docker.io/vulhub/spring-cloud-gateway:3.1.0 linux/amd64

docker.io/vulhub/spring-cloud-gateway:3.1.0 - Trivy安全扫描结果 扫描时间: 2026-08-14 22:09
全部漏洞信息
低危漏洞:64 中危漏洞:187 高危漏洞:175 严重漏洞:40

系统OS: debian 10.9 扫描引擎: Trivy 扫描时间: 2026-08-14 22:09

docker.io/vulhub/spring-cloud-gateway:3.1.0 (debian 10.9) (debian)
低危漏洞:53 中危漏洞:127 高危漏洞:124 严重漏洞:36
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2022-32221 严重 7.64.0-4+deb10u2 7.64.0-4+deb10u4 curl: POST following PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46

dpkg CVE-2022-1664 严重 1.19.7 1.19.8 Dpkg::Source::Archive in dpkg, the Debian package management system, b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1664

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-05-26 14:15 修改: 2026-06-17 04:22

libc-bin CVE-2021-33574 严重 2.28-10 2.28-10+deb10u2 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-05-25 22:15 修改: 2026-06-17 03:54

libc-bin CVE-2021-35942 严重 2.28-10 2.28-10+deb10u2 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

libc-bin CVE-2022-23218 严重 2.28-10 2.28-10+deb10u2 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libc-bin CVE-2022-23219 严重 2.28-10 2.28-10+deb10u2 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libc6 CVE-2021-33574 严重 2.28-10 2.28-10+deb10u2 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-05-25 22:15 修改: 2026-06-17 03:54

libc6 CVE-2021-35942 严重 2.28-10 2.28-10+deb10u2 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:57

libc6 CVE-2022-23218 严重 2.28-10 2.28-10+deb10u2 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libc6 CVE-2022-23219 严重 2.28-10 2.28-10+deb10u2 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-01-14 07:15 修改: 2026-06-17 04:29

libcurl4 CVE-2022-32221 严重 7.64.0-4+deb10u2 7.64.0-4+deb10u4 curl: POST following PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46

libdb5.3 CVE-2019-8457 严重 5.3.28+dfsg1-0.5 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42

libexpat1 CVE-2022-22822 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in addBinding in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22823 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in build_model in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22824 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in defineAttribute in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-23852 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in function XML_GetBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-24 02:15 修改: 2026-06-17 04:30

libexpat1 CVE-2022-25235 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-25236 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-25315 严重 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Integer overflow in storeRawNames()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

libfreetype6 CVE-2022-27404 严重 2.9.1-3+deb10u2 2.9.1-3+deb10u3 FreeType: Buffer overflow in sfnt_init_face

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27404

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-04-22 14:15 修改: 2026-06-17 04:36

libgnutls30 CVE-2021-20231 严重 3.6.7-4+deb10u6 3.6.7-4+deb10u7 gnutls: Use after free in client key_share extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20231

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-03-12 19:15 修改: 2026-06-17 03:33

libgnutls30 CVE-2021-20232 严重 3.6.7-4+deb10u6 3.6.7-4+deb10u7 gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20232

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-03-12 19:15 修改: 2026-06-17 03:33

libksba8 CVE-2022-3515 严重 1.3.5-2 1.3.5-2+deb10u1 libksba: integer overflow may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3515

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59

libksba8 CVE-2022-47629 严重 1.3.5-2 1.3.5-2+deb10u2 libksba: integer overflow to code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47629

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-12-20 23:15 修改: 2026-06-17 05:13

libldap-2.4-2 CVE-2022-29155 严重 2.4.47+dfsg-3+deb10u6 2.4.47+dfsg-3+deb10u7 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-05-04 20:15 修改: 2026-06-17 04:39

libldap-common CVE-2022-29155 严重 2.4.47+dfsg-3+deb10u6 2.4.47+dfsg-3+deb10u7 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-05-04 20:15 修改: 2026-06-17 04:39

liblz4-1 CVE-2021-3520 严重 1.8.3-1 1.8.3-1+deb10u1 lz4: memory corruption due to an integer overflow bug caused by memmove argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3520

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-06-02 13:15 修改: 2026-06-17 04:05

libpcre2-8-0 CVE-2022-1586 严重 10.32-5 10.32-5+deb10u1 pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1586

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-05-16 21:15 修改: 2026-06-17 04:22

libpcre2-8-0 CVE-2022-1587 严重 10.32-5 10.32-5+deb10u1 pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1587

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-05-16 21:15 修改: 2026-06-17 04:22

libsqlite3-0 CVE-2020-35527 严重 3.27.2-3+deb10u1 3.27.2-3+deb10u2 sqlite: Out of bounds access during table rename

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35527

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-09-01 18:15 修改: 2026-06-17 03:13

libssl1.1 CVE-2021-3711 严重 1.1.1d-0+deb10u6 1.1.1d-0+deb10u7 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

libtasn1-6 CVE-2021-46848 严重 4.13-3 4.13-3+deb10u1 libtasn1: Out-of-bound access in ETYPE_OK

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-10-24 14:15 修改: 2026-06-17 04:15

openssl CVE-2021-3711 严重 1.1.1d-0+deb10u6 1.1.1d-0+deb10u7 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

wget CVE-2024-38428 严重 1.20.1-1.1 wget: Misinterpretation of input may lead to improper behavior

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38428

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-06-16 03:15 修改: 2026-06-17 07:40

zlib1g CVE-2022-37434 严重 1:1.2.11.dfsg-1 1:1.2.11.dfsg-1+deb10u2 zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-08-05 07:15 修改: 2026-07-14 12:16

zlib1g CVE-2023-45853 严重 1:1.2.11.dfsg-1 zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-10-14 02:15 修改: 2026-07-14 13:17

libcurl4 CVE-2021-22946 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libcurl4 CVE-2022-22576 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28

libcurl4 CVE-2022-27781 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2022-27782 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2023-27533 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u6 curl: TELNET option IAC injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl4 CVE-2023-27534 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u9 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

gzip CVE-2022-1271 高危 1.9-3 1.9-3+deb10u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

curl CVE-2022-22576 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28

curl CVE-2022-27781 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

curl CVE-2022-27782 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

curl CVE-2023-27533 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u6 curl: TELNET option IAC injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libc-bin CVE-2020-1751 高危 2.28-10 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02

libc-bin CVE-2020-1752 高危 2.28-10 2.28-10+deb10u2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02

libc-bin CVE-2020-6096 高危 2.28-10 2.28-10+deb10u2 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22

libexpat1 CVE-2021-45960 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Large number of prefixed XML attributes on a single tag can crash libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-01 19:15 修改: 2026-06-17 04:14

libexpat1 CVE-2021-46143 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in doProlog in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-06 04:15 修改: 2026-06-17 04:14

libexpat1 CVE-2022-22825 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in lookup in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22826 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in nextScaffoldPart in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22827 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: Integer overflow in storeAtts in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-23990 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u2 expat: integer overflow in the doProlog function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-01-26 19:15 修改: 2026-06-17 04:31

libexpat1 CVE-2022-25314 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Integer overflow in copyString()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25314

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-40674 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u5 expat: a use-after-free in the doContent function in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-09-14 11:15 修改: 2026-06-17 05:01

libexpat1 CVE-2022-43680 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u6 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-10-24 14:15 修改: 2026-06-17 05:07

libexpat1 CVE-2023-52425 高危 2.2.6-2+deb10u1 2.2.6-2+deb10u7 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42

libext2fs2 CVE-2022-1304 高危 1.44.5-1+deb10u3 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

libc-bin CVE-2021-3326 高危 2.28-10 2.28-10+deb10u2 glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-01-27 20:15 修改: 2026-06-17 04:04

libfreetype6 CVE-2022-27405 高危 2.9.1-3+deb10u2 2.9.1-3+deb10u3 FreeType: Segmentation violation via FNT_Size_Request

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27405

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

libfreetype6 CVE-2022-27406 高危 2.9.1-3+deb10u2 2.9.1-3+deb10u3 Freetype: Segmentation violation via FT_Request_Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27406

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

libgcc1 CVE-2018-12886 高危 1:8.3.0-6 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38

libgcc1 CVE-2019-15847 高危 1:8.3.0-6 gcc: POWER9 "DARN" RNG intrinsic produces repeated output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15847

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-09-02 23:15 修改: 2026-06-17 02:21

libgcrypt20 CVE-2021-33560 高危 1.8.4-5 libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-06-08 11:15 修改: 2026-06-17 03:54

libgmp10 CVE-2021-43618 高危 2:6.1.2+dfsg-4 2:6.1.2+dfsg-4+deb10u1 gmp: Integer overflow and resultant buffer overflow via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-11-15 04:15 修改: 2026-06-17 04:11

libc-bin CVE-2021-3999 高危 2.28-10 2.28-10+deb10u2 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

libc-bin CVE-2024-2961 高危 2.28-10 2.28-10+deb10u3 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25

libgnutls30 CVE-2020-24659 高危 3.6.7-4+deb10u6 3.6.7-4+deb10u7 gnutls: Heap buffer overflow in handshake with no_renegotiation alert sent

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24659

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-09-04 15:15 修改: 2026-06-17 03:05

libgnutls30 CVE-2022-2509 高危 3.6.7-4+deb10u6 3.6.7-4+deb10u9 gnutls: Double free during gnutls_pkcs7_verify

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-08-01 14:15 修改: 2026-06-17 04:42

libgnutls30 CVE-2023-0361 高危 3.6.7-4+deb10u6 3.6.7-4+deb10u10 gnutls: timing side-channel in the TLS RSA key exchange code

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-02-15 18:15 修改: 2026-06-17 05:25

libgnutls30 CVE-2024-0553 高危 3.6.7-4+deb10u6 3.6.7-4+deb10u12 gnutls: incomplete fix for CVE-2023-5981

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-01-16 12:15 修改: 2026-06-17 06:53

libgssapi-krb5-2 CVE-2021-36222 高危 1.17-3+deb10u1 1.17-3+deb10u2 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libgssapi-krb5-2 CVE-2022-42898 高危 1.17-3+deb10u1 1.17-3+deb10u5 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libhogweed4 CVE-2021-20305 高危 3.4.1-1 3.4.1-1+deb10u1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33

libhogweed4 CVE-2021-3580 高危 3.4.1-1 3.4.1-1+deb10u1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

libidn2-0 CVE-2019-12290 高危 2.0.5-1+deb10u1 GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specifi ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12290

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-10-22 16:15 修改: 2026-06-17 02:14

libk5crypto3 CVE-2021-36222 高危 1.17-3+deb10u1 1.17-3+deb10u2 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libk5crypto3 CVE-2022-42898 高危 1.17-3+deb10u1 1.17-3+deb10u5 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libkrb5-3 CVE-2021-36222 高危 1.17-3+deb10u1 1.17-3+deb10u2 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libkrb5-3 CVE-2022-42898 高危 1.17-3+deb10u1 1.17-3+deb10u5 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libkrb5support0 CVE-2021-36222 高危 1.17-3+deb10u1 1.17-3+deb10u2 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-07-22 18:15 修改: 2026-06-17 03:58

libkrb5support0 CVE-2022-42898 高危 1.17-3+deb10u1 1.17-3+deb10u5 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05

libc-bin CVE-2024-33599 高危 2.28-10 2.28-10+deb10u4 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

curl CVE-2023-27534 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u9 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

curl CVE-2021-22946 高危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

libldap-2.4-2 CVE-2023-2953 高危 2.4.47+dfsg-3+deb10u6 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-05-30 22:15 修改: 2026-06-17 05:53

e2fsprogs CVE-2022-1304 高危 1.44.5-1+deb10u3 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

libldap-common CVE-2023-2953 高危 2.4.47+dfsg-3+deb10u6 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-05-30 22:15 修改: 2026-06-17 05:53

gcc-8-base CVE-2018-12886 高危 8.3.0-6 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38

liblzma5 CVE-2022-1271 高危 5.2.4-1 5.2.4-1+deb10u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

libncursesw6 CVE-2021-39537 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

libncursesw6 CVE-2022-29458 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u3 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

libncursesw6 CVE-2023-29491 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

libnettle6 CVE-2021-20305 高危 3.4.1-1 3.4.1-1+deb10u1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33

libnettle6 CVE-2021-3580 高危 3.4.1-1 3.4.1-1+deb10u1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

libnghttp2-14 CVE-2020-11080 高危 1.36.0-2+deb10u1 1.36.0-2+deb10u2 nghttp2: overly large SETTINGS frames can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11080

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2020-06-03 23:15 修改: 2026-06-17 02:49

libnghttp2-14 CVE-2023-44487 高危 1.36.0-2+deb10u1 1.36.0-2+deb10u2 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-10-10 14:15 修改: 2026-08-11 19:37

libc6 CVE-2020-1751 高危 2.28-10 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02

libc6 CVE-2020-1752 高危 2.28-10 2.28-10+deb10u2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02

libpcre2-8-0 CVE-2019-20454 高危 10.32-5 10.32-5+deb10u1 pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20454

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2020-02-14 14:15 修改: 2026-06-17 02:30

libsasl2-2 CVE-2022-24407 高危 2.1.27+dfsg-1+deb10u1 2.1.27+dfsg-1+deb10u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31

libsasl2-modules-db CVE-2022-24407 高危 2.1.27+dfsg-1+deb10u1 2.1.27+dfsg-1+deb10u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-02-24 15:15 修改: 2026-06-17 04:31

libc6 CVE-2020-6096 高危 2.28-10 2.28-10+deb10u2 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22

libsqlite3-0 CVE-2019-19603 高危 3.27.2-3+deb10u1 sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19603

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2019-12-09 19:15 修改: 2026-06-17 02:26

libsqlite3-0 CVE-2020-35525 高危 3.27.2-3+deb10u1 3.27.2-3+deb10u2 sqlite: Null pointer derreference in src/select.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35525

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-09-01 18:15 修改: 2026-06-17 03:13

libsqlite3-0 CVE-2023-7104 高危 3.27.2-3+deb10u1 sqlite: heap-buffer-overflow at sessionfuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2023-12-29 10:15 修改: 2026-06-17 06:52

libss2 CVE-2022-1304 高危 1.44.5-1+deb10u3 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

libssh2-1 CVE-2019-13115 高危 1.8.0-2.1 1.8.0-2.1+deb10u1 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13115

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2019-07-16 18:15 修改: 2026-06-17 02:16

libssh2-1 CVE-2019-17498 高危 1.8.0-2.1 1.8.0-2.1+deb10u1 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17498

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2019-10-21 22:15 修改: 2026-06-17 02:24

libssh2-1 CVE-2020-22218 高危 1.8.0-2.1 1.8.0-2.1+deb10u1 libssh2: use-of-uninitialized-value in _libssh2_transport_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-22218

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-08-22 19:16 修改: 2026-06-17 03:04

libc6 CVE-2021-3326 高危 2.28-10 2.28-10+deb10u2 glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3326

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-01-27 20:15 修改: 2026-06-17 04:04

libssl1.1 CVE-2021-3712 高危 1.1.1d-0+deb10u6 1.1.1d-0+deb10u7 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2022-0778 高危 1.1.1d-0+deb10u6 1.1.1d-0+deb10u8 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

libssl1.1 CVE-2022-1292 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u2 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

libssl1.1 CVE-2022-2068 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u3 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-21 15:15 修改: 2026-06-17 04:41

libssl1.1 CVE-2022-4450 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

libssl1.1 CVE-2023-0215 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0286 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0464 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u5 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

libstdc++6 CVE-2018-12886 高危 8.3.0-6 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38

libstdc++6 CVE-2019-15847 高危 8.3.0-6 gcc: POWER9 "DARN" RNG intrinsic produces repeated output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15847

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-09-02 23:15 修改: 2026-06-17 02:21

libsystemd0 CVE-2019-3843 高危 241-7~deb10u7 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libsystemd0 CVE-2019-3844 高危 241-7~deb10u7 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libsystemd0 CVE-2023-26604 高危 241-7~deb10u7 241-7~deb10u9 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-03-03 16:15 修改: 2026-06-17 05:43

libsystemd0 CVE-2023-50387 高危 241-7~deb10u7 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39

libsystemd0 CVE-2023-50868 高危 241-7~deb10u7 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40

libc6 CVE-2021-3999 高危 2.28-10 2.28-10+deb10u2 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06

libtinfo6 CVE-2021-39537 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

libtinfo6 CVE-2022-29458 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u3 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

libtinfo6 CVE-2023-29491 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

libudev1 CVE-2019-3843 高危 241-7~deb10u7 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libudev1 CVE-2019-3844 高危 241-7~deb10u7 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libudev1 CVE-2023-26604 高危 241-7~deb10u7 241-7~deb10u9 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-03-03 16:15 修改: 2026-06-17 05:43

libudev1 CVE-2023-50387 高危 241-7~deb10u7 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39

libudev1 CVE-2023-50868 高危 241-7~deb10u7 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40

ncurses-base CVE-2021-39537 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

ncurses-base CVE-2022-29458 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u3 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

ncurses-base CVE-2023-29491 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2021-39537 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-09-20 16:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2022-29458 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u3 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43

ncurses-bin CVE-2023-29491 高危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u5 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-04-14 01:15 修改: 2026-07-27 13:43

libc6 CVE-2024-2961 高危 2.28-10 2.28-10+deb10u3 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25

openssl CVE-2021-3712 高危 1.1.1d-0+deb10u6 1.1.1d-0+deb10u7 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

openssl CVE-2022-0778 高危 1.1.1d-0+deb10u6 1.1.1d-0+deb10u8 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

openssl CVE-2022-1292 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u2 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

openssl CVE-2022-2068 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u3 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-21 15:15 修改: 2026-06-17 04:41

openssl CVE-2022-4450 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl CVE-2023-0215 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl CVE-2023-0286 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

openssl CVE-2023-0464 高危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u5 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

perl-base CVE-2020-16156 高危 5.28.1-6+deb10u1 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57

perl-base CVE-2023-31484 高危 5.28.1-6+deb10u1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57

libc6 CVE-2024-33599 高危 2.28-10 2.28-10+deb10u4 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

xz-utils CVE-2022-1271 高危 5.2.4-1 5.2.4-1+deb10u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

libcom-err2 CVE-2022-1304 高危 1.44.5-1+deb10u3 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

gcc-8-base CVE-2019-15847 高危 8.3.0-6 gcc: POWER9 "DARN" RNG intrinsic produces repeated output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15847

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-09-02 23:15 修改: 2026-06-17 02:21

zlib1g CVE-2018-25032 高危 1:1.2.11.dfsg-1 1:1.2.11.dfsg-1+deb10u1 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-03-25 09:15 修改: 2026-07-14 12:16

libcurl4 CVE-2023-23916 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u5 curl: HTTP multi-header compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38

libcurl4 CVE-2023-27535 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u6 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl4 CVE-2023-27536 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u6 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libmount1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libcurl4 CVE-2023-27538 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u6 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libcurl4 CVE-2023-28321 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u7 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

libcurl4 CVE-2023-46218 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u8 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30

libncursesw6 CVE-2020-19189 中危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-08-22 19:16 修改: 2026-07-23 18:58

libncursesw6 CVE-2023-50495 中危 6.1+20181013-2+deb10u2 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libcurl4 CVE-2024-2398 中危 7.64.0-4+deb10u2 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24

curl CVE-2023-23916 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u5 curl: HTTP multi-header compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38

libelf1 CVE-2020-21047 中危 0.176-1.1 0.176-1.1+deb10u1 The libcpu component which is used by libasm of elfutils version 0.177 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21047

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-08-22 19:16 修改: 2026-06-17 03:03

curl CVE-2023-27535 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u6 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

libnghttp2-14 CVE-2024-28182 中危 1.36.0-2+deb10u1 1.36.0-2+deb10u3 nghttp2: CONTINUATION frames DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-04-04 15:15 修改: 2026-06-17 07:21

libpam-modules CVE-2024-22365 中危 1.3.1-5 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11

libpam-modules-bin CVE-2024-22365 中危 1.3.1-5 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11

libpam-runtime CVE-2024-22365 中危 1.3.1-5 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11

libpam0g CVE-2024-22365 中危 1.3.1-5 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11

curl CVE-2023-27536 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u6 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

curl CVE-2023-27538 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u6 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45

curl CVE-2023-28321 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u7 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

libpcre3 CVE-2020-14155 中危 2:8.39-12 pcre: Integer overflow when parsing callout numeric arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:54

curl CVE-2023-46218 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u8 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30

curl CVE-2024-2398 中危 7.64.0-4+deb10u2 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24

libsmartcols1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

dirmngr CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

bsdutils CVE-2021-37600 中危 1:2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libc-bin CVE-2016-10228 中危 2.28-10 2.28-10+deb10u2 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2017-03-02 01:59 修改: 2026-06-17 00:39

libc-bin CVE-2019-25013 中危 2.28-10 2.28-10+deb10u2 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-01-04 18:15 修改: 2026-06-17 02:31

libsqlite3-0 CVE-2019-19645 中危 3.27.2-3+deb10u1 sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19645

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2019-12-09 16:15 修改: 2026-06-17 02:26

libsqlite3-0 CVE-2019-19924 中危 3.27.2-3+deb10u1 sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19924

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2019-12-24 16:15 修改: 2026-06-17 02:27

libsqlite3-0 CVE-2020-13631 中危 3.27.2-3+deb10u1 sqlite: Virtual table can be renamed into the name of one of its shadow tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13631

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-05-27 15:15 修改: 2026-06-17 02:53

libc-bin CVE-2020-10029 中危 2.28-10 2.28-10+deb10u2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47

libc-bin CVE-2020-27618 中危 2.28-10 2.28-10+deb10u2 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-02-26 23:15 修改: 2026-06-17 03:09

libc-bin CVE-2023-4806 中危 2.28-10 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16

libc-bin CVE-2023-4813 中危 2.28-10 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38

libc-bin CVE-2024-33600 中危 2.28-10 2.28-10+deb10u4 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

curl CVE-2021-22947 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

fdisk CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libexpat1 CVE-2022-25313 中危 2.2.6-2+deb10u1 2.2.6-2+deb10u3 expat: Stack exhaustion in doctype parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

curl CVE-2022-27774 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u4 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libfdisk1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

curl CVE-2022-27776 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

gnupg CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gnupg-l10n CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

libssl1.1 CVE-2021-4160 中危 1.1.1d-0+deb10u6 1.1.1d-0+deb10u8 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:19

libssl1.1 CVE-2022-2097 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

libssl1.1 CVE-2022-4304 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

libssl1.1 CVE-2023-0465 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u5 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0466 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u5 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-2650 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u5 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53

libssl1.1 CVE-2023-3446 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u6 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14

libssl1.1 CVE-2023-3817 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u6 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14

libssl1.1 CVE-2023-5678 中危 1.1.1d-0+deb10u6 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49

libssl1.1 CVE-2024-0727 中危 1.1.1d-0+deb10u6 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54

gnupg-utils CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gpg CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gpg-agent CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

libgcrypt20 CVE-2019-13627 中危 1.8.4-5 libgcrypt: ECDSA timing attack allowing private key leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13627

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-09-25 15:15 修改: 2026-06-17 02:17

libgcrypt20 CVE-2021-40528 中危 1.8.4-5 1.8.4-5+deb10u1 libgcrypt: ElGamal implementation allows plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40528

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-09-06 19:15 修改: 2026-06-17 04:07

gpg-wks-client CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gpg-wks-server CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

libsystemd0 CVE-2021-33910 中危 241-7~deb10u7 241-7~deb10u8 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-20 19:15 修改: 2026-06-17 03:55

libsystemd0 CVE-2021-3997 中危 241-7~deb10u7 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

libsystemd0 CVE-2022-3821 中危 241-7~deb10u7 241-7~deb10u10 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

libsystemd0 CVE-2022-4415 中危 241-7~deb10u7 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20

libsystemd0 CVE-2023-7008 中危 241-7~deb10u7 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

libc6 CVE-2016-10228 中危 2.28-10 2.28-10+deb10u2 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2017-03-02 01:59 修改: 2026-06-17 00:39

libc6 CVE-2019-25013 中危 2.28-10 2.28-10+deb10u2 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-01-04 18:15 修改: 2026-06-17 02:31

libc6 CVE-2020-10029 中危 2.28-10 2.28-10+deb10u2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47

libc6 CVE-2020-27618 中危 2.28-10 2.28-10+deb10u2 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-02-26 23:15 修改: 2026-06-17 03:09

libtinfo6 CVE-2020-19189 中危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-08-22 19:16 修改: 2026-07-23 18:58

libtinfo6 CVE-2023-50495 中危 6.1+20181013-2+deb10u2 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libc6 CVE-2023-4806 中危 2.28-10 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16

libgnutls30 CVE-2021-4209 中危 3.6.7-4+deb10u6 3.6.7-4+deb10u9 GnuTLS: Null pointer dereference in MD_UPDATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19

libgnutls30 CVE-2023-5981 中危 3.6.7-4+deb10u6 3.6.7-4+deb10u11 gnutls: timing side-channel in the RSA-PSK authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-11-28 12:15 修改: 2026-06-17 06:49

libc6 CVE-2023-4813 中危 2.28-10 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38

libc6 CVE-2024-33600 中危 2.28-10 2.28-10+deb10u4 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libudev1 CVE-2021-33910 中危 241-7~deb10u7 241-7~deb10u8 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-20 19:15 修改: 2026-06-17 03:55

libudev1 CVE-2021-3997 中危 241-7~deb10u7 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

libudev1 CVE-2022-3821 中危 241-7~deb10u7 241-7~deb10u10 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00

libudev1 CVE-2022-4415 中危 241-7~deb10u7 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20

libudev1 CVE-2023-7008 中危 241-7~deb10u7 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

libuuid1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

login CVE-2023-4641 中危 1:4.5-1.1 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38

mount CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libgssapi-krb5-2 CVE-2021-37750 中危 1.17-3+deb10u1 1.17-3+deb10u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libgssapi-krb5-2 CVE-2023-36054 中危 1.17-3+deb10u1 1.17-3+deb10u6 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05

gpgconf CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

ncurses-base CVE-2020-19189 中危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-08-22 19:16 修改: 2026-07-23 18:58

ncurses-base CVE-2023-50495 中危 6.1+20181013-2+deb10u2 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

gpgsm CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

gpgv CVE-2022-34903 中危 2.2.12-1+deb10u1 2.2.12-1+deb10u2 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51

curl CVE-2022-32206 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

ncurses-bin CVE-2020-19189 中危 6.1+20181013-2+deb10u2 6.1+20181013-2+deb10u4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-08-22 19:16 修改: 2026-07-23 18:58

ncurses-bin CVE-2023-50495 中危 6.1+20181013-2+deb10u2 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

iproute2 CVE-2019-20795 中危 4.20.0-2+deb10u1 iproute: use-after-free in get_netnsid_from_name in ip/ipnetns.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20795

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-05-09 21:15 修改: 2026-06-17 02:31

libk5crypto3 CVE-2021-37750 中危 1.17-3+deb10u1 1.17-3+deb10u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libk5crypto3 CVE-2023-36054 中危 1.17-3+deb10u1 1.17-3+deb10u6 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05

libblkid1 CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

curl CVE-2022-32208 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libkrb5-3 CVE-2021-37750 中危 1.17-3+deb10u1 1.17-3+deb10u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libkrb5-3 CVE-2023-36054 中危 1.17-3+deb10u1 1.17-3+deb10u6 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05

curl CVE-2022-43552 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u4 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06

libcurl4 CVE-2021-22947 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-09-29 20:15 修改: 2026-06-17 03:38

openssl CVE-2021-4160 中危 1.1.1d-0+deb10u6 1.1.1d-0+deb10u8 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:19

openssl CVE-2022-2097 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

openssl CVE-2022-4304 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u4 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

openssl CVE-2023-0465 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u5 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

openssl CVE-2023-0466 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u5 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

openssl CVE-2023-2650 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u5 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53

openssl CVE-2023-3446 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u6 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14

openssl CVE-2023-3817 中危 1.1.1d-0+deb10u6 1.1.1n-0+deb10u6 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14

openssl CVE-2023-5678 中危 1.1.1d-0+deb10u6 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49

openssl CVE-2024-0727 中危 1.1.1d-0+deb10u6 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54

passwd CVE-2023-4641 中危 1:4.5-1.1 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38

libkrb5support0 CVE-2021-37750 中危 1.17-3+deb10u1 1.17-3+deb10u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libkrb5support0 CVE-2023-36054 中危 1.17-3+deb10u1 1.17-3+deb10u6 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05

unzip CVE-2022-0529 中危 6.0-23+deb10u2 6.0-23+deb10u3 unzip: Heap out-of-bound writes and reads during conversion of wide string to local string

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0529

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20

unzip CVE-2022-0530 中危 6.0-23+deb10u2 6.0-23+deb10u3 unzip: SIGSEGV during the conversion of an utf-8 string to a local string

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0530

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20

util-linux CVE-2021-37600 中危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libcurl4 CVE-2022-27774 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u4 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

wget CVE-2021-31879 中危 1.20.1-1.1 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52

libcurl4 CVE-2022-27776 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37

libcurl4 CVE-2022-32206 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libcurl4 CVE-2022-32208 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46

libcurl4 CVE-2022-43552 中危 7.64.0-4+deb10u2 7.64.0-4+deb10u4 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06

libuuid1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

libc6 CVE-2019-19126 低危 2.28-10 2.28-10+deb10u2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26

login CVE-2018-7169 低危 1:4.5-1.1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02

login CVE-2023-29383 低危 1:4.5-1.1 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

libc6 CVE-2021-27645 低危 2.28-10 2.28-10+deb10u2 glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-02-24 15:15 修改: 2026-06-17 03:45

mount CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

libc6 CVE-2024-33601 低危 2.28-10 2.28-10+deb10u4 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc6 CVE-2024-33602 低危 2.28-10 2.28-10+deb10u4 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

gnupg CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

bsdutils CVE-2024-28085 低危 1:2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

libc-bin CVE-2019-19126 低危 2.28-10 2.28-10+deb10u2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26

libc-bin CVE-2021-27645 低危 2.28-10 2.28-10+deb10u2 glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27645

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-02-24 15:15 修改: 2026-06-17 03:45

libc-bin CVE-2024-33601 低危 2.28-10 2.28-10+deb10u4 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc-bin CVE-2024-33602 低危 2.28-10 2.28-10+deb10u4 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

gnupg-l10n CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

libblkid1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

libssl1.1 CVE-2024-2511 低危 1.1.1d-0+deb10u6 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

libssl1.1 CVE-2024-4741 低危 1.1.1d-0+deb10u6 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

dirmngr CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

gnupg-utils CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

coreutils CVE-2016-2781 低危 8.30-3 coreutils: Non-privileged session can escape to the parent session in chroot

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

gpg CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

curl CVE-2021-22898 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37

libsepol1 CVE-2021-36084 低危 2.8-1 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36085 低危 2.8-1 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36086 低危 2.8-1 libsepol: use-after-free in cil_reset_classpermission()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36087 低危 2.8-1 libsepol: heap-based buffer overflow in ebitmap_match_any()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

gpg-agent CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

libsmartcols1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

curl CVE-2021-22924 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

libfdisk1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

gpg-wks-client CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

fdisk CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

gpg-wks-server CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

curl CVE-2022-35252 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u4 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51

openssl CVE-2024-2511 低危 1.1.1d-0+deb10u6 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

openssl CVE-2024-4741 低危 1.1.1d-0+deb10u6 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

gpgconf CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

passwd CVE-2018-7169 低危 1:4.5-1.1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02

passwd CVE-2023-29383 低危 1:4.5-1.1 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

curl CVE-2023-28322 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u8 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

libcurl4 CVE-2021-22898 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37

tar CVE-2023-39804 低危 1.30+dfsg-6 1.30+dfsg-6+deb10u1 tar: Incorrectly handled extension attributes in PAX archives can lead to a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 04:15 修改: 2026-06-17 06:12

libcurl4 CVE-2021-22924 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u3 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38

libcurl4 CVE-2022-35252 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u4 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51

liblz4-1 CVE-2019-17543 低危 1.8.3-1 lz4: heap-based buffer overflow in LZ4_write32

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17543

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2019-10-14 02:15 修改: 2026-06-17 02:24

util-linux CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

libcurl4 CVE-2023-28322 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u8 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47

libcurl4 CVE-2023-38546 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u7 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10

libmount1 CVE-2024-28085 低危 2.33.1-0.1 2.33.1-0.1+deb10u1 util-linux: CVE-2024-28085: wall: escape sequence injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20

gpgsm CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:ccb9b68523fdb47816f2a15d7590d06ff3d897dfdb3e0733e9c06a2bb79ebfc7

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

curl CVE-2023-38546 低危 7.64.0-4+deb10u2 7.64.0-4+deb10u7 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:00bcea93703b384ab61d2344d6e721c75b0e47198b7912136a86759d8d885711

发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10

gpgv CVE-2019-14855 低危 2.2.12-1+deb10u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

bzip2 DLA-3112-1 未知 1.0.6-9.2~deb10u1 1.0.6-9.2~deb10u2 bzip2 - bugfix update

漏洞详情:

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

debian-archive-keyring DLA-3482-1 未知 2019.1+deb10u1 2019.1+deb10u2 debian-archive-keyring - security update

漏洞详情:

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libbz2-1.0 DLA-3112-1 未知 1.0.6-9.2~deb10u1 1.0.6-9.2~deb10u2 bzip2 - bugfix update

漏洞详情:

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libexpat1 DSA-5085-2 未知 2.2.6-2+deb10u1 2.2.6-2+deb10u4 expat - regression update

漏洞详情:

镜像层: sha256:612278663ad46df0abc5abde00c74390513b0c3d9ac286ad0070edaae604aba3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3134-1 未知 2021a-0+deb10u1 2021a-0+deb10u7 tzdata - new timezone database

漏洞详情:

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3161-1 未知 2021a-0+deb10u1 2021a-0+deb10u8 tzdata - new timezone database

漏洞详情:

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3366-1 未知 2021a-0+deb10u1 2021a-0+deb10u10 tzdata - new timezone database

漏洞详情:

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3412-1 未知 2021a-0+deb10u1 2021a-0+deb10u11 tzdata - new timezone database

漏洞详情:

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3684-1 未知 2021a-0+deb10u1 2021a-0+deb10u12 tzdata - new timezone database

漏洞详情:

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3788-1 未知 2021a-0+deb10u1 2024a-0+deb10u1 tzdata - new timezone database

漏洞详情:

镜像层: sha256:688e187d6c79c46e8261890f0010fd5d178b8faa178959b0b46b2635aa1eeff3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Java (jar)
低危漏洞:11 中危漏洞:60 高危漏洞:51 严重漏洞:4
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.springframework.boot:spring-boot-actuator-autoconfigure CVE-2023-20873 严重 2.6.4 3.0.6, 2.7.11, 2.6.15, 2.5.15 spring-boot: Security Bypass With Wildcard Pattern Matching on Cloud Foundry

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20873

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-04-20 21:15 修改: 2026-06-17 05:31

org.springframework:spring-beans CVE-2022-22965 严重 5.3.16 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-web CVE-2016-1000027 严重 5.3.16 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42

org.springframework:spring-webflux CVE-2022-22965 严重 5.3.16 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.13.1 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15

com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.13.1 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.13.1 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.13.1 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.13.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-23 21:17 修改: 2026-08-13 13:19

io.micrometer:micrometer-core CVE-2026-40984 高危 1.8.3 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-08-13 13:18

io.netty:netty-codec CVE-2026-42583 高危 4.1.74.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec CVE-2026-59901 高危 4.1.74.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29

io.netty:netty-codec-dns CVE-2026-42579 高危 4.1.74.Final 4.2.13.Final, 4.1.133.Final netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http CVE-2026-33870 高危 4.1.74.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18

io.netty:netty-codec-http CVE-2026-42584 高危 4.1.74.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http CVE-2026-42587 高危 4.1.74.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http CVE-2026-55831 高危 4.1.74.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17

io.netty:netty-codec-http CVE-2026-55833 高危 4.1.74.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34

io.netty:netty-codec-http CVE-2026-56745 高危 4.1.74.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46

io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.74.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41

io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.74.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18

io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.74.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.74.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46

io.netty:netty-codec-http2 GHSA-xpw8-rcwv-8f8p 高危 4.1.74.Final 4.1.100.Final io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack

漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08

io.netty:netty-handler CVE-2026-44249 高危 4.1.74.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-11 22:16 修改: 2026-08-13 13:18

io.netty:netty-handler CVE-2026-45416 高危 4.1.74.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 15:16 修改: 2026-08-13 13:19

io.netty:netty-handler CVE-2026-50010 高危 4.1.74.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 16:16 修改: 2026-08-12 12:19

io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.74.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 15:16 修改: 2026-08-13 13:19

io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.74.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 16:16 修改: 2026-08-13 13:19

io.projectreactor.netty:reactor-netty-core CVE-2023-34054 高危 1.0.16 1.1.13, 1.0.39 Reactor Netty HTTP Server denial of service vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34054

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-11-28 09:15 修改: 2026-06-17 06:02

io.projectreactor.netty:reactor-netty-http CVE-2023-34062 高危 1.0.16 1.1.13, 1.0.39 reactor-netty-http: directory traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34062

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-11-15 10:15 修改: 2026-06-17 06:02

org.springframework.boot:spring-boot CVE-2025-22235 高危 2.6.4 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45

org.springframework.boot:spring-boot CVE-2026-40973 高危 2.6.4 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10

ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.10 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

org.springframework.boot:spring-boot-autoconfigure CVE-2023-20883 高危 2.6.4 3.0.7, 2.7.12, 2.6.15, 2.5.15 spring-boot: Spring Boot Welcome Page DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31

org.springframework.cloud:spring-cloud-gateway-server CVE-2025-41235 高危 3.1.0 4.2.3, 4.1.8, 3.1.10 Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41235

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-05-30 06:15 修改: 2026-06-17 09:22

org.springframework.cloud:spring-cloud-gateway-server CVE-2025-41253 高危 3.1.0 4.3.2, 4.2.6 Spring Cloud Gateway Server Webflux is vulnerable to Expression Language Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41253

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-10-16 15:15 修改: 2026-06-17 09:22

org.springframework.security:spring-security-crypto CVE-2025-22228 高危 5.6.2 6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16 spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22228

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-03-20 06:15 修改: 2026-06-17 08:45

ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.10 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

org.springframework:spring-beans CVE-2022-22970 高危 5.3.16 5.2.22.RELEASE, 5.3.20 springframework: DoS via data binding to multipartFile or servlet part

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29

org.springframework:spring-context CVE-2022-22968 高危 5.3.16 5.3.19, 5.2.21.RELEASE Framework: Data Binding Rules Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29

org.springframework:spring-core CVE-2025-41249 高危 5.3.16 6.2.11 org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22

org.springframework:spring-expression CVE-2023-20863 高危 5.3.16 6.0.8, 5.3.27, 5.2.24.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2026-41849 高危 5.3.16 spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41849

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-expression CVE-2026-41850 高危 5.3.16 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.13.1 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

org.springframework:spring-web CVE-2024-22243 高危 5.3.16 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22259 高危 5.3.16 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22262 高危 5.3.16 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.13.1 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30

org.springframework:spring-webflux CVE-2024-38816 高危 5.3.16 6.1.13 spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38816

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-09-13 06:15 修改: 2026-06-17 07:41

org.springframework:spring-webflux CVE-2024-38819 高危 5.3.16 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41

org.springframework:spring-webflux CVE-2026-41842 高危 5.3.16 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.yaml:snakeyaml CVE-2022-1471 高危 1.29 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22

org.yaml:snakeyaml CVE-2022-25857 高危 1.29 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34

io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.74.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.74.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52

io.netty:netty-codec-http CVE-2026-41417 中危 4.1.74.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46

io.netty:netty-codec-http CVE-2026-42580 中危 4.1.74.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.projectreactor.netty:reactor-netty-http CVE-2022-31684 中危 1.0.16 1.0.24 reactor-netty-http: Log request headers in some cases of invalid HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31684

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-10-19 22:15 修改: 2026-06-17 04:46

io.projectreactor.netty:reactor-netty-http CVE-2025-22227 中危 1.0.16 1.3.0-M5, 1.2.8 io.projectreactor.netty/reactor-netty: Reactor Netty Credential Leak via Redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22227

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-07-16 10:15 修改: 2026-06-17 08:45

org.bouncycastle:bcpkix-jdk15on CVE-2025-8916 中危 1.68 1.79 org.bouncycastle: BouncyCastle denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07

org.bouncycastle:bcpkix-jdk15on CVE-2026-5588 中危 1.68 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:19

org.bouncycastle:bcprov-jdk15on CVE-2023-33201 中危 1.68 bouncycastle: potential blind LDAP injection attack using a self-signed certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01

org.bouncycastle:bcprov-jdk15on CVE-2023-33202 中危 1.68 1.70 bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-11-23 16:15 修改: 2026-06-17 06:01

org.bouncycastle:bcprov-jdk15on CVE-2024-29857 中危 1.68 1.78 org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23

org.bouncycastle:bcprov-jdk15on CVE-2024-30171 中危 1.68 1.78 bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26

org.bouncycastle:bcprov-jdk15on CVE-2024-34447 中危 1.68 1.78 org.bouncycastle: Use of Incorrectly-Resolved Name or Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34447

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-05-03 16:15 修改: 2026-06-17 07:33

io.netty:netty-codec-http CVE-2026-42581 中危 4.1.74.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http CVE-2026-42585 中危 4.1.74.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

org.springframework.boot:spring-boot-actuator CVE-2023-34055 中危 2.6.4 2.7.18, 3.0.13, 3.1.6 spring-boot: org.springframework.boot: spring-boot-actuator class vulnerable to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34055

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-11-28 09:15 修改: 2026-06-17 06:02

io.netty:netty-codec-http CVE-2026-50020 中危 4.1.74.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-codec-http CVE-2026-56746 中危 4.1.74.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47

io.netty:netty-codec-http CVE-2026-59898 中危 4.1.74.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35

io.netty:netty-codec-http CVE-2026-59899 中危 4.1.74.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25

io.netty:netty-codec-http CVE-2026-59921 中危 4.1.74.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05

io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.74.Final 4.2.16.Final, 4.1.136.Final Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.13.1 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.10 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

org.springframework:spring-context CVE-2024-38820 中危 5.3.16 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.10 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00

com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.13.1 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05

io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.74.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54

io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.74.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 16:16 修改: 2026-08-13 13:19

org.springframework:spring-expression CVE-2022-22950 中危 5.3.16 5.3.17, 5.2.20.RELEASE spring-expression: Denial of service via specially crafted SpEL expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-expression CVE-2023-20861 中危 5.3.16 6.0.7, 5.3.26, 5.2.23.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2024-38808 中危 5.3.16 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41

org.springframework:spring-expression CVE-2026-41851 中危 5.3.16 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.74.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.74.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29

io.netty:netty-common CVE-2024-47535 中危 4.1.74.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57

io.netty:netty-common CVE-2025-25193 中危 4.1.74.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00

org.springframework:spring-web CVE-2024-38809 中危 5.3.16 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41

org.springframework:spring-web CVE-2024-38820 中危 5.3.16 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

io.netty:netty-codec CVE-2025-58057 中危 4.1.74.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.13.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

io.netty:netty-codec-http CVE-2022-24823 中危 4.1.74.Final 4.1.77.Final netty: world readable temporary file containing sensitive data

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32

io.netty:netty-handler CVE-2023-34462 中危 4.1.74.Final 4.1.94.Final netty: SniHandler 16MB allocation leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03

org.springframework:spring-webflux CVE-2026-22737 中危 5.3.16 7.0.6, 6.2.17 Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20

org.springframework:spring-webflux CVE-2026-22740 中危 5.3.16 7.0.7, 6.2.18 spring-webflux: Spring WebFlux: Denial of Service via temporary file accumulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22740

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

org.springframework:spring-webflux CVE-2026-22745 中危 5.3.16 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

org.springframework:spring-webflux CVE-2026-41839 中危 5.3.16 7.0.8, 6.2.19 spring-framework: Spring Framework: Privilege escalation via session ID exchange in WebFlux applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41839

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webflux CVE-2026-41840 中危 5.3.16 7.0.8, 6.2.19 Spring WebFlux applications are vulnerable to Denial of Service (DoS) ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41840

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webflux CVE-2026-41841 中危 5.3.16 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webflux CVE-2026-41843 中危 5.3.16 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webflux CVE-2026-41844 中危 5.3.16 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webflux CVE-2026-41847 中危 5.3.16 Spring WebFlux applications may be vulnerable to a security bypass whe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41847

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webflux CVE-2026-41853 中危 5.3.16 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

io.netty:netty-codec-http CVE-2024-29025 中危 4.1.74.Final 4.1.108.Final netty-codec-http: Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22

io.netty:netty-codec-http CVE-2025-67735 中危 4.1.74.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58

org.yaml:snakeyaml CVE-2022-38749 中危 1.29 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38750 中危 1.29 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38751 中危 1.29 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38752 中危 1.29 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-41854 中危 1.29 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03

org.springframework:spring-core CVE-2026-41848 低危 5.3.16 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

io.netty:netty-codec-http CVE-2025-58056 低危 4.1.74.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43

org.springframework:spring-webflux CVE-2026-22735 低危 5.3.16 7.0.6, 6.2.17 org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20

org.springframework:spring-webflux CVE-2026-22741 低危 5.3.16 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.74.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.10 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

ch.qos.logback:logback-core CVE-2026-9828 低危 1.2.10 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.10 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00

org.springframework:spring-context CVE-2025-22233 低危 5.3.16 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45

ch.qos.logback:logback-core CVE-2026-10532 低危 1.2.10 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10

org.springframework:spring-expression CVE-2026-41852 低危 5.3.16 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:e8d75055b365fa5bdf14bfa33b3844c60f78d4d9cf173ffa3ba20134c99be088

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×