2017-13728	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Infinite loop in the next_char function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2017-16879	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u3	ncurses: Stack-based buffer overflow in the _nc_write_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-11-22 22:29 修改: 2026-07-23 18:58
libnettle4	CVE-2016-6489	高危	2.7.1-5+deb8u1	2.7.1-5+deb8u2	nettle: RSA/DSA code is vulnerable to cache-timing related attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6489 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-04-14 18:59 修改: 2026-06-17 00:51
bash	CVE-2016-7543	高危	4.3-11+b1	4.3-11+deb8u1	bash: Specially crafted SHELLOPTS+PS4 variables allows command substitution 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7543 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-01-19 20:59 修改: 2026-06-17 00:53
curl	CVE-2016-7141	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: Incorrect reuse of client certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7141 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-10-03 21:59 修改: 2026-06-17 00:52
libnss3	CVE-2017-7502	高危	2:3.26-1+debu8u1	2:3.26-1+debu8u2	nss: Null pointer dereference when handling empty SSLv2 messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7502 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-05-30 18:29 修改: 2026-06-17 01:24
libnss3	CVE-2017-7805	高危	2:3.26-1+debu8u1	2:3.26-1+debu8u3	nss: Potential use-after-free in TLS 1.2 server when verifying client authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7805 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-06-11 21:29 修改: 2026-06-17 01:25
libnss3	CVE-2019-11719	高危	2:3.26-1+debu8u1	2:3.26-1+debu8u5	nss: Out-of-bounds read when importing curve25519 private key 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-07-23 14:15 修改: 2026-06-17 02:13
libnss3	CVE-2019-11729	高危	2:3.26-1+debu8u1	2:3.26-1+debu8u5	nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-07-23 14:15 修改: 2026-06-17 02:13
libnss3	CVE-2019-11745	高危	2:3.26-1+debu8u1	2:3.26-1+debu8u7	nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-01-08 20:15 修改: 2026-06-17 02:13
libnss3	CVE-2019-17007	高危	2:3.26-1+debu8u1	2:3.26-1+debu8u8	nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-10-22 21:15 修改: 2026-06-17 02:23
libpcre3	CVE-2015-3217	高危	2:8.35-3.3+deb8u4		pcre: stack overflow caused by mishandled group empty match (8.38/11) 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3217 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2016-12-13 16:59 修改: 2026-05-06 22:30
libpcre3	CVE-2017-7186	高危	2:8.35-3.3+deb8u4		pcre: Invalid Unicode property lookup (8.41/7, 10.24/2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7186 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-03-20 00:59 修改: 2026-06-17 01:23
libpcsclite1	CVE-2016-10109	高危	1.8.13-1	1.8.13-1+deb8u1	pcsc-lite: Use-after-free of cardsList due to SCardReleaseContext invocations 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10109 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-02-23 20:59 修改: 2026-05-13 00:24
libpng12-0	CVE-2016-10087	高危	1.2.50-2+deb8u2	1.2.50-2+deb8u3	libpng: NULL pointer dereference in png_set_text_2() 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10087 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-01-30 22:59 修改: 2026-05-13 00:24
curl	CVE-2016-8615	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Cookie injection for other servers 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8615 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
libprocps3	CVE-2018-1122	高危	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: Local privilege escalation in top 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1122 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 14:29 修改: 2026-06-17 01:50
libprocps3	CVE-2018-1123	高危	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: denial of service in ps via mmap buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1123 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 14:29 修改: 2026-06-17 01:50
libprocps3	CVE-2018-1124	高危	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: Integer overflows leading to heap overflow in file2strvec 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1124 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 13:29 修改: 2026-06-17 01:50
libprocps3	CVE-2018-1125	高危	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: stack buffer overflow in pgrep 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1125 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 14:29 修改: 2026-06-17 01:50
curl	CVE-2016-8617	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Out-of-bounds write via unchecked multiplication 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8617 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 22:29 修改: 2026-06-17 00:54
librtmp1	CVE-2015-8270	高危	2.4+20150115.gita107cef-1	2.4+20150115.gita107cef-1+deb8u1	The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTM ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8270 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-04-13 14:59 修改: 2026-05-13 00:24
libsasl2-2	CVE-2019-19906	高危	2.1.26.dfsg1-13+deb8u1	2.1.26.dfsg1-13+deb8u2	cyrus-sasl: denial of service in _sasl_add_string function 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-12-19 18:15 修改: 2026-06-17 02:27
libsasl2-modules-db	CVE-2019-19906	高危	2.1.26.dfsg1-13+deb8u1	2.1.26.dfsg1-13+deb8u2	cyrus-sasl: denial of service in _sasl_add_string function 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-12-19 18:15 修改: 2026-06-17 02:27
libsmartcols1	CVE-2016-2779	高危	2.25.2-6		util-linux: runuser tty hijack via TIOCSTI ioctl 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
curl	CVE-2016-8621	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: curl_getdate out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8621 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 22:29 修改: 2026-06-17 00:54
curl	CVE-2016-8623	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Use-after-free via shared cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8623 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
curl	CVE-2016-8624	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Invalid URL parsing with '#' 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8624 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 21:29 修改: 2026-06-17 00:54
curl	CVE-2016-8625	高危	7.38.0-4+deb8u4		curl: IDNA 2003 makes curl use wrong host 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8625 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
curl	CVE-2016-9586	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: printf floating point buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9586 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-04-23 18:29 修改: 2026-06-17 00:56
libsqlite3-0	CVE-2018-20346	高危	3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u3	sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20346 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-12-21 21:29 修改: 2026-06-17 01:52
libsqlite3-0	CVE-2018-20506	高危	3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u3	sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20506 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-04-03 18:29 修改: 2026-06-17 01:52
libsqlite3-0	CVE-2018-8740	高危	3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u4	sqlite: NULL pointer dereference with databases with schema corrupted with CREATE TABLE AS allows for denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8740 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-03-17 00:29 修改: 2026-06-17 02:05
libsqlite3-0	CVE-2019-20218	高危	3.8.7.1-1+deb8u2		sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20218 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-01-02 14:16 修改: 2026-06-17 02:30
libsqlite3-0	CVE-2019-5827	高危	3.8.7.1-1+deb8u2		sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5827 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-06-27 17:15 修改: 2026-06-17 02:38
libsqlite3-0	CVE-2020-11655	高危	3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u5	sqlite: malformed window-function query leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11655 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-04-09 03:15 修改: 2026-06-17 02:50
curl	CVE-2017-1000254	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u6	curl: FTP PWD response parser out of bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000254 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-06 13:29 修改: 2026-06-17 00:58
curl	CVE-2018-1000121	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u10	curl: LDAP NULL pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000121 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-14 18:29 修改: 2026-06-17 01:32
curl	CVE-2018-16890	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u14	curl: NTLM type-2 heap out-of-bounds buffer read 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16890 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-02-06 20:29 修改: 2026-06-17 01:45
curl	CVE-2019-3823	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u14	curl: SMTP end-of-response out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3823 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-02-06 20:29 修改: 2026-06-17 02:35
curl	CVE-2019-5436	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u15	curl: TFTP receive heap buffer overflow in tftp_receive_packet() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5436 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-05-28 19:29 修改: 2026-06-17 02:37
libssh2-1	CVE-2019-13115	高危	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u4	libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13115 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-07-16 18:15 修改: 2026-06-17 02:16
libssh2-1	CVE-2019-17498	高危	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u6	libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17498 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-10-21 22:15 修改: 2026-06-17 02:24
libssh2-1	CVE-2019-3855	高危	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u2	libssh2: Integer overflow in transport read resulting in out of bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3855 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-03-21 21:29 修改: 2026-06-17 02:35
libssh2-1	CVE-2019-3856	高危	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u2	libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3856 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-03-25 19:29 修改: 2026-06-17 02:35
libssh2-1	CVE-2019-3857	高危	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u2	libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3857 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-03-25 19:29 修改: 2026-06-17 02:35
libssh2-1	CVE-2019-3863	高危	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u2	libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3863 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-03-25 18:29 修改: 2026-06-17 02:35
libssl1.0.0	CVE-2016-8610	高危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u6	SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8610 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-11-13 22:29 修改: 2026-06-17 00:54
libssl1.0.0	CVE-2017-3731	高危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u6	openssl: Truncated packet could crash via OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3731 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-05-04 19:29 修改: 2026-06-17 01:18
libssl1.0.0	CVE-2018-0732	高危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u9	openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0732 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-06-12 13:29 修改: 2026-06-17 01:31
libstdc++6	CVE-2018-12886	高危	4.9.2-10		gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38
libsystemd0	CVE-2017-18078	高危	215-17+deb8u5	215-17+deb8u12	systemd: Unsafe handling of hard links allowing privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18078 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-01-29 05:29 修改: 2026-06-17 01:12
libsystemd0	CVE-2018-15686	高危	215-17+deb8u5	215-17+deb8u8	systemd: line splitting via fgets() allows for state injection during daemon-reexec 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
libsystemd0	CVE-2018-15688	高危	215-17+deb8u5	215-17+deb8u8	systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
libsystemd0	CVE-2018-16864	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when calling syslog from a command with long cmdline 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 20:29 修改: 2026-06-17 01:44
libsystemd0	CVE-2018-16865	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when receiving many journald entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 21:29 修改: 2026-06-17 01:44
libsystemd0	CVE-2019-3842	高危	215-17+deb8u5	215-17+deb8u12	systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any" 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35
libtasn1-6	CVE-2017-10790	高危	4.2-3+deb8u2	4.2-3+deb8u4	libtasn1: NULL pointer dereference in the _asn1_check_identifier function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10790 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-07-02 03:29 修改: 2026-06-17 01:00
libtasn1-6	CVE-2017-6891	高危	4.2-3+deb8u2	4.2-3+deb8u3	libtasn1: Stack-based buffer overflow in asn1_find_node() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6891 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-05-22 19:29 修改: 2026-06-17 01:23
dbus	CVE-2019-12749	高危	1.8.20-0+deb8u1	1.8.22-0+deb8u2	dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12749 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-06-11 17:29 修改: 2026-06-17 02:15
gcc-4.8-base	CVE-2018-12886	高危	4.8.4-1		gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38
libtinfo5	CVE-2017-11112	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in append_acs function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2017-11113	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference vulnerability in _nc_parse_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2017-13728	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Infinite loop in the next_char function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2017-16879	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u3	ncurses: Stack-based buffer overflow in the _nc_write_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-11-22 22:29 修改: 2026-07-23 18:58
libudev1	CVE-2017-18078	高危	215-17+deb8u5	215-17+deb8u12	systemd: Unsafe handling of hard links allowing privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18078 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-01-29 05:29 修改: 2026-06-17 01:12
libudev1	CVE-2018-15686	高危	215-17+deb8u5	215-17+deb8u8	systemd: line splitting via fgets() allows for state injection during daemon-reexec 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
libudev1	CVE-2018-15688	高危	215-17+deb8u5	215-17+deb8u8	systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
libudev1	CVE-2018-16864	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when calling syslog from a command with long cmdline 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 20:29 修改: 2026-06-17 01:44
libudev1	CVE-2018-16865	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when receiving many journald entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 21:29 修改: 2026-06-17 01:44
libudev1	CVE-2019-3842	高危	215-17+deb8u5	215-17+deb8u12	systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any" 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35
libuuid1	CVE-2016-2779	高危	2.25.2-6		util-linux: runuser tty hijack via TIOCSTI ioctl 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
libcurl3	CVE-2016-7141	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: Incorrect reuse of client certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7141 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-10-03 21:59 修改: 2026-06-17 00:52
libcurl3	CVE-2016-8615	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Cookie injection for other servers 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8615 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
libx11-6	CVE-2018-14598	高危	2:1.6.2-3	2:1.6.2-3+deb8u2	libX11: Crash on invalid reply in XListExtensions in ListExt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14598 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41
libcurl3	CVE-2016-8617	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Out-of-bounds write via unchecked multiplication 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8617 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 22:29 修改: 2026-06-17 00:54
libcurl3	CVE-2016-8621	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: curl_getdate out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8621 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 22:29 修改: 2026-06-17 00:54
libx11-data	CVE-2018-14598	高危	2:1.6.2-3	2:1.6.2-3+deb8u2	libX11: Crash on invalid reply in XListExtensions in ListExt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14598 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41
libcurl3	CVE-2016-8623	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Use-after-free via shared cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8623 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
login	CVE-2016-6252	高危	1:4.2-3+deb8u1	1:4.2-3+deb8u3	shadow-utils: Incorrect integer handling results in LPE 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6252 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-17 17:59 修改: 2026-06-17 00:50
mount	CVE-2016-2779	高危	2.25.2-6		util-linux: runuser tty hijack via TIOCSTI ioctl 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
multiarch-support	CVE-2017-1000366	高危	2.19-18+deb8u6	2.19-18+deb8u10	glibc: heap/stack gap jumping via unbounded stack allocations 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000366 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-19 16:29 修改: 2026-06-17 00:59
libcurl3	CVE-2016-8624	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Invalid URL parsing with '#' 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8624 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-07-31 21:29 修改: 2026-06-17 00:54
libcurl3	CVE-2016-8625	高危	7.38.0-4+deb8u4		curl: IDNA 2003 makes curl use wrong host 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8625 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
ncurses-base	CVE-2017-11112	高危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in append_acs function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-11113	高危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference vulnerability in _nc_parse_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-13728	高危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Infinite loop in the next_char function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-16879	高危	5.9+20140913-1	5.9+20140913-1+deb8u3	ncurses: Stack-based buffer overflow in the _nc_write_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-11-22 22:29 修改: 2026-07-23 18:58
libcurl3	CVE-2016-9586	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u13	curl: printf floating point buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9586 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-04-23 18:29 修改: 2026-06-17 00:56
libcurl3	CVE-2017-1000254	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u6	curl: FTP PWD response parser out of bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000254 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-06 13:29 修改: 2026-06-17 00:58
ncurses-bin	CVE-2017-11112	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in append_acs function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-11113	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference vulnerability in _nc_parse_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-08 17:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-13728	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Infinite loop in the next_char function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-16879	高危	5.9+20140913-1+b1	5.9+20140913-1+deb8u3	ncurses: Stack-based buffer overflow in the _nc_write_entry function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-11-22 22:29 修改: 2026-07-23 18:58
openssl	CVE-2016-8610	高危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u6	SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8610 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-11-13 22:29 修改: 2026-06-17 00:54
openssl	CVE-2017-3731	高危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u6	openssl: Truncated packet could crash via OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3731 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-05-04 19:29 修改: 2026-06-17 01:18
openssl	CVE-2018-0732	高危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u9	openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0732 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-06-12 13:29 修改: 2026-06-17 01:31
libcurl3	CVE-2018-1000121	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u10	curl: LDAP NULL pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000121 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-14 18:29 修改: 2026-06-17 01:32
passwd	CVE-2016-6252	高危	1:4.2-3+deb8u1	1:4.2-3+deb8u3	shadow-utils: Incorrect integer handling results in LPE 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6252 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-17 17:59 修改: 2026-06-17 00:50
libcurl3	CVE-2018-16890	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u14	curl: NTLM type-2 heap out-of-bounds buffer read 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16890 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-02-06 20:29 修改: 2026-06-17 01:45
libcurl3	CVE-2019-3823	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u14	curl: SMTP end-of-response out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3823 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-02-06 20:29 修改: 2026-06-17 02:35
libcurl3	CVE-2019-5436	高危	7.38.0-4+deb8u4	7.38.0-4+deb8u15	curl: TFTP receive heap buffer overflow in tftp_receive_packet() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5436 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-05-28 19:29 修改: 2026-06-17 02:37
libdb5.3	CVE-2017-10140	高危	5.3.28-9	5.3.28-9+deb8u1	libdb: Reads DB_CONFIG from the current working directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10140 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-04-16 17:29 修改: 2026-06-17 00:59
perl-base	CVE-2017-12837	高危	5.20.2-3+deb8u6	5.20.2-3+deb8u9	perl: Heap buffer overflow in regular expression compiler 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12837 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-09-19 18:29 修改: 2026-06-17 01:04
perl-base	CVE-2018-12015	高危	5.20.2-3+deb8u6	5.20.2-3+deb8u11	perl: Directory traversal in Archive::Tar 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12015 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-06-07 13:29 修改: 2026-06-17 01:36
libdbus-1-3	CVE-2019-12749	高危	1.8.20-0+deb8u1	1.8.22-0+deb8u2	dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12749 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-06-11 17:29 修改: 2026-06-17 02:15
procps	CVE-2018-1122	高危	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: Local privilege escalation in top 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1122 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 14:29 修改: 2026-06-17 01:50
procps	CVE-2018-1123	高危	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: denial of service in ps via mmap buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1123 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 14:29 修改: 2026-06-17 01:50
procps	CVE-2018-1124	高危	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: Integer overflows leading to heap overflow in file2strvec 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1124 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 13:29 修改: 2026-06-17 01:50
procps	CVE-2018-1125	高危	2:3.3.9-9	2:3.3.9-9+deb8u1	procps: stack buffer overflow in pgrep 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1125 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-05-23 14:29 修改: 2026-06-17 01:50
sensible-utils	CVE-2017-17512	高危	0.0.9	0.0.9+deb8u1	sensible-browser in sensible-utils before 0.0.11 does not validate str ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17512 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-12-11 06:29 修改: 2026-06-17 01:10
systemd	CVE-2017-18078	高危	215-17+deb8u5	215-17+deb8u12	systemd: Unsafe handling of hard links allowing privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18078 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-01-29 05:29 修改: 2026-06-17 01:12
systemd	CVE-2018-15686	高危	215-17+deb8u5	215-17+deb8u8	systemd: line splitting via fgets() allows for state injection during daemon-reexec 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
systemd	CVE-2018-15688	高危	215-17+deb8u5	215-17+deb8u8	systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
systemd	CVE-2018-16864	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when calling syslog from a command with long cmdline 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 20:29 修改: 2026-06-17 01:44
systemd	CVE-2018-16865	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when receiving many journald entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 21:29 修改: 2026-06-17 01:44
systemd	CVE-2019-3842	高危	215-17+deb8u5	215-17+deb8u12	systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any" 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35
systemd-sysv	CVE-2017-18078	高危	215-17+deb8u5	215-17+deb8u12	systemd: Unsafe handling of hard links allowing privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18078 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-01-29 05:29 修改: 2026-06-17 01:12
systemd-sysv	CVE-2018-15686	高危	215-17+deb8u5	215-17+deb8u8	systemd: line splitting via fgets() allows for state injection during daemon-reexec 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
systemd-sysv	CVE-2018-15688	高危	215-17+deb8u5	215-17+deb8u8	systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
systemd-sysv	CVE-2018-16864	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when calling syslog from a command with long cmdline 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 20:29 修改: 2026-06-17 01:44
systemd-sysv	CVE-2018-16865	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when receiving many journald entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 21:29 修改: 2026-06-17 01:44
systemd-sysv	CVE-2019-3842	高危	215-17+deb8u5	215-17+deb8u12	systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any" 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35
tar	CVE-2016-6321	高危	1.27.1-2+b1	1.27.1-2+deb8u1	tar: Bypassing the extract path name 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6321 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2016-12-09 22:59 修改: 2026-06-17 00:50
udev	CVE-2017-18078	高危	215-17+deb8u5	215-17+deb8u12	systemd: Unsafe handling of hard links allowing privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18078 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-01-29 05:29 修改: 2026-06-17 01:12
udev	CVE-2018-15686	高危	215-17+deb8u5	215-17+deb8u8	systemd: line splitting via fgets() allows for state injection during daemon-reexec 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
udev	CVE-2018-15688	高危	215-17+deb8u5	215-17+deb8u8	systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42
udev	CVE-2018-16864	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when calling syslog from a command with long cmdline 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 20:29 修改: 2026-06-17 01:44
udev	CVE-2018-16865	高危	215-17+deb8u5	215-17+deb8u9	systemd: stack overflow when receiving many journald entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-11 21:29 修改: 2026-06-17 01:44
udev	CVE-2019-3842	高危	215-17+deb8u5	215-17+deb8u12	systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any" 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35
unzip	CVE-2018-1000035	高危	6.0-16+deb8u2	6.0-16+deb8u6	unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000035 镜像层: sha256:0de9d866d419b5c7a38e6d60b8eca9eedfb5fee763834c9ec3cbfaae6a056a80 发布日期: 2018-02-09 23:29 修改: 2026-06-17 01:32
util-linux	CVE-2016-2779	高危	2.25.2-6		util-linux: runuser tty hijack via TIOCSTI ioctl 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
gcc-4.9-base	CVE-2018-12886	高危	4.9.2-10		gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38
wget	CVE-2016-7098	高危	1.16-1+deb8u1	1.16-1+deb8u7	wget: files rejected by access list are kept on the disk for the duration of HTTP connection 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7098 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-09-26 14:59 修改: 2026-06-17 00:52
wget	CVE-2017-13089	高危	1.16-1+deb8u1	1.16-1+deb8u4	wget: Stack-based buffer overflow in HTTP protocol handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13089 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-27 19:29 修改: 2026-06-17 01:04
wget	CVE-2017-13090	高危	1.16-1+deb8u1	1.16-1+deb8u4	wget: Heap-based buffer overflow in HTTP protocol handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13090 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-27 19:29 修改: 2026-06-17 01:04
libexpat1	CVE-2017-9233	高危	2.1.0-6+deb8u3	2.1.0-6+deb8u4	expat: Inifinite loop due to invalid XML in external entity 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9233 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2017-07-25 20:29 修改: 2026-06-17 01:27
libexpat1	CVE-2018-20843	高危	2.1.0-6+deb8u3	2.1.0-6+deb8u5	expat: large number of colons in input makes parser consume high amount of resources, leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20843 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-06-24 17:15 修改: 2026-06-17 01:53
zlib1g	CVE-2016-9840	高危	1:1.2.8.dfsg-2+b1	1:1.2.8.dfsg-2+deb8u1	zlib: Out-of-bound pointer arithmetic in inftrees.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9840 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-05-23 04:29 修改: 2026-07-14 12:16
zlib1g	CVE-2016-9842	高危	1:1.2.8.dfsg-2+b1	1:1.2.8.dfsg-2+deb8u1	zlib: Undefined left shift of negative number 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9842 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-05-23 04:29 修改: 2026-07-14 12:16
libcups2	CVE-2017-18248	中危	1.7.5-11+deb8u1	1.7.5-11+deb8u3	cups: Invalid usernames handled in scheduler/ipp.c:add_job() allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18248 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-03-26 17:29 修改: 2026-06-17 01:12
libcups2	CVE-2018-4181	中危	1.7.5-11+deb8u1	1.7.5-11+deb8u4	cups: Manipulation of cupsd.conf by a local attacker resulting in limited reads of arbitrary files as root 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4181 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-01-11 18:29 修改: 2026-06-17 01:58
libcups2	CVE-2018-4300	中危	1.7.5-11+deb8u1	1.7.5-11+deb8u6	cups: Session cookie generated by the CUPS web interface is easy to guess 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4300 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-04-03 18:29 修改: 2026-06-17 01:58
libcups2	CVE-2019-2180	中危	1.7.5-11+deb8u1	1.7.5-11+deb8u5	In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possi ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2180 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-09-05 22:15 修改: 2026-06-17 02:33
libcups2	CVE-2019-2228	中危	1.7.5-11+deb8u1	1.7.5-11+deb8u7	In array_find of array.c, there is a possible out-of-bounds read due t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2228 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-12-06 23:15 修改: 2026-06-17 02:33
gcc-4.9-base	CVE-2015-5276	中危	4.9.2-10		gcc: Predictable randomness from std::random_device 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5276 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2015-11-17 15:59 修改: 2026-05-06 22:30
libcurl3	CVE-2016-8616	中危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Case insensitive password comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8616 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
libsqlite3-0	CVE-2019-16168	中危	3.8.7.1-1+deb8u2		sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16168 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-09-09 17:15 修改: 2026-06-17 02:21
libsqlite3-0	CVE-2019-19645	中危	3.8.7.1-1+deb8u2		sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19645 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-12-09 16:15 修改: 2026-06-17 02:26
libsqlite3-0	CVE-2020-13434	中危	3.8.7.1-1+deb8u2	3.8.7.1-1+deb8u6	sqlite: integer overflow in sqlite3_str_vappendf function in printf.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13434 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-05-24 22:15 修改: 2026-06-17 02:53
libsqlite3-0	CVE-2020-13631	中危	3.8.7.1-1+deb8u2		sqlite: Virtual table can be renamed into the name of one of its shadow tables 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13631 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-05-27 15:15 修改: 2026-06-17 02:53
libss2	CVE-2019-5094	中危	1.42.12-2	1.42.12-2+deb8u1	e2fsprogs: Crafted ext4 partition leads to out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
libss2	CVE-2019-5188	中危	1.42.12-2	1.42.12-2+deb8u2	e2fsprogs: Out-of-bounds write in e2fsck/rehash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
libicu52	CVE-2015-2632	中危	52.1-8+deb8u3	52.1-8+deb8u4	ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520) 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2632 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2015-07-16 10:59 修改: 2026-05-06 22:30
libicu52	CVE-2017-15422	中危	52.1-8+deb8u3	52.1-8+deb8u7	chromium-browser: integer overflow in icu 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15422 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-28 19:29 修改: 2026-06-17 01:07
libcurl3	CVE-2017-1000100	中危	7.38.0-4+deb8u4	7.38.0-4+deb8u6	curl: TFTP sends more than buffer size 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000100 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-05 01:29 修改: 2026-06-17 00:58
libcurl3	CVE-2017-1000101	中危	7.38.0-4+deb8u4	7.38.0-4+deb8u6	curl: URL globbing out of bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000101 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-05 01:29 修改: 2026-06-17 00:58
gcc-4.9-base	CVE-2017-11671	中危	4.9.2-10		gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11671 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-26 21:29 修改: 2026-06-17 01:02
libjpeg62-turbo	CVE-2018-11212	中危	1:1.3.1-12	1:1.3.1-12+deb8u1	libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11212 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-05-16 17:29 修改: 2026-06-17 01:35
libjpeg62-turbo	CVE-2018-11213	中危	1:1.3.1-12	1:1.3.1-12+deb8u1	libjpeg: Segmentation fault in get_text_gray_row function in rdppm.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11213 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-05-16 17:29 修改: 2026-06-17 01:35
libjpeg62-turbo	CVE-2018-11214	中危	1:1.3.1-12	1:1.3.1-12+deb8u1	libjpeg: Segmentation fault in get_text_rgb_row function in rdppm.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11214 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-05-16 17:29 修改: 2026-06-17 01:35
libjpeg62-turbo	CVE-2018-1152	中危	1:1.3.1-12	1:1.3.1-12+deb8u1	libjpeg-turbo: Divide by zero allows for denial of service via crafted BMP image 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1152 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-06-18 14:29 修改: 2026-06-17 01:50
libjpeg62-turbo	CVE-2018-14498	中危	1:1.3.1-12	1:1.3.1-12+deb8u2	libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14498 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-03-07 23:29 修改: 2026-06-17 01:41
libk5crypto3	CVE-2015-2694	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2694 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2015-05-25 19:59 修改: 2026-05-06 22:30
libk5crypto3	CVE-2016-3119	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: null pointer dereference in kadmin 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3119 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-03-26 01:59 修改: 2026-06-17 00:45
libk5crypto3	CVE-2016-3120	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: S4U2Self KDC crash when anon is restricted 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3120 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-08-01 02:59 修改: 2026-06-17 00:45
libk5crypto3	CVE-2017-11368	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11368 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-08-09 18:29 修改: 2026-06-17 01:01
libssl1.0.0	CVE-2016-7056	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u6	openssl: ECDSA P-256 timing attack key recovery 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7056 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-09-10 16:29 修改: 2026-06-17 00:52
libssl1.0.0	CVE-2017-3735	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u7	openssl: Malformed X.509 IPAdressFamily could cause OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3735 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-08-28 19:29 修改: 2026-06-17 01:18
libssl1.0.0	CVE-2018-0734	中危	1.0.1t-1+deb8u5		openssl: timing side channel attack in the DSA signature algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0734 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-10-30 12:29 修改: 2026-06-17 01:31
libssl1.0.0	CVE-2018-0735	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u10	openssl: timing side channel attack in the ECDSA signature generation 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0735 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-10-29 13:29 修改: 2026-06-17 01:31
libssl1.0.0	CVE-2018-0737	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u9	openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0737 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-04-16 18:29 修改: 2026-06-17 01:31
libssl1.0.0	CVE-2018-0739	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u8	openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0739 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-27 21:29 修改: 2026-06-17 01:31
libssl1.0.0	CVE-2018-5407	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u10	openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5407 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-11-15 21:29 修改: 2026-06-17 02:00
libssl1.0.0	CVE-2019-1547	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u12	openssl: side-channel weak encryption vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.0.0	CVE-2019-1559	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u11	openssl: 0-byte record padding oracle 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1559 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-02-27 23:29 修改: 2026-06-17 02:28
libk5crypto3	CVE-2018-20217	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: Reachable assertion in the KDC using S4U2Self requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52
libstdc++6	CVE-2015-5276	中危	4.9.2-10		gcc: Predictable randomness from std::random_device 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5276 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2015-11-17 15:59 修改: 2026-05-06 22:30
libstdc++6	CVE-2017-11671	中危	4.9.2-10		gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11671 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-26 21:29 修改: 2026-06-17 01:02
libk5crypto3	CVE-2018-5710	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libk5crypto3	CVE-2018-5729	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00
libkrb5-3	CVE-2015-2694	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2694 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2015-05-25 19:59 修改: 2026-05-06 22:30
libkrb5-3	CVE-2016-3119	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: null pointer dereference in kadmin 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3119 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-03-26 01:59 修改: 2026-06-17 00:45
libkrb5-3	CVE-2016-3120	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: S4U2Self KDC crash when anon is restricted 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3120 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-08-01 02:59 修改: 2026-06-17 00:45
libkrb5-3	CVE-2017-11368	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11368 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-08-09 18:29 修改: 2026-06-17 01:01
libsystemd0	CVE-2016-7796	中危	215-17+deb8u5	215-17+deb8u6	systemd: freeze when PID 1 receives a zero-length message over notify socket 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7796 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2016-10-13 14:59 修改: 2026-06-17 00:53
libsystemd0	CVE-2018-1049	中危	215-17+deb8u5	215-17+deb8u8	systemd: automount: access to automounted volumes can lock up 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-16 21:29 修改: 2026-06-17 01:50
libsystemd0	CVE-2019-6454	中危	215-17+deb8u5	215-17+deb8u10	systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:39
libkrb5-3	CVE-2018-20217	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: Reachable assertion in the KDC using S4U2Self requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52
libkrb5-3	CVE-2018-5710	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5-3	CVE-2018-5729	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00
libkrb5support0	CVE-2015-2694	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2694 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2015-05-25 19:59 修改: 2026-05-06 22:30
libkrb5support0	CVE-2016-3119	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: null pointer dereference in kadmin 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3119 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-03-26 01:59 修改: 2026-06-17 00:45
libkrb5support0	CVE-2016-3120	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: S4U2Self KDC crash when anon is restricted 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3120 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-08-01 02:59 修改: 2026-06-17 00:45
libkrb5support0	CVE-2017-11368	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11368 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-08-09 18:29 修改: 2026-06-17 01:01
libkrb5support0	CVE-2018-20217	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: Reachable assertion in the KDC using S4U2Self requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52
libtinfo5	CVE-2017-13729	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the _nc_save_str function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2017-13730	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_read_entry_source() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2017-13731	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function postprocess_termcap() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2017-13732	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function dump_uses() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2017-13733	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function fmt_entry 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2017-13734	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_safe_strcat 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2018-19217	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference at function _nc_name_match 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
libkrb5support0	CVE-2018-5710	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5support0	CVE-2018-5729	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00
apt	CVE-2020-3810	中危	1.0.9.8.3	1.0.9.8.6	Missing input validation in the ar/tar implementations of APT before v ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3810 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-05-15 14:15 修改: 2026-06-17 03:19
liblcms2-2	CVE-2018-16435	中危	2.6-3+b3	2.6-3+deb8u2	lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16435 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-09-04 00:29 修改: 2026-06-17 01:44
libdbus-1-3	CVE-2020-12049	中危	1.8.20-0+deb8u1	1.8.22-0+deb8u3	dbus: denial of service via file descriptor leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12049 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-06-08 17:15 修改: 2026-06-17 02:51
gnupg	CVE-2017-7526	中危	1.4.18-7+deb8u3	1.4.18-7+deb8u4	libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7526 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-07-26 13:29 修改: 2026-06-17 01:24
libudev1	CVE-2016-7796	中危	215-17+deb8u5	215-17+deb8u6	systemd: freeze when PID 1 receives a zero-length message over notify socket 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7796 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2016-10-13 14:59 修改: 2026-06-17 00:53
libudev1	CVE-2018-1049	中危	215-17+deb8u5	215-17+deb8u8	systemd: automount: access to automounted volumes can lock up 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-16 21:29 修改: 2026-06-17 01:50
libudev1	CVE-2019-6454	中危	215-17+deb8u5	215-17+deb8u10	systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:39
libldap-2.4-2	CVE-2017-9287	中危	2.4.40+dfsg-1+deb8u2	2.4.40+dfsg-1+deb8u3	openldap: Double free vulnerability in servers/slapd/back-mdb/search.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9287 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-05-29 16:29 修改: 2026-06-17 01:27
libuuid1	CVE-2016-5011	中危	2.25.2-6		util-linux: Extended partition loop in MBR partition table leads to DOS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5011 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-04-11 15:59 修改: 2026-06-17 00:48
libldap-2.4-2	CVE-2019-13057	中危	2.4.40+dfsg-1+deb8u2	2.4.40+dfsg-1+deb8u5	openldap: Information disclosure issue in slapd component 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13057 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-07-26 13:15 修改: 2026-06-17 02:15
bzip2	CVE-2016-3189	中危	1.0.6-7+b3	1.0.6-7+deb8u1	bzip2: heap use after free in bzip2recover 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3189 镜像层: sha256:0de9d866d419b5c7a38e6d60b8eca9eedfb5fee763834c9ec3cbfaae6a056a80 发布日期: 2016-06-30 17:59 修改: 2026-06-17 00:45
libmount1	CVE-2016-5011	中危	2.25.2-6		util-linux: Extended partition loop in MBR partition table leads to DOS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5011 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-04-11 15:59 修改: 2026-06-17 00:48
gpgv	CVE-2017-7526	中危	1.4.18-7+deb8u3	1.4.18-7+deb8u4	libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7526 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-07-26 13:29 修改: 2026-06-17 01:24
curl	CVE-2016-8616	中危	7.38.0-4+deb8u4	7.38.0-4+deb8u5	curl: Case insensitive password comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8616 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-01 06:29 修改: 2026-06-17 00:54
curl	CVE-2017-1000100	中危	7.38.0-4+deb8u4	7.38.0-4+deb8u6	curl: TFTP sends more than buffer size 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000100 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-05 01:29 修改: 2026-06-17 00:58
libapt-pkg4.12	CVE-2016-1252	中危	1.0.9.8.3	1.0.9.8.4	The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1252 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-12-05 16:29 修改: 2026-06-17 00:41
libapt-pkg4.12	CVE-2020-3810	中危	1.0.9.8.3	1.0.9.8.6	Missing input validation in the ar/tar implementations of APT before v ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3810 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-05-15 14:15 修改: 2026-06-17 03:19
login	CVE-2017-2616	中危	1:4.2-3+deb8u1	1:4.2-3+deb8u3	util-linux: Sending SIGKILL to other processes with root privileges via su 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2616 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-07-27 19:29 修改: 2026-06-17 01:16
curl	CVE-2017-1000101	中危	7.38.0-4+deb8u4	7.38.0-4+deb8u6	curl: URL globbing out of bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000101 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-10-05 01:29 修改: 2026-06-17 00:58
mount	CVE-2016-5011	中危	2.25.2-6		util-linux: Extended partition loop in MBR partition table leads to DOS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5011 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-04-11 15:59 修改: 2026-06-17 00:48
libncurses5	CVE-2017-13729	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the _nc_save_str function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncurses5	CVE-2017-13730	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_read_entry_source() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncurses5	CVE-2017-13731	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function postprocess_termcap() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncurses5	CVE-2017-13732	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function dump_uses() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncurses5	CVE-2017-13733	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function fmt_entry 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncurses5	CVE-2017-13734	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_safe_strcat 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncurses5	CVE-2018-19217	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference at function _nc_name_match 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-13729	中危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the _nc_save_str function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-13730	中危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_read_entry_source() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-13731	中危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function postprocess_termcap() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-13732	中危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function dump_uses() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-13733	中危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function fmt_entry 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2017-13734	中危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_safe_strcat 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2018-19217	中危	5.9+20140913-1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference at function _nc_name_match 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
libblkid1	CVE-2016-5011	中危	2.25.2-6		util-linux: Extended partition loop in MBR partition table leads to DOS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5011 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-04-11 15:59 修改: 2026-06-17 00:48
bash	CVE-2016-9401	中危	4.3-11+b1	4.3-11+deb8u2	bash: popd controlled free 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9401 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-01-23 21:59 修改: 2026-06-17 00:55
libfreetype6	CVE-2015-9382	中危	2.5.2-3+deb8u1	2.5.2-3+deb8u4	freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9382 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-09-03 05:15 修改: 2024-11-21 02:40
libfreetype6	CVE-2015-9383	中危	2.5.2-3+deb8u1	2.5.2-3+deb8u4	freetype: a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c may lead to a DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9383 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-09-03 05:15 修改: 2024-11-21 02:40
libbz2-1.0	CVE-2016-3189	中危	1.0.6-7+b3	1.0.6-7+deb8u1	bzip2: heap use after free in bzip2recover 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3189 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2016-06-30 17:59 修改: 2026-06-17 00:45
libgcc1	CVE-2015-5276	中危	1:4.9.2-10		gcc: Predictable randomness from std::random_device 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5276 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2015-11-17 15:59 修改: 2026-05-06 22:30
ncurses-bin	CVE-2017-13729	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the _nc_save_str function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-13730	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_read_entry_source() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-13731	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function postprocess_termcap() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-13732	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function dump_uses() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-13733	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function fmt_entry 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2017-13734	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_safe_strcat 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2018-19217	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference at function _nc_name_match 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2017-13729	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the _nc_save_str function 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2017-13730	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_read_entry_source() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2017-13731	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function postprocess_termcap() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
openssl	CVE-2016-7056	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u6	openssl: ECDSA P-256 timing attack key recovery 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7056 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-09-10 16:29 修改: 2026-06-17 00:52
openssl	CVE-2017-3735	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u7	openssl: Malformed X.509 IPAdressFamily could cause OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3735 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-08-28 19:29 修改: 2026-06-17 01:18
openssl	CVE-2018-0734	中危	1.0.1t-1+deb8u5		openssl: timing side channel attack in the DSA signature algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0734 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-10-30 12:29 修改: 2026-06-17 01:31
openssl	CVE-2018-0735	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u10	openssl: timing side channel attack in the ECDSA signature generation 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0735 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-10-29 13:29 修改: 2026-06-17 01:31
openssl	CVE-2018-0737	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u9	openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0737 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-04-16 18:29 修改: 2026-06-17 01:31
openssl	CVE-2018-0739	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u8	openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0739 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-27 21:29 修改: 2026-06-17 01:31
openssl	CVE-2018-5407	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u10	openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5407 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-11-15 21:29 修改: 2026-06-17 02:00
openssl	CVE-2019-1547	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u12	openssl: side-channel weak encryption vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
openssl	CVE-2019-1559	中危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u11	openssl: 0-byte record padding oracle 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1559 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-02-27 23:29 修改: 2026-06-17 02:28
libncursesw5	CVE-2017-13732	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function dump_uses() 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2017-13733	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function fmt_entry 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
passwd	CVE-2017-2616	中危	1:4.2-3+deb8u1	1:4.2-3+deb8u3	util-linux: Sending SIGKILL to other processes with root privileges via su 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2616 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-07-27 19:29 修改: 2026-06-17 01:16
libncursesw5	CVE-2017-13734	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Illegal address access in the function _nc_safe_strcat 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-29 06:29 修改: 2026-07-23 18:58
libncursesw5	CVE-2018-19217	中危	5.9+20140913-1+b1	5.9+20140913-1+deb8u1	ncurses: Null pointer dereference at function _nc_name_match 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
libgcc1	CVE-2017-11671	中危	1:4.9.2-10		gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11671 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-26 21:29 修改: 2026-06-17 01:02
libnettle4	CVE-2018-16869	中危	2.7.1-5+deb8u1		nettle: Leaky data conversion exposing a manager oracle 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44
libgcrypt20	CVE-2017-7526	中危	1.6.3-2+deb8u2	1.6.3-2+deb8u4	libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7526 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-07-26 13:29 修改: 2026-06-17 01:24
libgcrypt20	CVE-2017-9526	中危	1.6.3-2+deb8u2	1.6.3-2+deb8u3	libgcrypt: Possible timing attack on EdDSA session key 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9526 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-11 02:29 修改: 2026-06-17 01:28
perl-base	CVE-2017-6512	中危	5.20.2-3+deb8u6	5.20.2-3+deb8u7	perl-File-Path: rmtree/remove_tree race condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6512 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-06-01 16:29 修改: 2026-06-17 01:22
libgcrypt20	CVE-2018-0495	中危	1.6.3-2+deb8u2	1.6.3-2+deb8u5	ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-06-13 23:29 修改: 2026-06-17 01:30
libgcrypt20	CVE-2019-13627	中危	1.6.3-2+deb8u2	1.6.3-2+deb8u8	libgcrypt: ECDSA timing attack allowing private key leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13627 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-09-25 15:15 修改: 2026-06-17 02:17
dbus	CVE-2020-12049	中危	1.8.20-0+deb8u1	1.8.22-0+deb8u3	dbus: denial of service via file descriptor leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12049 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-06-08 17:15 修改: 2026-06-17 02:51
e2fslibs	CVE-2019-5094	中危	1.42.12-2	1.42.12-2+deb8u1	e2fsprogs: Crafted ext4 partition leads to out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
libcomerr2	CVE-2019-5094	中危	1.42.12-2	1.42.12-2+deb8u1	e2fsprogs: Crafted ext4 partition leads to out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
libcomerr2	CVE-2019-5188	中危	1.42.12-2	1.42.12-2+deb8u2	e2fsprogs: Out-of-bounds write in e2fsck/rehash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
libnss3	CVE-2016-9074	中危	2:3.26-1+debu8u1	2:3.26-1+debu8u5	nss: Insufficient timing side-channel resistance in divSpoiler 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9074 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-06-11 21:29 修改: 2026-06-17 00:55
libnss3	CVE-2017-5462	中危	2:3.26-1+debu8u1	2:3.26-1+debu8u2	nss: DRBG flaw in NSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5462 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2018-06-11 21:29 修改: 2026-06-17 01:20
libnss3	CVE-2018-12404	中危	2:3.26-1+debu8u1	2:3.26-1+debu8u4	nss: Cache side-channel variant of the Bleichenbacher attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-05-02 17:29 修改: 2026-06-17 01:37
libnss3	CVE-2018-18508	中危	2:3.26-1+debu8u1	2:3.26-1+debu8u4	nss: NULL pointer dereference in several CMS functions resulting in a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18508 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-10-22 21:15 修改: 2026-06-17 01:47
libnss3	CVE-2019-11727	中危	2:3.26-1+debu8u1		nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-07-23 14:15 修改: 2026-06-17 02:13
libnss3	CVE-2020-12399	中危	2:3.26-1+debu8u1	2:3.26-1+debu8u11	nss: Timing attack on DSA signature generation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12399 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-07-09 15:15 修改: 2026-06-17 02:51
systemd	CVE-2016-7796	中危	215-17+deb8u5	215-17+deb8u6	systemd: freeze when PID 1 receives a zero-length message over notify socket 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7796 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2016-10-13 14:59 修改: 2026-06-17 00:53
systemd	CVE-2018-1049	中危	215-17+deb8u5	215-17+deb8u8	systemd: automount: access to automounted volumes can lock up 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-16 21:29 修改: 2026-06-17 01:50
systemd	CVE-2019-6454	中危	215-17+deb8u5	215-17+deb8u10	systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:39
libnss3	CVE-2020-12402	中危	2:3.26-1+debu8u1	2:3.26-1+debu8u11	nss: Side channel vulnerabilities during RSA key generation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-07-09 15:15 修改: 2026-06-17 02:51
e2fslibs	CVE-2019-5188	中危	1.42.12-2	1.42.12-2+deb8u2	e2fsprogs: Out-of-bounds write in e2fsck/rehash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
e2fsprogs	CVE-2019-5094	中危	1.42.12-2	1.42.12-2+deb8u1	e2fsprogs: Crafted ext4 partition leads to out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
libpcre3	CVE-2017-7244	中危	2:8.35-3.3+deb8u4		pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c) 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7244 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-03-23 21:59 修改: 2026-06-17 01:23
libpcre3	CVE-2020-14155	中危	2:8.35-3.3+deb8u4		pcre: Integer overflow when parsing callout numeric arguments 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:54
e2fsprogs	CVE-2019-5188	中危	1.42.12-2	1.42.12-2+deb8u2	e2fsprogs: Out-of-bounds write in e2fsck/rehash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
systemd-sysv	CVE-2016-7796	中危	215-17+deb8u5	215-17+deb8u6	systemd: freeze when PID 1 receives a zero-length message over notify socket 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7796 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2016-10-13 14:59 修改: 2026-06-17 00:53
systemd-sysv	CVE-2018-1049	中危	215-17+deb8u5	215-17+deb8u8	systemd: automount: access to automounted volumes can lock up 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-16 21:29 修改: 2026-06-17 01:50
systemd-sysv	CVE-2019-6454	中危	215-17+deb8u5	215-17+deb8u10	systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:39
libgnutls-deb0-28	CVE-2018-10844	中危	3.3.8-6+deb8u3	3.3.30-0+deb8u1	gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10844 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-22 13:29 修改: 2026-06-17 01:34
tar	CVE-2018-20482	中危	1.27.1-2+b1	1.27.1-2+deb8u2	tar: Infinite read loop in sparse_dump_region function in sparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20482 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-12-26 18:29 修改: 2026-06-17 01:52
libgnutls-deb0-28	CVE-2018-10845	中危	3.3.8-6+deb8u3	3.3.30-0+deb8u1	gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10845 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-22 13:29 修改: 2026-06-17 01:34
libgnutls-deb0-28	CVE-2018-10846	中危	3.3.8-6+deb8u3	3.3.30-0+deb8u1	gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10846 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-08-22 13:29 修改: 2026-06-17 01:34
libgnutls-deb0-28	CVE-2018-16868	中危	3.3.8-6+deb8u3		gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16868 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44
libgssapi-krb5-2	CVE-2015-2694	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2694 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2015-05-25 19:59 修改: 2026-05-06 22:30
libgssapi-krb5-2	CVE-2016-3119	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: null pointer dereference in kadmin 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3119 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-03-26 01:59 修改: 2026-06-17 00:45
libgssapi-krb5-2	CVE-2016-3120	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: S4U2Self KDC crash when anon is restricted 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3120 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2016-08-01 02:59 修改: 2026-06-17 00:45
udev	CVE-2016-7796	中危	215-17+deb8u5	215-17+deb8u6	systemd: freeze when PID 1 receives a zero-length message over notify socket 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7796 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2016-10-13 14:59 修改: 2026-06-17 00:53
udev	CVE-2018-1049	中危	215-17+deb8u5	215-17+deb8u8	systemd: automount: access to automounted volumes can lock up 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-16 21:29 修改: 2026-06-17 01:50
udev	CVE-2019-6454	中危	215-17+deb8u5	215-17+deb8u10	systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:39
libgssapi-krb5-2	CVE-2017-11368	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u3	krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11368 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-08-09 18:29 修改: 2026-06-17 01:01
unzip	CVE-2014-9913	中危	6.0-16+deb8u2	6.0-16+deb8u3	unzip: methbuf[] buffer overflow in unzip's list_files() 漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9913 镜像层: sha256:0de9d866d419b5c7a38e6d60b8eca9eedfb5fee763834c9ec3cbfaae6a056a80 发布日期: 2017-01-18 17:59 修改: 2026-05-13 00:24
unzip	CVE-2016-9844	中危	6.0-16+deb8u2	6.0-16+deb8u3	unzip: methbuf[] buffer overflow in zipinfo's zi_short() 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9844 镜像层: sha256:0de9d866d419b5c7a38e6d60b8eca9eedfb5fee763834c9ec3cbfaae6a056a80 发布日期: 2017-01-18 17:59 修改: 2026-06-17 00:56
librtmp1	CVE-2015-8272	中危	2.4+20150115.gita107cef-1	2.4+20150115.gita107cef-1+deb8u1	RTMPDump 2.4 allows remote attackers to trigger a denial of service (N ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8272 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-04-13 14:59 修改: 2026-05-13 00:24
util-linux	CVE-2016-5011	中危	2.25.2-6		util-linux: Extended partition loop in MBR partition table leads to DOS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5011 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-04-11 15:59 修改: 2026-06-17 00:48
libgssapi-krb5-2	CVE-2018-20217	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: Reachable assertion in the KDC using S4U2Self requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52
libgssapi-krb5-2	CVE-2018-5710	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libgssapi-krb5-2	CVE-2018-5729	中危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00
libsmartcols1	CVE-2016-5011	中危	2.25.2-6		util-linux: Extended partition loop in MBR partition table leads to DOS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5011 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-04-11 15:59 修改: 2026-06-17 00:48
wget	CVE-2017-6508	中危	1.16-1+deb8u1	1.16-1+deb8u2	wget: CRLF injection in the url_parse function in url.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6508 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-03-07 08:59 修改: 2026-06-17 01:22
wget	CVE-2018-0494	中危	1.16-1+deb8u1	1.16-1+deb8u5	wget: Cookie injection allows malicious website to write arbitrary cookie entries into cookie jar 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0494 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-05-06 22:29 修改: 2026-06-17 01:30
apt	CVE-2016-1252	中危	1.0.9.8.3	1.0.9.8.4	The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1252 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-12-05 16:29 修改: 2026-06-17 00:41
libhogweed2	CVE-2018-16869	中危	2.7.1-5+deb8u1		nettle: Leaky data conversion exposing a manager oracle 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44
gcc-4.8-base	CVE-2017-11671	中危	4.8.4-1		gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11671 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-07-26 21:29 修改: 2026-06-17 01:02
bsdutils	CVE-2016-5011	中危	1:2.25.2-6		util-linux: Extended partition loop in MBR partition table leads to DOS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5011 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-04-11 15:59 修改: 2026-06-17 00:48
libdevmapper1.02.1	CVE-2020-8991	低危	2:1.02.90-2.2+deb8u1		lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8991 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-02-14 05:15 修改: 2026-06-17 03:27
libkrb5-3	CVE-2017-11462	低危	1.12.1+dfsg-19+deb8u2		krb5: Automatic sec context deletion could lead to double-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01
login	CVE-2018-7169	低危	1:4.2-3+deb8u1		shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02
libkrb5-3	CVE-2018-5730	低危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: DN container check bypass by supplying special crafted data 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00
inetutils-ping	CVE-2019-0053	低危	2:1.9.2.39.3a460-3		Insufficient validation of environment variables in the telnet client ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0053 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-07-11 20:15 修改: 2026-06-17 02:07
gnupg	CVE-2019-14855	低危	1.4.18-7+deb8u3		gnupg2: OpenPGP Key Certification Forgeries with SHA-1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19
dmsetup	CVE-2020-8991	低危	2:1.02.90-2.2+deb8u1		lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8991 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-02-14 05:15 修改: 2026-06-17 03:27
libnss3	CVE-2018-12384	低危	2:3.26-1+debu8u1		nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12384 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-04-29 15:29 修改: 2026-06-17 01:37
coreutils	CVE-2016-2781	低危	8.23-4		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
gpgv	CVE-2019-14855	低危	1.4.18-7+deb8u3		gnupg2: OpenPGP Key Certification Forgeries with SHA-1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19
libk5crypto3	CVE-2017-11462	低危	1.12.1+dfsg-19+deb8u2		krb5: Automatic sec context deletion could lead to double-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01
libk5crypto3	CVE-2018-5730	低危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: DN container check bypass by supplying special crafted data 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00
libpcre3	CVE-2017-7245	低危	2:8.35-3.3+deb8u4		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-03-23 21:59 修改: 2026-06-17 01:23
libpcre3	CVE-2017-7246	低危	2:8.35-3.3+deb8u4		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-03-23 21:59 修改: 2026-06-17 01:23
libtinfo5	CVE-2018-19211	低危	5.9+20140913-1+b1		ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
libtinfo5	CVE-2019-17594	低危	5.9+20140913-1+b1		ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libtinfo5	CVE-2019-17595	低危	5.9+20140913-1+b1		ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libssl1.0.0	CVE-2019-1563	低危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u12	openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libncursesw5	CVE-2018-19211	低危	5.9+20140913-1+b1		ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2018-19211	低危	5.9+20140913-1		ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
ncurses-base	CVE-2019-17594	低危	5.9+20140913-1		ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
systemd	CVE-2018-16888	低危	215-17+deb8u5		systemd: kills privileged process if unprivileged PIDFile was tampered 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
systemd	CVE-2018-6954	低危	215-17+deb8u5		systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02
systemd	CVE-2019-3815	低危	215-17+deb8u5	215-17+deb8u11	systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-28 15:29 修改: 2026-06-17 02:35
ncurses-base	CVE-2019-17595	低危	5.9+20140913-1		ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libncursesw5	CVE-2019-17594	低危	5.9+20140913-1+b1		ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libncursesw5	CVE-2019-17595	低危	5.9+20140913-1+b1		ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libkrb5support0	CVE-2017-11462	低危	1.12.1+dfsg-19+deb8u2		krb5: Automatic sec context deletion could lead to double-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01
libkrb5support0	CVE-2018-5730	低危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: DN container check bypass by supplying special crafted data 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00
libgssapi-krb5-2	CVE-2017-11462	低危	1.12.1+dfsg-19+deb8u2		krb5: Automatic sec context deletion could lead to double-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01
libgssapi-krb5-2	CVE-2018-5730	低危	1.12.1+dfsg-19+deb8u2	1.12.1+dfsg-19+deb8u5	krb5: DN container check bypass by supplying special crafted data 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00
libcups2	CVE-2019-8842	低危	1.7.5-11+deb8u1	1.7.5-11+deb8u8	A buffer overflow was addressed with improved bounds checking. This is ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8842 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-10-27 20:15 修改: 2026-06-17 02:42
libudev1	CVE-2018-16888	低危	215-17+deb8u5		systemd: kills privileged process if unprivileged PIDFile was tampered 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
systemd-sysv	CVE-2018-16888	低危	215-17+deb8u5		systemd: kills privileged process if unprivileged PIDFile was tampered 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
systemd-sysv	CVE-2018-6954	低危	215-17+deb8u5		systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02
systemd-sysv	CVE-2019-3815	低危	215-17+deb8u5	215-17+deb8u11	systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-28 15:29 修改: 2026-06-17 02:35
libudev1	CVE-2018-6954	低危	215-17+deb8u5		systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02
libudev1	CVE-2019-3815	低危	215-17+deb8u5	215-17+deb8u11	systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-28 15:29 修改: 2026-06-17 02:35
libncurses5	CVE-2018-19211	低危	5.9+20140913-1+b1		ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
libncurses5	CVE-2019-17594	低危	5.9+20140913-1+b1		ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libncurses5	CVE-2019-17595	低危	5.9+20140913-1+b1		ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
ncurses-bin	CVE-2018-19211	低危	5.9+20140913-1+b1		ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-11-12 19:29 修改: 2026-07-23 18:58
ncurses-bin	CVE-2019-17594	低危	5.9+20140913-1+b1		ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
ncurses-bin	CVE-2019-17595	低危	5.9+20140913-1+b1		ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-10-14 21:15 修改: 2026-07-27 13:43
libjpeg62-turbo	CVE-2019-2201	低危	1:1.3.1-12		libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress gigapixel images 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2201 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2019-11-13 18:15 修改: 2026-06-17 02:33
libsystemd0	CVE-2018-16888	低危	215-17+deb8u5		systemd: kills privileged process if unprivileged PIDFile was tampered 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
libx11-6	CVE-2016-7942	低危	2:1.6.2-3	2:1.6.2-3+deb8u1	libX11: Insufficient validation of server responses in XGetImage() 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7942 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
udev	CVE-2018-16888	低危	215-17+deb8u5		systemd: kills privileged process if unprivileged PIDFile was tampered 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
udev	CVE-2018-6954	低危	215-17+deb8u5		systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02
udev	CVE-2019-3815	低危	215-17+deb8u5	215-17+deb8u11	systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-28 15:29 修改: 2026-06-17 02:35
libx11-6	CVE-2016-7943	低危	2:1.6.2-3	2:1.6.2-3+deb8u1	libX11: Insufficient validation of server responses in FontNames 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7943 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
libsystemd0	CVE-2018-6954	低危	215-17+deb8u5		systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02
libsystemd0	CVE-2019-3815	低危	215-17+deb8u5	215-17+deb8u11	systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2019-01-28 15:29 修改: 2026-06-17 02:35
unzip	CVE-2019-13232	低危	6.0-16+deb8u2	6.0-16+deb8u4	unzip: overlapping of files in ZIP container leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13232 镜像层: sha256:0de9d866d419b5c7a38e6d60b8eca9eedfb5fee763834c9ec3cbfaae6a056a80 发布日期: 2019-07-04 13:15 修改: 2026-06-17 02:16
libjpeg62-turbo	CVE-2020-14152	低危	1:1.3.1-12		libjpeg: improper handling of max_memory_to_use setting can lead to excessive memory consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14152 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:54
libx11-data	CVE-2016-7942	低危	2:1.6.2-3	2:1.6.2-3+deb8u1	libX11: Insufficient validation of server responses in XGetImage() 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7942 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
libx11-data	CVE-2016-7943	低危	2:1.6.2-3	2:1.6.2-3+deb8u1	libX11: Insufficient validation of server responses in FontNames 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7943 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
libxi6	CVE-2016-7945	低危	2:1.7.4-1+b2	2:1.7.4-1+deb8u1	libXi: Insufficient validation of server responses result in Integer overflows 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7945 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
libxi6	CVE-2016-7946	低危	2:1.7.4-1+b2	2:1.7.4-1+deb8u1	libXi: Insufficient validation of server responses result in various data mishandlings 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7946 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
libxrender1	CVE-2016-7949	低危	1:0.9.8-1+b1		libXrender: Insufficient validation of server responses results in overflow of previously reserved memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7949 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
openssl	CVE-2019-1563	低危	1.0.1t-1+deb8u5	1.0.1t-1+deb8u12	openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libxrender1	CVE-2016-7950	低危	1:0.9.8-1+b1		libXrender: Insufficient validation of server responses results out-of-bounds write in XRenderQueryFilters 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7950 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
libxtst6	CVE-2016-7951	低危	2:1.2.2-1+b1	2:1.2.2-1+deb8u1	libXtst: Insufficient validation of server responses result in Integer overflows 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7951 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
libxtst6	CVE-2016-7952	低危	2:1.2.2-1+b1	2:1.2.2-1+deb8u1	libXtst: Insufficient validation of server responses result in various data mishandlings 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7952 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 2016-12-13 20:59 修改: 2026-06-17 00:53
passwd	CVE-2018-7169	低危	1:4.2-3+deb8u1		shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02
bash	CVE-2016-0634	低危	4.3-11+b1	4.3-11+deb8u1	bash: Arbitrary code execution via malicious hostname 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-0634 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 2017-08-28 15:29 修改: 2026-05-13 00:24
libbz2-1.0	DLA-1833-2	未知	1.0.6-7+b3	1.0.6-7+deb8u2	bzip2 - regression update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssh2-1	DLA-1730-2	未知	1.4.3-4.1+deb8u1	1.4.3-4.1+deb8u3	libssh2 - regression update 漏洞详情: 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
systemd	DLA-1762-2	未知	215-17+deb8u5	215-17+deb8u13	systemd - regression update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgcc1	DLA-1606-1	未知	1:4.9.2-10	4.9.2-10+deb8u2	gcc-4.9 - bugfix update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libpcre3	TEMP-0827564-93E4E3	未知	2:8.35-3.3+deb8u4		[Stack corruption from crafted pattern] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0827564-93E4E3 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libxdmcp6	DLA-2006-1	未知	1:1.1.1-1+b1	1:1.1.1-1+deb8u1	libxdmcp - security update 漏洞详情: 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgcc1	DSA-4117-1	未知	1:4.9.2-10	4.9.2-10+deb8u1	gcc-4.9 - update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
ca-certificates	DLA-1417-1	未知	20141019+deb8u1	20141019+deb8u4	ca-certificates - security update 漏洞详情: 镜像层: sha256:149636c850120e59e6bb79f2fc23ed423030afc73841c221906a147d61da11a9 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsystemd0	DLA-1762-2	未知	215-17+deb8u5	215-17+deb8u13	systemd - regression update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
udev	DLA-1762-2	未知	215-17+deb8u5	215-17+deb8u13	systemd - regression update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libudev1	DLA-1762-2	未知	215-17+deb8u5	215-17+deb8u13	systemd - regression update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libstdc++6	DLA-1606-1	未知	4.9.2-10	4.9.2-10+deb8u2	gcc-4.9 - bugfix update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libstdc++6	DSA-4117-1	未知	4.9.2-10	4.9.2-10+deb8u1	gcc-4.9 - update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
dbus	TEMP-0000000-4DA0A8	未知	1.8.20-0+deb8u1	1.8.22-0+deb8u1	[dbus format string vulnerability] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0000000-4DA0A8 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
unzip	DLA-1846-2	未知	6.0-16+deb8u2	6.0-16+deb8u5	unzip - regression update 漏洞详情: 镜像层: sha256:0de9d866d419b5c7a38e6d60b8eca9eedfb5fee763834c9ec3cbfaae6a056a80 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bzip2	DLA-1833-2	未知	1.0.6-7+b3	1.0.6-7+deb8u2	bzip2 - regression update 漏洞详情: 镜像层: sha256:0de9d866d419b5c7a38e6d60b8eca9eedfb5fee763834c9ec3cbfaae6a056a80 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gcc-4.9-base	DLA-1606-1	未知	4.9.2-10	4.9.2-10+deb8u2	gcc-4.9 - bugfix update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
systemd-sysv	DLA-1762-2	未知	215-17+deb8u5	215-17+deb8u13	systemd - regression update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
passwd	DSA-3793-2	未知	1:4.2-3+deb8u1	1:4.2-3+deb8u4	shadow - regression update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgcrypt20	TEMP-0000000-96B2E9	未知	1.6.3-2+deb8u2		[hardening for RSA-CRT leak] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0000000-96B2E9 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-1563-1	未知	2016f-0+deb8u1	2018g-0+deb8u1	tzdata - update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-1625-1	未知	2016f-0+deb8u1	2018i-0+deb8u1	tzdata - new upstream version 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-1744-1	未知	2016f-0+deb8u1	2019a-0+deb8u1	tzdata - new upstream version 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-1957-1	未知	2016f-0+deb8u1	2019c-0+deb8u1	tzdata - new upstream version 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login	DSA-3793-2	未知	1:4.2-3+deb8u1	1:4.2-3+deb8u4	shadow - regression update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libdbus-1-3	TEMP-0000000-4DA0A8	未知	1.8.20-0+deb8u1	1.8.22-0+deb8u1	[dbus format string vulnerability] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0000000-4DA0A8 镜像层: sha256:e4b690d9ba335e212b0ed37e32b15be0b1f3afdeeb4388d5b00cbd83f6785b9c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gcc-4.9-base	DSA-4117-1	未知	4.9.2-10	4.9.2-10+deb8u1	gcc-4.9 - update 漏洞详情: 镜像层: sha256:f96222d75c5563900bc4dd852179b720a0885de8f7a0619ba0ac76e92542bbc8 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Java (jar)

低危漏洞:11

中危漏洞:44

高危漏洞:85

严重漏洞:22

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
com.alibaba:fastjson	CVE-2025-70974	严重	1.2.45	1.2.48	fastjson: Fastjson: Remote Code Execution via JNDI Injection due to autoType mishandling 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70974 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-01-09 07:16 修改: 2026-07-15 02:17
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.9.9	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-07-29 12:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.9.9	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.9.9	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:22
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.9.9	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.9.9	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.9.9	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-10-07 00:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.9.9	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-10-12 21:15 修改: 2026-06-17 02:24
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.9.9	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-01-03 04:15 修改: 2026-06-17 02:30
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.9.9	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-02-10 21:56 修改: 2026-06-17 03:27
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9546	严重	2.9.9	2.9.10.4	jackson-databind: Serialization gadgets in shaded-hikari-config 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.9.9	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.9.9	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2020-1938	严重	9.0.21	9.0.31, 8.5.51, 7.0.100	tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1938 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-02-24 22:15 修改: 2026-06-17 03:02
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-24813	严重	9.0.21	11.0.3, 10.1.35, 9.0.99	tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-41293	严重	9.0.21	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43512	严重	9.0.21	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43515	严重	9.0.21	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: tomcat: Improper Authorization allows security bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.springframework.boot:spring-boot-starter-web	CVE-2022-22965	严重	2.1.6.RELEASE	2.5.12, 2.6.6	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-beans	CVE-2022-22965	严重	5.1.8.RELEASE	5.2.20.RELEASE, 5.3.18	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-web	CVE-2016-1000027	严重	5.1.8.RELEASE	6.0.0	spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42
org.springframework:spring-webmvc	CVE-2022-22965	严重	5.1.8.RELEASE	5.2.20.RELEASE, 5.3.18	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10672	高危	2.9.9	2.9.10.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-18 22:15 修改: 2026-06-17 02:48
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.9.9	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-18 22:15 修改: 2026-06-17 02:48
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10968	高危	2.9.9	2.9.10.4	jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-26 13:15 修改: 2026-06-17 02:48
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10969	高危	2.9.9	2.9.10.4	jackson-databind: Serialization gadgets in javax.swing.JEditorPane 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-26 13:15 修改: 2026-06-17 02:48
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11111	高危	2.9.9	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-31 05:15 修改: 2026-06-17 02:49
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11112	高危	2.9.9	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-31 05:15 修改: 2026-06-17 02:49
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11113	高危	2.9.9	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-31 05:15 修改: 2026-06-17 02:49
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11619	高危	2.9.9	2.9.10.4	jackson-databind: Serialization gadgets in org.springframework:spring-aop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-04-07 23:15 修改: 2026-06-17 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11620	高危	2.9.9	2.9.10.4	jackson-databind: Serialization gadgets in commons-jelly:commons-jelly 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-04-07 23:15 修改: 2026-06-17 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14060	高危	2.9.9	2.9.10.5	jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-06-14 21:15 修改: 2026-06-17 02:54
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14061	高危	2.9.9	2.9.10.5	jackson-databind: serialization in weblogic/oracle-aqjms 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-06-14 20:15 修改: 2026-06-17 02:54
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14062	高危	2.9.9	2.9.10.5	jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-06-14 20:15 修改: 2026-06-17 02:54
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14195	高危	2.9.9	2.9.10.5	jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-06-16 16:15 修改: 2026-06-17 02:54
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.9.9	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-08-25 18:15 修改: 2026-06-17 03:05
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.9.9	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-09-17 19:15 修改: 2026-06-17 03:06
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.9.9	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-12-03 17:15 修改: 2026-06-17 03:07
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.9.9	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-12-17 19:15 修改: 2026-06-17 03:13
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.9.9	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-12-17 19:15 修改: 2026-06-17 03:13
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.9.9	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-12-27 05:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.9.9	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.9.9	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.9.9	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.9.9	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.9.9	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.9.9	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.9.9	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.9.9	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.9.9	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.9.9	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.9.9	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.9.9	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.9.9	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-19 17:15 修改: 2026-07-24 14:27
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.9.9	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.9.9	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.alibaba:fastjson	CVE-2022-25845	高危	1.2.45	1.2.83	fastjson: autoType shutdown restriction bypass leads to deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25845 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-06-10 20:15 修改: 2026-06-17 04:34
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.9.9	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.9.9	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
ch.qos.logback:logback-core	CVE-2023-6378	高危	1.2.3	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
ch.qos.logback:logback-classic	CVE-2023-6378	高危	1.2.3	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
org.apache.tomcat.embed:tomcat-embed-core	CVE-2019-12418	高危	9.0.21	7.0.99, 8.5.49, 9.0.29	tomcat: local privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12418 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-12-23 18:15 修改: 2026-06-17 02:14
org.apache.tomcat.embed:tomcat-embed-core	CVE-2019-17563	高危	9.0.21	7.0.99, 8.5.50, 9.0.30	tomcat: Session fixation when using FORM authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17563 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-12-23 17:15 修改: 2026-06-17 02:24
org.apache.tomcat.embed:tomcat-embed-core	CVE-2020-11996	高危	9.0.21	10.0.0-M5, 9.0.35, 8.5.55	tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11996 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-06-26 17:15 修改: 2026-06-17 02:51
org.apache.tomcat.embed:tomcat-embed-core	CVE-2020-9484	高危	9.0.21	10.0.0-M5, 9.0.35, 8.5.55, 7.0.104	tomcat: deserialization flaw in session persistence storage leading to RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9484 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-05-20 19:15 修改: 2026-06-17 03:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2021-25122	高危	9.0.21	10.0.2, 9.0.43, 8.5.63	tomcat: Request mix-up with h2c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25122 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41
org.apache.tomcat.embed:tomcat-embed-core	CVE-2021-25329	高危	9.0.21	10.0.2, 9.0.41, 8.5.61, 7.0.108	tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25329 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41
org.apache.tomcat.embed:tomcat-embed-core	CVE-2022-42252	高危	9.0.21	8.5.83, 9.0.68, 10.0.27, 10.1.1	tomcat: request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-11-01 09:15 修改: 2026-06-17 05:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-24998	高危	9.0.21	10.1.5, 11.0.0-M5, 8.5.88, 9.0.71	FileUpload: FileUpload DoS with excessive parts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-46589	高危	9.0.21	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96	tomcat: HTTP request smuggling via malformed trailer headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-34750	高危	9.0.21	11.0.0-M21, 10.1.25, 9.0.90	tomcat: Improper Handling of Exceptional Conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-38286	高危	9.0.21	11.0.0-M21, 10.1.25, 9.0.90	tomcat: Denial of Service in Tomcat 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38286 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-11-07 08:15 修改: 2026-06-17 07:39
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-50379	高危	9.0.21	11.0.2, 10.1.34, 9.0.98	tomcat: RCE due to TOCTOU issue in JSP compilation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-56337	高危	9.0.21	11.0.2, 10.1.34, 9.0.98	tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-12-20 16:15 修改: 2026-06-17 08:12
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-48988	高危	9.0.21	11.0.8, 10.1.42, 9.0.106	tomcat: Apache Tomcat DoS in multipart upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-48989	高危	9.0.21	11.0.10, 10.1.44, 9.0.108	tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-52520	高危	9.0.21	11.0.9, 10.1.43, 9.0.107	tomcat: Apache Tomcat denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-53506	高危	9.0.21	9.0.107, 10.1.43, 11.0.9	tomcat: Apache Tomcat denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-55752	高危	9.0.21	11.0.11, 10.1.45, 9.0.109	tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-24880	高危	9.0.21	9.0.116, 10.1.52, 11.0.20	Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-41284	高危	9.0.21	9.0.118, 10.1.55, 11.0.22	tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-42498	高危	9.0.21	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43513	高危	9.0.21	9.0.118, 10.1.55, 11.0.22	tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-websocket	CVE-2020-13935	高危	9.0.21	7.0.105, 8.5.57, 9.0.37, 10.0.0-M7	tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13935 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-07-14 15:15 修改: 2026-06-17 02:53
org.springframework.boot:spring-boot	CVE-2022-27772	高危	2.1.6.RELEASE	2.2.11.RELEASE	Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27772 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-03-30 18:15 修改: 2026-06-17 04:37
org.springframework.boot:spring-boot	CVE-2025-22235	高危	2.1.6.RELEASE	3.3.11, 3.4.5	org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45
org.springframework.boot:spring-boot	CVE-2026-40973	高危	2.1.6.RELEASE	4.0.6, 3.5.14	Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10
org.springframework.boot:spring-boot-autoconfigure	CVE-2023-20883	高危	2.1.6.RELEASE	3.0.7, 2.7.12, 2.6.15, 2.5.15	spring-boot: Spring Boot Welcome Page DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.9.9	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-07-30 11:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.9.9	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-02 17:15 修改: 2026-06-17 02:19
org.springframework:spring-beans	CVE-2022-22970	高危	5.1.8.RELEASE	5.2.22.RELEASE, 5.3.20	springframework: DoS via data binding to multipartFile or servlet part 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29
org.springframework:spring-context	CVE-2022-22968	高危	5.1.8.RELEASE	5.3.19, 5.2.21.RELEASE	Framework: Data Binding Rules Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29
org.springframework:spring-expression	CVE-2023-20863	高危	5.1.8.RELEASE	6.0.8, 5.3.27, 5.2.24.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31
org.springframework:spring-expression	CVE-2026-41849	高危	5.1.8.RELEASE		spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41849 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-expression	CVE-2026-41850	高危	5.1.8.RELEASE	7.0.8, 6.2.19	spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14893	高危	2.9.9	2.9.10	jackson-databind: Serialization gadgets in classes of the xalan package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-03-02 21:15 修改: 2026-06-17 02:19
org.springframework:spring-web	CVE-2024-22243	高危	5.1.8.RELEASE	6.1.4, 6.0.17, 5.3.32	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web	CVE-2024-22259	高危	5.1.8.RELEASE	6.1.5, 6.0.18, 5.3.33	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web	CVE-2024-22262	高危	5.1.8.RELEASE	5.3.34, 6.0.19, 6.1.6	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.9.9	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-12-26 20:15 修改: 2026-06-17 02:48
org.springframework:spring-webmvc	CVE-2020-5398	高危	5.1.8.RELEASE	5.2.3.RELEASE, 5.1.13.RELEASE, 5.0.16.RELEASE	springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-5398 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-01-17 00:15 修改: 2026-06-17 03:21
org.springframework:spring-webmvc	CVE-2024-38819	高危	5.1.8.RELEASE	6.1.14	org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc	CVE-2026-41842	高危	5.1.8.RELEASE	7.0.8, 6.2.19	spring-framework: Spring Framework: Denial of Service when resolving static resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41845	高危	5.1.8.RELEASE	7.0.8, 6.2.19	org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.yaml:snakeyaml	CVE-2017-18640	高危	1.23	1.26	snakeyaml: Billion laughs attack via alias feature 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13
org.yaml:snakeyaml	CVE-2022-1471	高危	1.23	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml	CVE-2022-25857	高危	1.23	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34
org.hibernate.validator:hibernate-validator	CVE-2020-10693	中危	6.0.17.Final	6.1.5.Final, 6.0.20.Final	hibernate-validator: Improper input validation in the interpolation of constraint error messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10693 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-05-06 14:15 修改: 2026-06-17 02:48
org.hibernate.validator:hibernate-validator	CVE-2023-1932	中危	6.0.17.Final	6.2.0.Final	hibernate-validator: rendering of invalid html with SafeHTML leads to HTML injection and XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1932 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-11-07 10:15 修改: 2026-06-17 05:29
org.hibernate.validator:hibernate-validator	CVE-2025-35036	中危	6.0.17.Final	6.2.0.CR1, 7.0.0.CR1	hibernate-validator: Hibernate Validator Expression Language Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-35036 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-06-03 20:15 修改: 2026-06-17 09:14
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.9.9	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-06-24 16:15 修改: 2026-06-17 02:14
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.9.9	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-06-19 14:15 修改: 2026-06-17 02:15
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.9.9	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.9.9	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
ch.qos.logback:logback-core	CVE-2021-42550	中危	1.2.3	1.2.9	logback: remote code execution through JNDI call from within its configuration file 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-12-16 19:15 修改: 2026-06-17 04:09
com.fasterxml.jackson.core:jackson-core	CVE-2025-49128	中危	2.9.9	2.13.0	com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
ch.qos.logback:logback-core	CVE-2024-12798	中危	1.2.3	1.5.13, 1.3.15	logback-core: arbitrary code execution via JaninoEventEvaluator 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
org.apache.tomcat.embed:tomcat-embed-core	CVE-2020-1935	中危	9.0.21	7.0.100, 8.5.51, 9.0.31	tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1935 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2020-02-24 22:15 修改: 2026-06-17 03:02
org.springframework:spring-context	CVE-2024-38820	中危	5.1.8.RELEASE	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
org.apache.tomcat.embed:tomcat-embed-core	CVE-2021-24122	中危	9.0.21	10.0.0-M10, 9.0.40, 8.5.60, 7.0.107	tomcat: Information disclosure when using NTFS file system 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24122 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2021-01-14 15:15 修改: 2026-06-17 03:39
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-41080	中危	9.0.21	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11	tomcat: Open Redirect vulnerability in FORM authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-42795	中危	9.0.21	10.1.14, 9.0.81, 8.5.94, 11.0.0-M12	tomcat: improper cleaning of recycled objects could lead to information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24
org.springframework:spring-expression	CVE-2022-22950	中危	5.1.8.RELEASE	5.3.17, 5.2.20.RELEASE	spring-expression: Denial of service via specially crafted SpEL expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-expression	CVE-2023-20861	中危	5.1.8.RELEASE	6.0.7, 5.3.26, 5.2.23.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31
org.springframework:spring-expression	CVE-2024-38808	中危	5.1.8.RELEASE	5.3.39	spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41
org.springframework:spring-expression	CVE-2026-41851	中危	5.1.8.RELEASE	7.0.8, 6.2.19	Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-44487	中危	9.0.21	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-45648	中危	9.0.21	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	tomcat: incorrectly parsed http trailer headers can cause request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-21733	中危	9.0.21	8.5.64, 9.0.44	tomcat: Leaking of unrelated request bodies in default error page 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21733 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-01-19 11:15 修改: 2026-06-17 07:10
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-24549	中危	9.0.21	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17	Tomcat: HTTP/2 header handling DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14
org.springframework:spring-web	CVE-2024-38809	中危	5.1.8.RELEASE	5.3.38, 6.0.23, 6.1.12	org.springframework:spring-web: Spring Framework DoS via conditional HTTP request 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41
org.springframework:spring-web	CVE-2024-38820	中危	5.1.8.RELEASE	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-49125	中危	9.0.21	11.0.8, 10.1.42, 9.0.106	tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-52434	中危	9.0.21	9.0.107	tomcat: Apache Tomcat denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-55668	中危	9.0.21	11.0.8, 10.1.42, 9.0.106	org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-66614	中危	9.0.21	11.0.15, 10.1.50, 9.0.113	tomcat: Client certificate verification bypass due to virtual host mapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-25854	中危	9.0.21	9.0.116, 10.1.53, 11.0.20	Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25
org.springframework:spring-webmvc	CVE-2026-22745	中危	5.1.8.RELEASE	7.0.7, 6.2.18	spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc	CVE-2026-41841	中危	5.1.8.RELEASE	7.0.8, 6.2.19	Spring MVC and WebFlux applications are vulnerable to Information Disc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41843	中危	5.1.8.RELEASE	7.0.8, 6.2.19	spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41844	中危	5.1.8.RELEASE	7.0.8, 6.2.19	Spring Framework: Spring Framework: Open Redirect via crafted link 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41846	中危	5.1.8.RELEASE	7.0.8, 6.2.19	Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41853	中危	5.1.8.RELEASE	7.0.8, 6.2.19	Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
ch.qos.logback:logback-core	CVE-2025-11226	中危	1.2.3	1.5.19, 1.3.16	ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
org.apache.tomcat.embed:tomcat-embed-websocket	CVE-2024-23672	中危	9.0.21	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99	Tomcat: WebSocket DoS with incomplete closing handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13
org.hibernate.validator:hibernate-validator	CVE-2019-10219	中危	6.0.17.Final	6.1.0.Alpha6, 6.0.18.Final	hibernate-validator: safeHTML validator allows XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10219 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2019-11-08 15:15 修改: 2026-06-17 02:10
org.yaml:snakeyaml	CVE-2022-38749	中危	1.23	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38750	中危	1.23	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38751	中危	1.23	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38752	中危	1.23	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-41854	中危	1.23	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-46701	低危	9.0.21	9.0.105, 10.1.41, 11.0.7	tomcat: Apache Tomcat: Security constraint bypass for CGI scripts 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-61795	低危	9.0.21	11.0.12, 10.1.47, 9.0.110	tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50
org.springframework:spring-webmvc	CVE-2026-22741	低危	5.1.8.RELEASE	7.0.7, 6.2.18	Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43514	低危	9.0.21	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
ch.qos.logback:logback-core	CVE-2026-9828	低危	1.2.3	1.5.33	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
org.springframework:spring-expression	CVE-2026-41852	低危	5.1.8.RELEASE	7.0.8, 6.2.19	spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-context	CVE-2025-22233	低危	5.1.8.RELEASE	6.2.7, 6.1.20	CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45
org.springframework:spring-core	CVE-2026-41848	低危	5.1.8.RELEASE	7.0.8, 6.2.19	spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
ch.qos.logback:logback-core	CVE-2024-12801	低危	1.2.3	1.5.13, 1.3.15	logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
ch.qos.logback:logback-core	CVE-2026-10532	低危	1.2.3	1.5.34	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
ch.qos.logback:logback-core	CVE-2026-1225	低危	1.2.3	1.5.25	ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225 镜像层: sha256:dabfb21ea815bbbc9e0f05c831398a8fe0c43680d622938a3fa6f1e0ef94dacc 发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15