docker.io/vulhub/shiro:1.5.1 linux/amd64

docker.io/vulhub/shiro:1.5.1 - Trivy安全扫描结果 扫描时间: 2026-07-31 17:04
全部漏洞信息
低危漏洞:67 中危漏洞:183 高危漏洞:208 严重漏洞:62

系统OS: debian 10.7 扫描引擎: Trivy 扫描时间: 2026-07-31 17:04

docker.io/vulhub/shiro:1.5.1 (debian 10.7) (debian)
低危漏洞:57 中危漏洞:137 高危漏洞:158 严重漏洞:36
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2022-32221 严重 7.64.0-4+deb10u1 7.64.0-4+deb10u4 curl: POST following PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46

dpkg CVE-2022-1664 严重 1.19.7 1.19.8 Dpkg::Source::Archive in dpkg, the Debian package management system, b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1664

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-05-26 14:15 修改: 2026-06-17 04:22

libc-bin CVE-2021-33574 严重 2.28-10 2.28-10+deb10u2 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-05-25 22:15 修改: 2026-06-17 03:54

libc-bin CVE-2021-35942 严重 2.28-10 2.28-10+deb10u2 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

libc-bin CVE-2022-23218 严重 2.28-10 2.28-10+deb10u2 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libc-bin CVE-2022-23219 严重 2.28-10 2.28-10+deb10u2 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libc6 CVE-2021-33574 严重 2.28-10 2.28-10+deb10u2 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-05-25 22:15 修改: 2026-06-17 03:54

libc6 CVE-2021-35942 严重 2.28-10 2.28-10+deb10u2 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

libc6 CVE-2022-23218 严重 2.28-10 2.28-10+deb10u2 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libc6 CVE-2022-23219 严重 2.28-10 2.28-10+deb10u2 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libcurl4 CVE-2022-32221 严重 7.64.0-4+deb10u1 7.64.0-4+deb10u4 curl: POST following PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46

libdb5.3 CVE-2019-8457 严重 5.3.28+dfsg1-0.5 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42

libexpat1 CVE-2022-22822 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in addBinding in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22823 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in build_model in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22824 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in defineAttribute in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-23852 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in function XML_GetBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-24 02:15 修改: 2026-06-17 04:30

libexpat1 CVE-2022-25235 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-25236 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-25315 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Integer overflow in storeRawNames()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

libfreetype6 CVE-2022-27404 严重 2.9.1-3+deb10u2 2.9.1-3+deb10u3 FreeType: Buffer overflow in sfnt_init_face

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27404

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-04-22 14:15 修改: 2026-06-17 04:36

libgnutls30 CVE-2021-20231 严重 3.6.7-4+deb10u5 3.6.7-4+deb10u7 gnutls: Use after free in client key_share extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20231

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-03-12 19:15 修改: 2026-06-17 03:33

libgnutls30 CVE-2021-20232 严重 3.6.7-4+deb10u5 3.6.7-4+deb10u7 gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20232

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-03-12 19:15 修改: 2026-06-17 03:33

libksba8 CVE-2022-3515 严重 1.3.5-2 1.3.5-2+deb10u1 libksba: integer overflow may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3515

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libksba8 CVE-2022-47629 严重 1.3.5-2 1.3.5-2+deb10u2 libksba: integer overflow to code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47629

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-12-20 23:15 修改: 2026-06-17 05:13

libldap-2.4-2 CVE-2022-29155 严重 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u7 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-05-04 20:15 修改: 2026-06-17 04:39

libldap-common CVE-2022-29155 严重 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u7 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-05-04 20:15 修改: 2026-06-17 04:39

liblz4-1 CVE-2021-3520 严重 1.8.3-1 1.8.3-1+deb10u1 lz4: memory corruption due to an integer overflow bug caused by memmove argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3520

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-06-02 13:15 修改: 2026-06-17 04:05

libpcre2-8-0 CVE-2022-1586 严重 10.32-5 10.32-5+deb10u1 pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1586

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-05-16 21:15 修改: 2026-06-17 04:22

libpcre2-8-0 CVE-2022-1587 严重 10.32-5 10.32-5+deb10u1 pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1587

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-05-16 21:15 修改: 2026-06-17 04:22

libsqlite3-0 CVE-2020-35527 严重 3.27.2-3+deb10u1 3.27.2-3+deb10u2 sqlite: Out of bounds access during table rename

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35527

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-09-01 18:15 修改: 2026-06-17 03:13

libssl1.1 CVE-2021-3711 严重 1.1.1d-0+deb10u4 1.1.1d-0+deb10u7 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

libtasn1-6 CVE-2021-46848 严重 4.13-3 4.13-3+deb10u1 libtasn1: Out-of-bound access in ETYPE_OK

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-10-24 14:15 修改: 2026-06-17 04:15

openssl CVE-2021-3711 严重 1.1.1d-0+deb10u4 1.1.1d-0+deb10u7 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

wget CVE-2024-38428 严重 1.20.1-1.1 wget: Misinterpretation of input may lead to improper behavior

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38428

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-06-16 03:15 修改: 2026-06-17 07:40

zlib1g CVE-2022-37434 严重 1:1.2.11.dfsg-1 1:1.2.11.dfsg-1+deb10u2 zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-08-05 07:15 修改: 2026-07-14 12:16

zlib1g CVE-2023-45853 严重 1:1.2.11.dfsg-1 zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-10-14 02:15 修改: 2026-07-14 13:17

libc6 CVE-2021-3999 高危 2.28-10 2.28-10+deb10u2 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

libc6 CVE-2024-2961 高危 2.28-10 2.28-10+deb10u3 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25

libc6 CVE-2024-33599 高危 2.28-10 2.28-10+deb10u4 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libcom-err2 CVE-2022-1304 高危 1.44.5-1+deb10u3 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

curl CVE-2023-27533 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u6 curl: TELNET option IAC injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl4 CVE-2020-8169 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 libcurl: partial password leak over DNS on HTTP redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8169

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25

libcurl4 CVE-2020-8177 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25

libcurl4 CVE-2020-8231 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libcurl4 CVE-2020-8285 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libcurl4 CVE-2020-8286 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Inferior OCSP verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libcurl4 CVE-2021-22946 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libcurl4 CVE-2022-22576 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28

libcurl4 CVE-2022-27781 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2022-27782 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2023-27533 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u6 curl: TELNET option IAC injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl4 CVE-2023-27534 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u9 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

curl CVE-2023-27534 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u9 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

curl CVE-2020-8169 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 libcurl: partial password leak over DNS on HTTP redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8169

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25

e2fsprogs CVE-2022-1304 高危 1.44.5-1+deb10u3 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

gcc-8-base CVE-2018-12886 高危 8.3.0-6 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38

gcc-8-base CVE-2019-15847 高危 8.3.0-6 gcc: POWER9 "DARN" RNG intrinsic produces repeated output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15847

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-09-02 23:15 修改: 2026-06-17 02:21

gzip CVE-2022-1271 高危 1.9-3 1.9-3+deb10u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

curl CVE-2020-8177 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25

curl CVE-2020-8231 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libexpat1 CVE-2021-45960 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Large number of prefixed XML attributes on a single tag can crash libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-01 19:15 修改: 2026-06-17 04:14

libexpat1 CVE-2021-46143 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in doProlog in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-06 04:15 修改: 2026-06-17 04:14

libexpat1 CVE-2022-22825 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in lookup in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22826 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in nextScaffoldPart in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22827 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in storeAtts in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-23990 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: integer overflow in the doProlog function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-01-26 19:15 修改: 2026-06-17 04:31

libexpat1 CVE-2022-25314 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Integer overflow in copyString()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25314

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-40674 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u5 expat: a use-after-free in the doContent function in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-09-14 11:15 修改: 2026-06-17 05:01

libexpat1 CVE-2022-43680 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u6 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-10-24 14:15 修改: 2026-06-17 05:07

libexpat1 CVE-2023-52425 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u7 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42

libext2fs2 CVE-2022-1304 高危 1.44.5-1+deb10u3 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

curl CVE-2020-8285 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libfreetype6 CVE-2022-27405 高危 2.9.1-3+deb10u2 2.9.1-3+deb10u3 FreeType: Segmentation violation via FNT_Size_Request

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27405

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

libfreetype6 CVE-2022-27406 高危 2.9.1-3+deb10u2 2.9.1-3+deb10u3 Freetype: Segmentation violation via FT_Request_Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27406

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

libgcc1 CVE-2018-12886 高危 1:8.3.0-6 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38

libgcc1 CVE-2019-15847 高危 1:8.3.0-6 gcc: POWER9 "DARN" RNG intrinsic produces repeated output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15847

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-09-02 23:15 修改: 2026-06-17 02:21

libgcrypt20 CVE-2021-33560 高危 1.8.4-5 libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-06-08 11:15 修改: 2026-06-17 03:54

libgmp10 CVE-2021-43618 高危 2:6.1.2+dfsg-4 2:6.1.2+dfsg-4+deb10u1 gmp: Integer overflow and resultant buffer overflow via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-11-15 04:15 修改: 2026-06-17 04:11

curl CVE-2020-8286 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Inferior OCSP verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libc-bin CVE-2020-1751 高危 2.28-10 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02

libgnutls30 CVE-2020-24659 高危 3.6.7-4+deb10u5 3.6.7-4+deb10u7 gnutls: Heap buffer overflow in handshake with no_renegotiation alert sent

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24659

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-09-04 15:15 修改: 2026-06-17 03:05

libgnutls30 CVE-2022-2509 高危 3.6.7-4+deb10u5 3.6.7-4+deb10u9 gnutls: Double free during gnutls_pkcs7_verify

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-08-01 14:15 修改: 2026-06-17 04:42

libgnutls30 CVE-2023-0361 高危 3.6.7-4+deb10u5 3.6.7-4+deb10u10 gnutls: timing side-channel in the TLS RSA key exchange code

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-02-15 18:15 修改: 2026-06-17 05:25

libgnutls30 CVE-2024-0553 高危 3.6.7-4+deb10u5 3.6.7-4+deb10u12 gnutls: incomplete fix for CVE-2023-5981

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-01-16 12:15 修改: 2026-06-17 06:53

libgssapi-krb5-2 CVE-2021-36222 高危 1.17-3+deb10u1 1.17-3+deb10u2 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libgssapi-krb5-2 CVE-2022-42898 高危 1.17-3+deb10u1 1.17-3+deb10u5 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libhogweed4 CVE-2021-20305 高危 3.4.1-1 3.4.1-1+deb10u1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33

libhogweed4 CVE-2021-3580 高危 3.4.1-1 3.4.1-1+deb10u1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

libidn2-0 CVE-2019-12290 高危 2.0.5-1+deb10u1 GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specifi ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12290

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-10-22 16:15 修改: 2026-06-17 02:14

libk5crypto3 CVE-2021-36222 高危 1.17-3+deb10u1 1.17-3+deb10u2 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libk5crypto3 CVE-2022-42898 高危 1.17-3+deb10u1 1.17-3+deb10u5 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libkrb5-3 CVE-2021-36222 高危 1.17-3+deb10u1 1.17-3+deb10u2 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libkrb5-3 CVE-2022-42898 高危 1.17-3+deb10u1 1.17-3+deb10u5 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libkrb5support0 CVE-2021-36222 高危 1.17-3+deb10u1 1.17-3+deb10u2 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libkrb5support0 CVE-2022-42898 高危 1.17-3+deb10u1 1.17-3+deb10u5 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libc-bin CVE-2020-1752 高危 2.28-10 2.28-10+deb10u2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02

libc-bin CVE-2020-6096 高危 2.28-10 2.28-10+deb10u2 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22

libc-bin CVE-2021-3326 高危 2.28-10 2.28-10+deb10u2 glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-01-27 20:15 修改: 2026-06-17 04:04

libldap-2.4-2 CVE-2020-36221 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36221

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36222 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Assertion failure in slapd in the saslAuthzTo validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36222

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36223 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Out-of-bounds read in Values Return Filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36223

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36224 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Invalid pointer free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36224

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36225 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Double free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36225

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36226 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Denial of service via length miscalculation in slap_parse_user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36226

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36227 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Infinite loop in slapd with the cancel_extop Cancel operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36227

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36228 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36228

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36229 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Type confusion in ad_keystring in ad.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36229

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2020-36230 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Assertion failure in ber_next_element in decode.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36230

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-2.4-2 CVE-2021-27212 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u6 openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27212

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-02-14 03:15 修改: 2026-06-17 03:44

libldap-2.4-2 CVE-2023-2953 高危 2.4.47+dfsg-3+deb10u4 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-05-30 22:15 修改: 2026-06-17 05:53

libc-bin CVE-2021-3999 高危 2.28-10 2.28-10+deb10u2 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

libldap-common CVE-2020-36221 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36221

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36222 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Assertion failure in slapd in the saslAuthzTo validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36222

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36223 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Out-of-bounds read in Values Return Filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36223

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36224 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Invalid pointer free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36224

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36225 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Double free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36225

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36226 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Denial of service via length miscalculation in slap_parse_user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36226

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36227 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Infinite loop in slapd with the cancel_extop Cancel operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36227

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36228 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36228

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36229 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Type confusion in ad_keystring in ad.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36229

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2020-36230 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u5 openldap: Assertion failure in ber_next_element in decode.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36230

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15

libldap-common CVE-2021-27212 高危 2.4.47+dfsg-3+deb10u4 2.4.47+dfsg-3+deb10u6 openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27212

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-02-14 03:15 修改: 2026-06-17 03:44

libldap-common CVE-2023-2953 高危 2.4.47+dfsg-3+deb10u4 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-05-30 22:15 修改: 2026-06-17 05:53

libc-bin CVE-2024-2961 高危 2.28-10 2.28-10+deb10u3 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25

liblzma5 CVE-2022-1271 高危 5.2.4-1 5.2.4-1+deb10u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

libncursesw6 CVE-2021-39537 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

libncursesw6 CVE-2022-29458 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u3 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

libncursesw6 CVE-2023-29491 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

libnettle6 CVE-2021-20305 高危 3.4.1-1 3.4.1-1+deb10u1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33

libnettle6 CVE-2021-3580 高危 3.4.1-1 3.4.1-1+deb10u1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

libnghttp2-14 CVE-2020-11080 高危 1.36.0-2+deb10u1 1.36.0-2+deb10u2 nghttp2: overly large SETTINGS frames can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11080

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-06-03 23:15 修改: 2026-06-17 02:49

libnghttp2-14 CVE-2023-44487 高危 1.36.0-2+deb10u1 1.36.0-2+deb10u2 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27

libc-bin CVE-2024-33599 高危 2.28-10 2.28-10+deb10u4 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

curl CVE-2021-22946 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libpcre2-8-0 CVE-2019-20454 高危 10.32-5 10.32-5+deb10u1 pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20454

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-02-14 14:15 修改: 2026-06-17 02:30

libsasl2-2 CVE-2022-24407 高危 2.1.27+dfsg-1+deb10u1 2.1.27+dfsg-1+deb10u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31

libsasl2-modules-db CVE-2022-24407 高危 2.1.27+dfsg-1+deb10u1 2.1.27+dfsg-1+deb10u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31

curl CVE-2022-22576 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28

libsqlite3-0 CVE-2019-19603 高危 3.27.2-3+deb10u1 sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19603

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2019-12-09 19:15 修改: 2026-06-17 02:26

libsqlite3-0 CVE-2020-35525 高危 3.27.2-3+deb10u1 3.27.2-3+deb10u2 sqlite: Null pointer derreference in src/select.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35525

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-09-01 18:15 修改: 2026-06-17 03:13

libsqlite3-0 CVE-2023-7104 高危 3.27.2-3+deb10u1 sqlite: heap-buffer-overflow at sessionfuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2023-12-29 10:15 修改: 2026-06-17 06:52

libss2 CVE-2022-1304 高危 1.44.5-1+deb10u3 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

libssh2-1 CVE-2019-13115 高危 1.8.0-2.1 1.8.0-2.1+deb10u1 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13115

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2019-07-16 18:15 修改: 2026-06-17 02:16

libssh2-1 CVE-2019-17498 高危 1.8.0-2.1 1.8.0-2.1+deb10u1 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17498

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2019-10-21 22:15 修改: 2026-06-17 02:24

libssh2-1 CVE-2020-22218 高危 1.8.0-2.1 1.8.0-2.1+deb10u1 libssh2: use-of-uninitialized-value in _libssh2_transport_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-22218

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-08-22 19:16 修改: 2026-06-17 03:04

curl CVE-2022-27781 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libssl1.1 CVE-2021-23840 高危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u5 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

libssl1.1 CVE-2021-3712 高危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u7 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2022-0778 高危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u8 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

libssl1.1 CVE-2022-1292 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u2 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

libssl1.1 CVE-2022-2068 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u3 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-21 15:15 修改: 2026-06-17 04:41

libssl1.1 CVE-2022-4450 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

libssl1.1 CVE-2023-0215 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0286 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0464 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u5 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

libstdc++6 CVE-2018-12886 高危 8.3.0-6 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38

libstdc++6 CVE-2019-15847 高危 8.3.0-6 gcc: POWER9 "DARN" RNG intrinsic produces repeated output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15847

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-09-02 23:15 修改: 2026-06-17 02:21

libsystemd0 CVE-2019-3843 高危 241-7~deb10u5 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libsystemd0 CVE-2019-3844 高危 241-7~deb10u5 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libsystemd0 CVE-2023-26604 高危 241-7~deb10u5 241-7~deb10u9 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-03-03 16:15 修改: 2026-06-17 05:43

libsystemd0 CVE-2023-50387 高危 241-7~deb10u5 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39

libsystemd0 CVE-2023-50868 高危 241-7~deb10u5 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40

curl CVE-2022-27782 高危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libtinfo6 CVE-2021-39537 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

libtinfo6 CVE-2022-29458 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u3 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

libtinfo6 CVE-2023-29491 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

libudev1 CVE-2019-3843 高危 241-7~deb10u5 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libudev1 CVE-2019-3844 高危 241-7~deb10u5 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libudev1 CVE-2023-26604 高危 241-7~deb10u5 241-7~deb10u9 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-03-03 16:15 修改: 2026-06-17 05:43

libudev1 CVE-2023-50387 高危 241-7~deb10u5 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39

libudev1 CVE-2023-50868 高危 241-7~deb10u5 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40

ncurses-base CVE-2021-39537 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

ncurses-base CVE-2022-29458 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u3 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

ncurses-base CVE-2023-29491 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2021-39537 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2022-29458 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u3 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2023-29491 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

libc6 CVE-2020-1751 高危 2.28-10 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02

openssl CVE-2021-23840 高危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u5 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl CVE-2021-3712 高危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u7 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

openssl CVE-2022-0778 高危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u8 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

openssl CVE-2022-1292 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u2 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

openssl CVE-2022-2068 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u3 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-21 15:15 修改: 2026-06-17 04:41

openssl CVE-2022-4450 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl CVE-2023-0215 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl CVE-2023-0286 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl CVE-2023-0464 高危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u5 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

perl-base CVE-2020-16156 高危 5.28.1-6+deb10u1 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57

perl-base CVE-2023-31484 高危 5.28.1-6+deb10u1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57

libc6 CVE-2020-1752 高危 2.28-10 2.28-10+deb10u2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02

xz-utils CVE-2022-1271 高危 5.2.4-1 5.2.4-1+deb10u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

libc6 CVE-2020-6096 高危 2.28-10 2.28-10+deb10u2 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22

libc6 CVE-2021-3326 高危 2.28-10 2.28-10+deb10u2 glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-01-27 20:15 修改: 2026-06-17 04:04

zlib1g CVE-2018-25032 高危 1:1.2.11.dfsg-1 1:1.2.11.dfsg-1+deb10u1 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-03-25 09:15 修改: 2026-07-14 12:16

bsdutils CVE-2021-37600 中危 1:2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

curl CVE-2021-22876 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-04-01 18:15 修改: 2026-06-17 03:37

fdisk CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libmount1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

curl CVE-2021-22947 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

curl CVE-2022-27774 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u4 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

gnupg CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

libncursesw6 CVE-2020-19189 中危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-08-22 19:16 修改: 2026-07-23 18:58

libncursesw6 CVE-2023-50495 中危 6.1+20181013-2+deb10u2 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libexpat1 CVE-2022-25313 中危 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Stack exhaustion in doctype parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

gnupg-l10n CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

libfdisk1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

gnupg-utils CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

libnghttp2-14 CVE-2024-28182 中危 1.36.0-2+deb10u1 1.36.0-2+deb10u3 nghttp2: CONTINUATION frames DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-04-04 15:15 修改: 2026-06-17 07:21

libpam-modules CVE-2024-22365 中危 1.3.1-5 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11

libpam-modules-bin CVE-2024-22365 中危 1.3.1-5 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11

libpam-runtime CVE-2024-22365 中危 1.3.1-5 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11

libpam0g CVE-2024-22365 中危 1.3.1-5 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11

gpg CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gpg-agent CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gpg-wks-client CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

libpcre3 CVE-2020-14155 中危 2:8.39-12 pcre: Integer overflow when parsing callout numeric arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:54

libc6 CVE-2016-10228 中危 2.28-10 2.28-10+deb10u2 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2017-03-02 01:59 修改: 2026-06-17 00:39

libc6 CVE-2019-25013 中危 2.28-10 2.28-10+deb10u2 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-01-04 18:15 修改: 2026-06-17 02:31

libsmartcols1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libgcrypt20 CVE-2019-13627 中危 1.8.4-5 libgcrypt: ECDSA timing attack allowing private key leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13627

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-09-25 15:15 修改: 2026-06-17 02:17

libgcrypt20 CVE-2021-40528 中危 1.8.4-5 1.8.4-5+deb10u1 libgcrypt: ElGamal implementation allows plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40528

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-09-06 19:15 修改: 2026-06-17 04:07

libc6 CVE-2020-10029 中危 2.28-10 2.28-10+deb10u2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47

libc6 CVE-2020-27618 中危 2.28-10 2.28-10+deb10u2 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-02-26 23:15 修改: 2026-06-17 03:09

libsqlite3-0 CVE-2019-19645 中危 3.27.2-3+deb10u1 sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19645

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2019-12-09 16:15 修改: 2026-06-17 02:26

libsqlite3-0 CVE-2019-19924 中危 3.27.2-3+deb10u1 sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19924

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2019-12-24 16:15 修改: 2026-06-17 02:27

libsqlite3-0 CVE-2020-13631 中危 3.27.2-3+deb10u1 sqlite: Virtual table can be renamed into the name of one of its shadow tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13631

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-05-27 15:15 修改: 2026-06-17 02:53

libc6 CVE-2023-4806 中危 2.28-10 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16

libc6 CVE-2023-4813 中危 2.28-10 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38

libc6 CVE-2024-33600 中危 2.28-10 2.28-10+deb10u4 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

gpg-wks-server CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gpgconf CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

libgnutls30 CVE-2021-4209 中危 3.6.7-4+deb10u5 3.6.7-4+deb10u9 GnuTLS: Null pointer dereference in MD_UPDATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19

libgnutls30 CVE-2023-5981 中危 3.6.7-4+deb10u5 3.6.7-4+deb10u11 gnutls: timing side-channel in the RSA-PSK authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-11-28 12:15 修改: 2026-06-17 06:49

gpgsm CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gpgv CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

libgssapi-krb5-2 CVE-2021-37750 中危 1.17-3+deb10u1 1.17-3+deb10u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libgssapi-krb5-2 CVE-2023-36054 中危 1.17-3+deb10u1 1.17-3+deb10u6 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05

curl CVE-2022-27776 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

iproute2 CVE-2019-20795 中危 4.20.0-2 iproute: use-after-free in get_netnsid_from_name in ip/ipnetns.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20795

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-05-09 21:15 修改: 2026-06-17 02:31

libblkid1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libssl1.1 CVE-2019-1551 中危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u5 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28

libssl1.1 CVE-2021-23841 中危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u5 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

libssl1.1 CVE-2021-3449 中危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u6 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2021-4160 中危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u8 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:19

libssl1.1 CVE-2022-2097 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

libssl1.1 CVE-2022-4304 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

libssl1.1 CVE-2023-0465 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u5 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0466 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u5 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-2650 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u5 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53

libssl1.1 CVE-2023-3446 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u6 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14

libssl1.1 CVE-2023-3817 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u6 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14

libssl1.1 CVE-2023-5678 中危 1.1.1d-0+deb10u4 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49

libssl1.1 CVE-2024-0727 中危 1.1.1d-0+deb10u4 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54

curl CVE-2022-32206 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

curl CVE-2022-32208 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libk5crypto3 CVE-2021-37750 中危 1.17-3+deb10u1 1.17-3+deb10u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libk5crypto3 CVE-2023-36054 中危 1.17-3+deb10u1 1.17-3+deb10u6 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05

curl CVE-2022-43552 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u4 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06

curl CVE-2023-23916 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u5 curl: HTTP multi-header compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38

libkrb5-3 CVE-2021-37750 中危 1.17-3+deb10u1 1.17-3+deb10u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libsystemd0 CVE-2021-33910 中危 241-7~deb10u5 241-7~deb10u8 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-20 19:15 修改: 2026-06-17 03:55

libsystemd0 CVE-2021-3997 中危 241-7~deb10u5 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

libsystemd0 CVE-2022-3821 中危 241-7~deb10u5 241-7~deb10u10 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

libsystemd0 CVE-2022-4415 中危 241-7~deb10u5 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20

libsystemd0 CVE-2023-7008 中危 241-7~deb10u5 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

libkrb5-3 CVE-2023-36054 中危 1.17-3+deb10u1 1.17-3+deb10u6 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05

curl CVE-2023-27535 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u6 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

curl CVE-2023-27536 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u6 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libkrb5support0 CVE-2021-37750 中危 1.17-3+deb10u1 1.17-3+deb10u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libtinfo6 CVE-2020-19189 中危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-08-22 19:16 修改: 2026-07-23 18:58

libtinfo6 CVE-2023-50495 中危 6.1+20181013-2+deb10u2 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libkrb5support0 CVE-2023-36054 中危 1.17-3+deb10u1 1.17-3+deb10u6 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05

libcurl4 CVE-2021-22876 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-04-01 18:15 修改: 2026-06-17 03:37

libcurl4 CVE-2021-22947 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libcurl4 CVE-2022-27774 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u4 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2022-27776 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libudev1 CVE-2021-33910 中危 241-7~deb10u5 241-7~deb10u8 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-20 19:15 修改: 2026-06-17 03:55

libudev1 CVE-2021-3997 中危 241-7~deb10u5 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

libudev1 CVE-2022-3821 中危 241-7~deb10u5 241-7~deb10u10 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

libudev1 CVE-2022-4415 中危 241-7~deb10u5 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20

libudev1 CVE-2023-7008 中危 241-7~deb10u5 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

libuuid1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libzstd1 CVE-2021-24031 中危 1.3.8+dfsg-3 1.3.8+dfsg-3+deb10u1 zstd: adds read permissions to files while being compressed or uncompressed

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24031

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-03-04 21:15 修改: 2026-06-17 03:39

libzstd1 CVE-2021-24032 中危 1.3.8+dfsg-3 1.3.8+dfsg-3+deb10u2 zstd: Race condition allows attacker to access world-readable destination file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24032

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-03-04 21:15 修改: 2026-06-17 03:39

login CVE-2023-4641 中危 1:4.5-1.1 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38

mount CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libcurl4 CVE-2022-32206 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libcurl4 CVE-2022-32208 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libcurl4 CVE-2022-43552 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u4 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06

ncurses-base CVE-2020-19189 中危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-08-22 19:16 修改: 2026-07-23 18:58

ncurses-base CVE-2023-50495 中危 6.1+20181013-2+deb10u2 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libcurl4 CVE-2023-23916 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u5 curl: HTTP multi-header compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38

libcurl4 CVE-2023-27535 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u6 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl4 CVE-2023-27536 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u6 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

ncurses-bin CVE-2020-19189 中危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-08-22 19:16 修改: 2026-07-23 18:58

ncurses-bin CVE-2023-50495 中危 6.1+20181013-2+deb10u2 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libcurl4 CVE-2023-27538 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u6 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl4 CVE-2023-28321 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u7 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

libcurl4 CVE-2023-46218 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u8 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30

libcurl4 CVE-2024-2398 中危 7.64.0-4+deb10u1 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24

curl CVE-2023-27538 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u6 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libelf1 CVE-2020-21047 中危 0.176-1.1 0.176-1.1+deb10u1 The libcpu component which is used by libasm of elfutils version 0.177 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21047

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-08-22 19:16 修改: 2026-06-17 03:03

curl CVE-2023-28321 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u7 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

curl CVE-2023-46218 中危 7.64.0-4+deb10u1 7.64.0-4+deb10u8 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30

curl CVE-2024-2398 中危 7.64.0-4+deb10u1 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24

dirmngr CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

openssl CVE-2019-1551 中危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u5 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28

openssl CVE-2021-23841 中危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u5 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl CVE-2021-3449 中危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u6 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05

openssl CVE-2021-4160 中危 1.1.1d-0+deb10u4 1.1.1d-0+deb10u8 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:19

openssl CVE-2022-2097 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

openssl CVE-2022-4304 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u4 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl CVE-2023-0465 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u5 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

openssl CVE-2023-0466 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u5 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

openssl CVE-2023-2650 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u5 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53

openssl CVE-2023-3446 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u6 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14

openssl CVE-2023-3817 中危 1.1.1d-0+deb10u4 1.1.1n-0+deb10u6 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14

openssl CVE-2023-5678 中危 1.1.1d-0+deb10u4 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49

openssl CVE-2024-0727 中危 1.1.1d-0+deb10u4 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54

passwd CVE-2023-4641 中危 1:4.5-1.1 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38

libc-bin CVE-2016-10228 中危 2.28-10 2.28-10+deb10u2 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2017-03-02 01:59 修改: 2026-06-17 00:39

libc-bin CVE-2019-25013 中危 2.28-10 2.28-10+deb10u2 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-01-04 18:15 修改: 2026-06-17 02:31

unzip CVE-2022-0529 中危 6.0-23+deb10u1 6.0-23+deb10u3 unzip: Heap out-of-bound writes and reads during conversion of wide string to local string

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0529

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20

unzip CVE-2022-0530 中危 6.0-23+deb10u1 6.0-23+deb10u3 unzip: SIGSEGV during the conversion of an utf-8 string to a local string

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0530

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20

util-linux CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libc-bin CVE-2020-10029 中危 2.28-10 2.28-10+deb10u2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47

wget CVE-2021-31879 中危 1.20.1-1.1 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52

libc-bin CVE-2020-27618 中危 2.28-10 2.28-10+deb10u2 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-02-26 23:15 修改: 2026-06-17 03:09

libc-bin CVE-2023-4806 中危 2.28-10 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16

libc-bin CVE-2023-4813 中危 2.28-10 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38

libc-bin CVE-2024-33600 中危 2.28-10 2.28-10+deb10u4 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libblkid1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

curl CVE-2023-28322 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u8 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

login CVE-2018-7169 低危 1:4.5-1.1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02

login CVE-2023-29383 低危 1:4.5-1.1 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

gnupg-l10n CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

mount CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

curl CVE-2023-38546 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u7 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10

gnupg-utils CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

bsdutils CVE-2024-28085 低危 1:2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

gpg CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

dirmngr CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

libfdisk1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

gpg-agent CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

coreutils CVE-2016-2781 低危 8.30-3 coreutils: Non-privileged session can escape to the parent session in chroot

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

gpg-wks-client CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

curl CVE-2020-8284 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

gpg-wks-server CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

curl CVE-2021-22890 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: TLS 1.3 session ticket mix-up with HTTPS proxy host

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22890

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-04-01 18:15 修改: 2026-06-17 03:37

libssl1.1 CVE-2024-2511 低危 1.1.1d-0+deb10u4 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

libssl1.1 CVE-2024-4741 低危 1.1.1d-0+deb10u4 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

gpgconf CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

libc6 CVE-2019-19126 低危 2.28-10 2.28-10+deb10u2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26

libcurl4 CVE-2020-8284 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26

libcurl4 CVE-2021-22890 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u2 curl: TLS 1.3 session ticket mix-up with HTTPS proxy host

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22890

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-04-01 18:15 修改: 2026-06-17 03:37

libcurl4 CVE-2021-22898 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37

libsepol1 CVE-2021-36084 低危 2.8-1 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36085 低危 2.8-1 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36086 低危 2.8-1 libsepol: use-after-free in cil_reset_classpermission()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36087 低危 2.8-1 libsepol: heap-based buffer overflow in ebitmap_match_any()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libcurl4 CVE-2021-22924 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

libsmartcols1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

libcurl4 CVE-2022-35252 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u4 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51

libcurl4 CVE-2023-28322 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u8 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

libcurl4 CVE-2023-38546 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u7 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10

libc6 CVE-2021-27645 低危 2.28-10 2.28-10+deb10u2 glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-02-24 15:15 修改: 2026-06-17 03:45

libc6 CVE-2024-33601 低危 2.28-10 2.28-10+deb10u4 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc6 CVE-2024-33602 低危 2.28-10 2.28-10+deb10u4 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

fdisk CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

gpgsm CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

openssl CVE-2024-2511 低危 1.1.1d-0+deb10u4 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

openssl CVE-2024-4741 低危 1.1.1d-0+deb10u4 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

curl CVE-2021-22898 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37

passwd CVE-2018-7169 低危 1:4.5-1.1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02

passwd CVE-2023-29383 低危 1:4.5-1.1 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

gpgv CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

libc-bin CVE-2019-19126 低危 2.28-10 2.28-10+deb10u2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26

tar CVE-2023-39804 低危 1.30+dfsg-6 1.30+dfsg-6+deb10u1 tar: Incorrectly handled extension attributes in PAX archives can lead to a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 04:15 修改: 2026-06-17 06:12

libc-bin CVE-2021-27645 低危 2.28-10 2.28-10+deb10u2 glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2021-02-24 15:15 修改: 2026-06-17 03:45

libc-bin CVE-2024-33601 低危 2.28-10 2.28-10+deb10u4 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc-bin CVE-2024-33602 低危 2.28-10 2.28-10+deb10u4 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

util-linux CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

curl CVE-2021-22924 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u3 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

liblz4-1 CVE-2019-17543 低危 1.8.3-1 lz4: heap-based buffer overflow in LZ4_write32

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17543

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2019-10-14 02:15 修改: 2026-06-17 02:24

curl CVE-2022-35252 低危 7.64.0-4+deb10u1 7.64.0-4+deb10u4 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:a1f2f42922b1d3aa948f2569adebb37129941e889f13b96823a5e2aa8ecc1a8f

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51

gnupg CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ef9a7b8862f4797ec08f3733ab9fc2a08c51f44e5561b087eb10a6e442599760

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

libuuid1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

libmount1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

libbz2-1.0 DLA-3112-1 未知 1.0.6-9.2~deb10u1 1.0.6-9.2~deb10u2 bzip2 - bugfix update

漏洞详情:

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bzip2 DLA-3112-1 未知 1.0.6-9.2~deb10u1 1.0.6-9.2~deb10u2 bzip2 - bugfix update

漏洞详情:

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

debian-archive-keyring DLA-3482-1 未知 2019.1 2019.1+deb10u2 debian-archive-keyring - security update

漏洞详情:

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libexpat1 DSA-5085-2 未知 2.2.6-2+deb10u1 2.2.6-2+deb10u4 expat - regression update

漏洞详情:

镜像层: sha256:fdd771f27095607c32ece67a14d7da8a7dcb134198d55b49f2670a99bae0fb58

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3134-1 未知 2020e-0+deb10u1 2021a-0+deb10u7 tzdata - new timezone database

漏洞详情:

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3161-1 未知 2020e-0+deb10u1 2021a-0+deb10u8 tzdata - new timezone database

漏洞详情:

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3366-1 未知 2020e-0+deb10u1 2021a-0+deb10u10 tzdata - new timezone database

漏洞详情:

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3412-1 未知 2020e-0+deb10u1 2021a-0+deb10u11 tzdata - new timezone database

漏洞详情:

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3684-1 未知 2020e-0+deb10u1 2021a-0+deb10u12 tzdata - new timezone database

漏洞详情:

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3788-1 未知 2020e-0+deb10u1 2024a-0+deb10u1 tzdata - new timezone database

漏洞详情:

镜像层: sha256:4762552ad7d851a9901571428078281985074e5ddb806979dd7ad24748db4ca0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Java (jar)
低危漏洞:10 中危漏洞:46 高危漏洞:50 严重漏洞:26
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.apache.shiro:shiro-core CVE-2020-11989 严重 1.5.1 1.5.3 shiro: spring dynamic controllers, a specially crafted request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11989

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-06-22 19:15 修改: 2026-06-17 02:51

org.apache.shiro:shiro-core CVE-2020-1957 严重 1.5.1 1.5.2 shiro: Spring dynamic controllers, a specially crafted request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1957

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-03-25 16:15 修改: 2026-06-17 03:02

org.apache.shiro:shiro-core CVE-2021-41303 严重 1.5.1 1.8.0 shiro: specially crafted HTTP request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41303

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-09-17 09:15 修改: 2026-06-17 04:08

org.apache.shiro:shiro-core CVE-2022-32532 严重 1.5.1 1.9.1 shiro: authorization bypass due to possible misconfigured

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32532

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-06-29 00:15 修改: 2026-06-17 04:47

org.apache.shiro:shiro-core CVE-2022-40664 严重 1.5.1 1.10.0 shiro: Authentication Bypass Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40664

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-10-12 07:15 修改: 2026-06-17 05:01

org.apache.shiro:shiro-spring CVE-2020-17510 严重 1.5.1 1.7.0 shiro: specially crafted HTTP request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17510

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-11-05 21:15 修改: 2026-06-17 02:59

org.apache.shiro:shiro-spring CVE-2020-17523 严重 1.5.1 1.7.1 shiro: Authentication bypass through specially crafted HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17523

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-02-03 17:15 修改: 2026-06-17 02:59

org.apache.shiro:shiro-spring-boot-starter CVE-2020-17523 严重 1.5.1 1.7.1 shiro: Authentication bypass through specially crafted HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17523

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-02-03 17:15 修改: 2026-06-17 02:59

org.apache.shiro:shiro-web CVE-2020-17523 严重 1.5.1 1.7.1 shiro: Authentication bypass through specially crafted HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17523

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-02-03 17:15 修改: 2026-06-17 02:59

org.apache.shiro:shiro-web CVE-2023-34478 严重 1.5.1 1.12.0, 2.0.0-alpha-3 Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34478

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-07-24 19:15 修改: 2026-06-17 06:03

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-1938 严重 9.0.30 9.0.31, 8.5.51, 7.0.100 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1938

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-02-24 22:15 修改: 2026-06-17 03:02

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-24813 严重 9.0.30 11.0.3, 10.1.35, 9.0.99 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41293 严重 9.0.30 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43512 严重 9.0.30 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43515 严重 9.0.30 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.springframework.boot:spring-boot-starter-web CVE-2022-22965 严重 2.2.4.RELEASE 2.5.12, 2.6.6 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-beans CVE-2022-22965 严重 5.2.3.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-web CVE-2016-1000027 严重 5.2.3.RELEASE 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42

org.springframework:spring-webmvc CVE-2022-22965 严重 5.2.3.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.thymeleaf:thymeleaf CVE-2026-40477 严重 3.0.11.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via security bypass in expression execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40477

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-04-17 22:16 修改: 2026-07-15 02:21

org.thymeleaf:thymeleaf CVE-2026-40478 严重 3.0.11.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40478

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-04-17 22:16 修改: 2026-07-15 02:21

org.thymeleaf:thymeleaf CVE-2026-41901 严重 3.0.11.RELEASE 3.1.5.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection (SSTI) via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41901

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-12 23:16 修改: 2026-06-17 10:47

org.thymeleaf:thymeleaf-spring5 CVE-2021-43466 严重 3.0.11.RELEASE 3.0.13.RELEASE Template injection in thymeleaf-spring5

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43466

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-11-09 12:15 修改: 2026-06-17 04:11

org.thymeleaf:thymeleaf-spring5 CVE-2026-40477 严重 3.0.11.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via security bypass in expression execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40477

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-04-17 22:16 修改: 2026-07-15 02:21

org.thymeleaf:thymeleaf-spring5 CVE-2026-40478 严重 3.0.11.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40478

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-04-17 22:16 修改: 2026-07-15 02:21

org.thymeleaf:thymeleaf-spring5 CVE-2026-41901 严重 3.0.11.RELEASE 3.1.5.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection (SSTI) via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41901

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-12 23:16 修改: 2026-06-17 10:47

ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.10.2 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-11996 高危 9.0.30 10.0.0-M5, 9.0.35, 8.5.55 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11996

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-06-26 17:15 修改: 2026-06-17 02:51

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-9484 高危 9.0.30 10.0.0-M5, 9.0.35, 8.5.55, 7.0.104 tomcat: deserialization flaw in session persistence storage leading to RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9484

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-05-20 19:15 修改: 2026-06-17 03:28

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-25122 高危 9.0.30 10.0.2, 9.0.43, 8.5.63 tomcat: Request mix-up with h2c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25122

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-25329 高危 9.0.30 10.0.2, 9.0.41, 8.5.61, 7.0.108 tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25329

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2022-42252 高危 9.0.30 8.5.83, 9.0.68, 10.0.27, 10.1.1 tomcat: request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-11-01 09:15 修改: 2026-06-17 05:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-24998 高危 9.0.30 10.1.5, 11.0.0-M5, 8.5.88, 9.0.71 FileUpload: FileUpload DoS with excessive parts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-46589 高危 9.0.30 11.0.0-M11, 10.1.16, 9.0.83, 8.5.96 tomcat: HTTP request smuggling via malformed trailer headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-34750 高危 9.0.30 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Improper Handling of Exceptional Conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-38286 高危 9.0.30 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Denial of Service in Tomcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38286

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-11-07 08:15 修改: 2026-06-17 07:39

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-50379 高危 9.0.30 11.0.2, 10.1.34, 9.0.98 tomcat: RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-56337 高危 9.0.30 11.0.2, 10.1.34, 9.0.98 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-12-20 16:15 修改: 2026-06-17 08:12

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48988 高危 9.0.30 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat DoS in multipart upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48989 高危 9.0.30 11.0.10, 10.1.44, 9.0.108 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52520 高危 9.0.30 11.0.9, 10.1.43, 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-53506 高危 9.0.30 9.0.107, 10.1.43, 11.0.9 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55752 高危 9.0.30 11.0.11, 10.1.45, 9.0.109 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-24880 高危 9.0.30 9.0.116, 10.1.52, 11.0.20 Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41284 高危 9.0.30 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-42498 高危 9.0.30 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43513 高危 9.0.30 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.tomcat.embed:tomcat-embed-websocket CVE-2020-13935 高危 9.0.30 7.0.105, 8.5.57, 9.0.37, 10.0.0-M7 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13935

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-07-14 15:15 修改: 2026-06-17 02:53

org.springframework.boot:spring-boot CVE-2022-27772 高危 2.2.2.RELEASE 2.2.11.RELEASE Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27772

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-03-30 18:15 修改: 2026-06-17 04:37

org.springframework.boot:spring-boot CVE-2025-22235 高危 2.2.2.RELEASE 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45

org.springframework.boot:spring-boot CVE-2026-40973 高危 2.2.2.RELEASE 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10

org.springframework.boot:spring-boot-autoconfigure CVE-2023-20883 高危 2.2.2.RELEASE 3.0.7, 2.7.12, 2.6.15, 2.5.15 spring-boot: Spring Boot Welcome Page DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.10.2 2.18.8, 2.21.4, 2.22.1 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58

com.fasterxml.jackson.core:jackson-databind CVE-2020-25649 高危 2.10.2 2.6.7.4, 2.9.10.7, 2.10.5.1 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-12-03 17:15 修改: 2026-06-17 03:07

org.springframework:spring-beans CVE-2022-22970 高危 5.2.3.RELEASE 5.2.22.RELEASE, 5.3.20 springframework: DoS via data binding to multipartFile or servlet part

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29

org.springframework:spring-context CVE-2022-22968 高危 5.2.2.RELEASE 5.3.19, 5.2.21.RELEASE Framework: Data Binding Rules Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29

org.springframework:spring-expression CVE-2023-20863 高危 5.2.3.RELEASE 6.0.8, 5.3.27, 5.2.24.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31

org.apache.shiro:shiro-core CVE-2020-13933 高危 1.5.1 1.6.0 shiro: specially crafted HTTP request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13933

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-08-17 21:15 修改: 2026-06-17 02:53

org.springframework:spring-web CVE-2021-22118 高危 5.2.3.RELEASE 5.2.15, 5.3.7 spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22118

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-05-27 15:15 修改: 2026-06-17 03:36

org.springframework:spring-web CVE-2024-22243 高危 5.2.3.RELEASE 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22259 高危 5.2.3.RELEASE 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22262 高危 5.2.3.RELEASE 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11

org.apache.shiro:shiro-core CVE-2026-49268 高危 1.5.1 2.2.1, 3.0.0-alpha-2 A remote attacker can inject LDAP special characters into the Distingu ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49268

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-06-17 14:17 修改: 2026-06-18 14:45

org.springframework:spring-webmvc CVE-2024-38819 高危 5.2.3.RELEASE 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41

com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.10.2 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15

com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 高危 2.10.2 2.12.6, 2.13.1 jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-03-18 22:15 修改: 2026-06-17 04:15

com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.10.2 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.10.2 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.10.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.10.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-06-23 21:17 修改: 2026-07-30 12:19

commons-beanutils:commons-beanutils CVE-2025-48734 高危 1.9.4 1.11.0 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30

org.yaml:snakeyaml CVE-2017-18640 高危 1.25 1.26 snakeyaml: Billion laughs attack via alias feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13

org.yaml:snakeyaml CVE-2022-1471 高危 1.25 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22

org.yaml:snakeyaml CVE-2022-25857 高危 1.25 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-25854 中危 9.0.30 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25

org.apache.shiro:shiro-web CVE-2026-43828 中危 1.5.1 2.2.0, 3.0.0-alpha-2 apache-shiro: Apache Shiro: Information disclosure via insecure cookie handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43828

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-25 21:16 修改: 2026-07-24 10:10

org.apache.tomcat.embed:tomcat-embed-websocket CVE-2024-23672 中危 9.0.30 11.0.0-M17, 10.1.19, 9.0.86, 8.5.99 Tomcat: WebSocket DoS with incomplete closing handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13

org.hibernate.validator:hibernate-validator CVE-2020-10693 中危 6.0.18.Final 6.1.5.Final, 6.0.20.Final hibernate-validator: Improper input validation in the interpolation of constraint error messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10693

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-05-06 14:15 修改: 2026-06-17 02:48

org.hibernate.validator:hibernate-validator CVE-2023-1932 中危 6.0.18.Final 6.2.0.Final hibernate-validator: rendering of invalid html with SafeHTML leads to HTML injection and XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1932

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-11-07 10:15 修改: 2026-06-17 05:29

org.hibernate.validator:hibernate-validator CVE-2025-35036 中危 6.0.18.Final 6.2.0.CR1, 7.0.0.CR1 hibernate-validator: Hibernate Validator Expression Language Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-35036

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-06-03 20:15 修改: 2026-06-17 09:14

com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.10.2 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.10.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.10.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

org.apache.shiro:shiro-core CVE-2023-46749 中危 1.5.1 1.13.0, 2.0.0-alpha4 shiro: path traversal attack may lead to authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46749

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-01-15 10:15 修改: 2026-06-17 06:31

org.apache.shiro:shiro-core CVE-2026-43827 中危 1.5.1 2.2.0, 3.0.0-alpha-2 apache-shiro: Apache Shiro: Session fixation vulnerability due to improper session invalidation upon login

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43827

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-25 21:16 修改: 2026-07-24 10:10

ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.3 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00

com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.10.2 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30

org.apache.shiro:shiro-spring CVE-2026-23903 中危 1.5.1 2.1.0 org.apache.shiro/shiro-web: Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23903

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-02-09 10:15 修改: 2026-06-17 10:22

org.springframework:spring-context CVE-2024-38820 中危 5.2.2.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

org.springframework:spring-core CVE-2021-22060 中危 5.2.3.RELEASE 5.3.14, 5.2.19 springframework: Additional Log Injection in Spring Framework (follow-up to CVE-2021-22096)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22060

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:36

org.springframework:spring-core CVE-2021-22096 中危 5.2.3.RELEASE 5.3.11, 5.2.18 springframework: malicious input leads to insertion of additional log entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22096

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-10-28 16:15 修改: 2026-06-17 03:36

com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.10.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30

org.springframework:spring-expression CVE-2022-22950 中危 5.2.3.RELEASE 5.3.17, 5.2.20.RELEASE spring-expression: Denial of service via specially crafted SpEL expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-expression CVE-2023-20861 中危 5.2.3.RELEASE 6.0.7, 5.3.26, 5.2.23.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2024-38808 中危 5.2.3.RELEASE 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41

ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.3 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

ch.qos.logback:logback-core CVE-2021-42550 中危 1.2.3 1.2.9 logback: remote code execution through JNDI call from within its configuration file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-12-16 19:15 修改: 2026-06-17 04:09

org.apache.shiro:shiro-web CVE-2023-46750 中危 1.5.1 1.13.0, 2.0.0-alpha-4 shiro: URL redirection to untrusted site in FORM authentication feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46750

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-12-14 09:15 修改: 2026-06-17 06:31

org.apache.tomcat.embed:tomcat-embed-core CVE-2019-17569 中危 9.0.30 7.0.100, 8.5.51, 9.0.31 tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17569

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-02-24 22:15 修改: 2026-06-17 02:24

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-1935 中危 9.0.30 7.0.100, 8.5.51, 9.0.31 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1935

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2020-02-24 22:15 修改: 2026-06-17 03:02

org.springframework:spring-web CVE-2024-38809 中危 5.2.3.RELEASE 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41

org.springframework:spring-web CVE-2024-38820 中危 5.2.3.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-24122 中危 9.0.30 10.0.0-M10, 9.0.40, 8.5.60, 7.0.107 tomcat: Information disclosure when using NTFS file system

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24122

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2021-01-14 15:15 修改: 2026-06-17 03:39

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-41080 中危 9.0.30 8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 tomcat: Open Redirect vulnerability in FORM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20

org.springframework:spring-webmvc CVE-2026-22745 中危 5.2.3.RELEASE 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-42795 中危 9.0.30 10.1.14, 9.0.81, 8.5.94, 11.0.0-M12 tomcat: improper cleaning of recycled objects could lead to information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-44487 中危 9.0.30 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-45648 中危 9.0.30 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 tomcat: incorrectly parsed http trailer headers can cause request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-21733 中危 9.0.30 8.5.64, 9.0.44 tomcat: Leaking of unrelated request bodies in default error page

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21733

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-01-19 11:15 修改: 2026-06-17 07:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-24549 中危 9.0.30 8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 Tomcat: HTTP/2 header handling DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49124 中危 9.0.30 11.0.8, 10.1.42, 9.0.106 Apache Tomcat installer for Windows has an untrusted search path vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49125 中危 9.0.30 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52434 中危 9.0.30 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55668 中危 9.0.30 11.0.8, 10.1.42, 9.0.106 org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-66614 中危 9.0.30 11.0.15, 10.1.50, 9.0.113 tomcat: Client certificate verification bypass due to virtual host mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57

org.yaml:snakeyaml CVE-2022-38749 中危 1.25 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38750 中危 1.25 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38751 中危 1.25 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38752 中危 1.25 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-41854 中危 1.25 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03

org.apache.shiro:shiro-core CVE-2026-23901 低危 1.5.1 2.1.0 org.apache.shiro/shiro-core: Apache Shiro: Brute force attack possible to determine valid user names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23901

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-02-10 10:15 修改: 2026-06-17 10:22

ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.3 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00

ch.qos.logback:logback-core CVE-2026-10532 低危 1.2.3 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10

ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.3 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

org.springframework:spring-webmvc CVE-2026-22741 低危 5.2.3.RELEASE 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-46701 低危 9.0.30 9.0.105, 10.1.41, 11.0.7 tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26

org.springframework:spring-context CVE-2025-22233 低危 5.2.2.RELEASE 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-61795 低危 9.0.30 11.0.12, 10.1.47, 9.0.110 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43514 低危 9.0.30 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

ch.qos.logback:logback-core CVE-2026-9828 低危 1.2.3 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:16d7d790754c04dfb0cde7d8c1982a31c650aad0c0d6451066467c71b6b98977

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×