docker.io/webcenter/activemq:5.14.3 linux/amd64

docker.io/webcenter/activemq:5.14.3 - Trivy安全扫描结果 扫描时间: 2026-09-18 12:41
全部漏洞信息
低危漏洞:15 中危漏洞:80 高危漏洞:122 严重漏洞:43

系统OS: ubuntu 15.10 扫描引擎: Trivy 扫描时间: 2026-09-18 12:41

docker.io/webcenter/activemq:5.14.3 (ubuntu 15.10) (ubuntu)
低危漏洞:4 中危漏洞:4 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
openjdk-8-jre-headless CVE-2016-3587 中危 8u91-b14-0ubuntu4~15.10.1 8u91-b14-3ubuntu1~15.10.1 OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3587

镜像层: sha256:46a332b94d40047a3cabdce7ce3a74b87ddc6cd25313363b80a0df4262582a21

发布日期: 2016-07-21 10:14 修改: 2026-06-17 00:46
openjdk-8-jre-headless CVE-2016-3598 中危 8u91-b14-0ubuntu4~15.10.1 8u91-b14-3ubuntu1~15.10.1 OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3598

镜像层: sha256:46a332b94d40047a3cabdce7ce3a74b87ddc6cd25313363b80a0df4262582a21

发布日期: 2016-07-21 10:14 修改: 2026-06-17 00:46
openjdk-8-jre-headless CVE-2016-3606 中危 8u91-b14-0ubuntu4~15.10.1 8u91-b14-3ubuntu1~15.10.1 OpenJDK: insufficient bytecode verification (Hotspot, 8155981)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3606

镜像层: sha256:46a332b94d40047a3cabdce7ce3a74b87ddc6cd25313363b80a0df4262582a21

发布日期: 2016-07-21 10:14 修改: 2026-06-17 00:46
openjdk-8-jre-headless CVE-2016-3610 中危 8u91-b14-0ubuntu4~15.10.1 8u91-b14-3ubuntu1~15.10.1 OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3610

镜像层: sha256:46a332b94d40047a3cabdce7ce3a74b87ddc6cd25313363b80a0df4262582a21

发布日期: 2016-07-21 10:14 修改: 2026-06-17 00:46
openjdk-8-jre-headless CVE-2016-3458 低危 8u91-b14-0ubuntu4~15.10.1 8u91-b14-3ubuntu1~15.10.1 OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3458

镜像层: sha256:46a332b94d40047a3cabdce7ce3a74b87ddc6cd25313363b80a0df4262582a21

发布日期: 2016-07-21 10:12 修改: 2026-06-17 00:45
openjdk-8-jre-headless CVE-2016-3500 低危 8u91-b14-0ubuntu4~15.10.1 8u91-b14-3ubuntu1~15.10.1 OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3500

镜像层: sha256:46a332b94d40047a3cabdce7ce3a74b87ddc6cd25313363b80a0df4262582a21

发布日期: 2016-07-21 10:12 修改: 2026-06-17 00:45
openjdk-8-jre-headless CVE-2016-3508 低危 8u91-b14-0ubuntu4~15.10.1 8u91-b14-3ubuntu1~15.10.1 OpenJDK: missing entity replacement limits (JAXP, 8149962)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3508

镜像层: sha256:46a332b94d40047a3cabdce7ce3a74b87ddc6cd25313363b80a0df4262582a21

发布日期: 2016-07-21 10:13 修改: 2026-06-17 00:45
openjdk-8-jre-headless CVE-2016-3550 低危 8u91-b14-0ubuntu4~15.10.1 8u91-b14-3ubuntu1~15.10.1 OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3550

镜像层: sha256:46a332b94d40047a3cabdce7ce3a74b87ddc6cd25313363b80a0df4262582a21

发布日期: 2016-07-21 10:13 修改: 2026-06-17 00:45
Java (jar)
低危漏洞:11 中危漏洞:76 高危漏洞:122 严重漏洞:43
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.fasterxml.jackson.core:jackson-databind CVE-2017-15095 严重 2.6.3 2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15095

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-02-06 15:29 修改: 2026-06-17 01:07
com.fasterxml.jackson.core:jackson-databind CVE-2017-17485 严重 2.6.3 2.9.4, 2.8.11, 2.7.9.2 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17485

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-01-10 18:29 修改: 2026-06-17 01:10
com.fasterxml.jackson.core:jackson-databind CVE-2017-7525 严重 2.6.3 2.6.7.1, 2.7.9.1, 2.8.9 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7525

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-02-06 15:29 修改: 2026-06-17 01:24
com.fasterxml.jackson.core:jackson-databind CVE-2018-11307 严重 2.6.3 2.7.9.4, 2.8.11.2, 2.9.6 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-07-09 16:15 修改: 2026-06-17 01:35
com.fasterxml.jackson.core:jackson-databind CVE-2018-14718 严重 2.6.3 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 jackson-databind: arbitrary code execution in slf4j-ext class

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41
com.fasterxml.jackson.core:jackson-databind CVE-2018-14719 严重 2.6.3 2.9.7, 2.8.11.3, 2.7.9.5 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41
com.fasterxml.jackson.core:jackson-databind CVE-2018-19362 严重 2.6.3 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 jackson-databind: improper polymorphic deserialization in jboss-common-core class

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:49
com.fasterxml.jackson.core:jackson-databind CVE-2018-7489 严重 2.6.3 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-02-26 15:29 修改: 2026-06-17 02:03
com.fasterxml.jackson.core:jackson-databind CVE-2019-14379 严重 2.6.3 2.9.9.2, 2.8.11.4, 2.7.9.6 jackson-databind: default typing mishandling leading to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-07-29 12:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind CVE-2019-14540 严重 2.6.3 2.9.10, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind CVE-2019-16335 严重 2.6.3 2.9.10, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:22
com.fasterxml.jackson.core:jackson-databind CVE-2019-16942 严重 2.6.3 2.9.10.1, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind CVE-2019-16943 严重 2.6.3 2.9.10.1, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind CVE-2019-17267 严重 2.6.3 2.9.10, 2.8.11.5 jackson-databind: Serialization gadgets in classes of the ehcache package

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-10-07 00:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind CVE-2019-17531 严重 2.6.3 2.9.10.1, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-10-12 21:15 修改: 2026-06-17 02:24
com.fasterxml.jackson.core:jackson-databind CVE-2019-20330 严重 2.6.3 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 jackson-databind: lacks certain net.sf.ehcache blocking

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-01-03 04:15 修改: 2026-06-17 02:30
com.fasterxml.jackson.core:jackson-databind CVE-2020-8840 严重 2.6.3 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 jackson-databind: Lacks certain xbean-reflect/JNDI blocking

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-02-10 21:56 修改: 2026-06-17 03:27
com.fasterxml.jackson.core:jackson-databind CVE-2020-9547 严重 2.6.3 2.9.10.4, 2.8.11.6, 2.7.9.7 jackson-databind: Serialization gadgets in ibatis-sqlmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-9548 严重 2.6.3 2.9.10.4, 2.8.11.6, 2.7.9.7 jackson-databind: Serialization gadgets in anteros-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-03-02 04:15 修改: 2026-08-25 16:28
log4j:log4j CVE-2019-17571 严重 1.2.17 log4j: deserialization of untrusted data in SocketServer

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-12-20 17:15 修改: 2026-06-17 02:24
log4j:log4j CVE-2019-17571 严重 1.2.17 log4j: deserialization of untrusted data in SocketServer

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-12-20 17:15 修改: 2026-06-17 02:24
log4j:log4j CVE-2022-23305 严重 1.2.17 log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j CVE-2022-23305 严重 1.2.17 log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j CVE-2022-23307 严重 1.2.17 log4j: Unsafe deserialization flaw in Chainsaw log viewer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j CVE-2022-23307 严重 1.2.17 log4j: Unsafe deserialization flaw in Chainsaw log viewer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
org.apache.activemq:activemq-client CVE-2023-46604 严重 5.14.3 5.15.16, 5.16.7, 5.17.6, 5.18.3 activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46604

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-10-27 15:15 修改: 2026-06-17 06:31
org.apache.activemq:activemq-client CVE-2023-46604 严重 5.14.3 5.15.16, 5.16.7, 5.17.6, 5.18.3 activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46604

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-10-27 15:15 修改: 2026-06-17 06:31
org.apache.activemq:activemq-openwire-legacy CVE-2023-46604 严重 5.14.3 5.15.16, 5.16.7, 5.17.6, 5.18.3 activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46604

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-10-27 15:15 修改: 2026-06-17 06:31
org.apache.activemq:activemq-openwire-legacy CVE-2023-46604 严重 5.14.3 5.15.16, 5.16.7, 5.17.6, 5.18.3 activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46604

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-10-27 15:15 修改: 2026-06-17 06:31
org.apache.shiro:shiro-core CVE-2016-4437 严重 1.2.4 1.2.5 shiro: Security constraint bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4437

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2016-06-07 14:06 修改: 2026-06-17 00:47
org.apache.shiro:shiro-core CVE-2020-11989 严重 1.2.4 1.5.3 shiro: spring dynamic controllers, a specially crafted request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11989

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-06-22 19:15 修改: 2026-06-17 02:51
org.apache.shiro:shiro-core CVE-2020-1957 严重 1.2.4 1.5.2 shiro: Spring dynamic controllers, a specially crafted request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1957

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-03-25 16:15 修改: 2026-06-17 03:02
org.apache.shiro:shiro-core CVE-2021-41303 严重 1.2.4 1.8.0 shiro: specially crafted HTTP request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41303

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-09-17 09:15 修改: 2026-06-17 04:08
org.apache.shiro:shiro-core CVE-2022-32532 严重 1.2.4 1.9.1 shiro: authorization bypass due to possible misconfigured

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32532

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-06-29 00:15 修改: 2026-06-17 04:47
org.apache.shiro:shiro-core CVE-2022-40664 严重 1.2.4 1.10.0 shiro: Authentication Bypass Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40664

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-10-12 07:15 修改: 2026-06-17 05:01
org.apache.shiro:shiro-spring CVE-2020-17510 严重 1.2.4 1.7.0 shiro: specially crafted HTTP request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17510

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-11-05 21:15 修改: 2026-06-17 02:59
org.apache.shiro:shiro-spring CVE-2020-17523 严重 1.2.4 1.7.1 shiro: Authentication bypass through specially crafted HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17523

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-02-03 17:15 修改: 2026-06-17 02:59
org.apache.zookeeper:zookeeper CVE-2023-44981 严重 3.4.6 3.7.2, 3.8.3, 3.9.1 zookeeper: Authorization Bypass in Apache ZooKeeper

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-10-11 12:15 修改: 2026-06-17 06:28
org.eclipse.jetty:jetty-server CVE-2017-7657 严重 9.2.13.v20150730 9.2.25.v20180606, 9.3.24.v20180605 jetty: HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7657

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-06-26 16:29 修改: 2026-06-17 01:24
org.eclipse.jetty:jetty-server CVE-2017-7658 严重 9.2.13.v20150730 9.2.25.v20180606, 9.3.24.v20180605, 9.4.11.v20180605 jetty: Incorrect header handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7658

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-06-26 17:29 修改: 2026-06-17 01:24
org.springframework:spring-beans CVE-2022-22965 严重 4.1.9.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-web CVE-2016-1000027 严重 4.1.9.RELEASE 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42
org.springframework:spring-webmvc CVE-2022-22965 严重 4.1.9.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
com.fasterxml.jackson.core:jackson-databind CVE-2020-36188 高危 2.6.3 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-36189 高危 2.6.3 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.6.3 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15
com.fasterxml.jackson.core:jackson-databind CVE-2021-20190 高危 2.6.3 2.9.10.7, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-19 17:15 修改: 2026-07-24 14:27
com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.6.3 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.6.3 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.thoughtworks.xstream:xstream CVE-2017-7957 高危 1.4.9 1.4.10 XStream: DoS when unmarshalling void type

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7957

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2017-04-29 19:59 修改: 2026-06-17 01:25
com.thoughtworks.xstream:xstream CVE-2020-26217 高危 1.4.9 1.4.14-java7 XStream: remote code execution due to insecure XML deserialization when relying on blocklists

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26217

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-11-16 21:15 修改: 2026-06-17 03:07
com.thoughtworks.xstream:xstream CVE-2021-21341 高危 1.4.9 1.4.16 XStream: allow a remote attacker to cause DoS only by manipulating the processed input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21341

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-29505 高危 1.4.9 1.4.17 XStream: remote command execution attack by manipulating the processed input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29505

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-05-28 21:15 修改: 2026-06-17 03:47
com.thoughtworks.xstream:xstream CVE-2021-39139 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39139

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39141 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.xml.internal.ws.client.sei.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39141

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39144 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39144

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39145 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39145

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39146 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39146

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39147 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapSearchEnumeration

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39147

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39148 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.toolkit.dir.ContextEnumerator

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39148

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39149 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.corba.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39149

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39150 高危 1.4.9 1.4.18 xstream: Server-side request forgery (SSRF) via unsafe deserialization of com.sun.xml.internal.ws.client.sei.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39150

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 19:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39151 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39151

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39152 高危 1.4.9 1.4.18 xstream: Server-side request forgery (SSRF) via unsafe deserialization of jdk.nashorn.internal.runtime.Source$URLData

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39152

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 19:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39153 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39153

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39154 高危 1.4.9 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39154

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-43859 高危 1.4.9 1.4.19 xstream: Injecting highly recursive collections or maps can cause a DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43859

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-02-01 12:15 修改: 2026-06-17 04:11
com.thoughtworks.xstream:xstream CVE-2022-40151 高危 1.4.9 1.4.20 xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40151

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
com.thoughtworks.xstream:xstream CVE-2022-41966 高危 1.4.9 1.4.20 xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41966

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-12-28 00:15 修改: 2026-06-17 05:04
com.thoughtworks.xstream:xstream CVE-2024-47072 高危 1.4.9 1.4.21 com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-11-08 00:15 修改: 2026-06-17 07:56
commons-beanutils:commons-beanutils CVE-2014-0114 高危 1.9.2 1.9.4 1: Class Loader manipulation via request parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0114

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2014-04-30 10:49 修改: 2026-05-06 22:30
commons-beanutils:commons-beanutils CVE-2019-10086 高危 1.9.2 1.9.4 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10086

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-08-20 21:15 修改: 2026-08-25 16:28
commons-beanutils:commons-beanutils CVE-2025-48734 高危 1.9.2 1.11.0 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.6.3 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.6.3 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-databind CVE-2018-12022 高危 2.6.3 2.7.9.4, 2.8.11.2, 2.9.6 jackson-databind: improper polymorphic deserialization of types from Jodd-db library

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-03-21 16:00 修改: 2026-06-17 01:37
com.fasterxml.jackson.core:jackson-databind CVE-2018-5968 高危 2.6.3 2.8.11.1, 2.9.4, 2.7.9.5 jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5968

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-01-22 04:29 修改: 2026-06-17 02:01
com.fasterxml.jackson.core:jackson-databind CVE-2019-12086 高危 2.6.3 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-05-17 17:29 修改: 2026-06-17 02:14
com.fasterxml.jackson.core:jackson-databind CVE-2019-14439 高危 2.6.3 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: Polymorphic typing issue related to logback/JNDI

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-07-30 11:15 修改: 2026-06-17 02:18
log4j:log4j CVE-2021-4104 高危 1.2.17 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-12-14 12:15 修改: 2026-06-17 04:19
log4j:log4j CVE-2021-4104 高危 1.2.17 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-12-14 12:15 修改: 2026-06-17 04:19
log4j:log4j CVE-2022-23302 高危 1.2.17 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j CVE-2022-23302 高危 1.2.17 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j CVE-2023-26464 高危 1.2.17 2.0 log4j1-socketappender: DoS via hashmap logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26464

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-03-10 14:15 修改: 2026-06-17 05:43
log4j:log4j CVE-2023-26464 高危 1.2.17 2.0 log4j1-socketappender: DoS via hashmap logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26464

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-03-10 14:15 修改: 2026-06-17 05:43
org.apache.activemq:activemq-all CVE-2026-34197 高危 5.14.3 5.19.5, 6.2.3 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: Apache ActiveMQ: RCE via crafted discovery URI in Jolokia JMX-HTTP bridge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34197

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-07 09:16 修改: 2026-08-04 13:18
org.apache.activemq:activemq-all CVE-2026-39304 高危 5.14.3 5.19.4, 6.2.4 Apache ActiveMQ Client: Apache ActiveMQ Broker: Apache ActiveMQ: Apache ActiveMQ: Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39304

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-10 11:16 修改: 2026-07-15 02:20
org.apache.activemq:activemq-all CVE-2026-40466 高危 5.14.3 5.19.6, 6.2.5 org.apache.activemq/activemq-all: org.apache.activemq/activemq-broker: Apache ActiveMQ: Arbitrary code execution via improper input validation in HTTP Discovery transport

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40466

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-24 11:16 修改: 2026-07-15 02:21
org.apache.activemq:activemq-all CVE-2026-41044 高危 5.14.3 5.19.6, 6.2.5 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: Apache ActiveMQ: Arbitrary code execution via improper input validation in admin console

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41044

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-24 11:16 修改: 2026-07-15 02:21
org.apache.activemq:activemq-all CVE-2026-42588 高危 5.14.3 5.19.7, 6.2.6 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/apache-activemq: Apache ActiveMQ: Arbitrary code execution via improper input validation in Jolokia JMX-HTTP bridge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42588

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-22 07:10
org.apache.activemq:activemq-all CVE-2026-45505 高危 5.14.3 5.19.7, 6.2.6 activemq: Apache ActiveMQ: Arbitrary Code Execution via crafted discovery URI bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45505

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-21 19:10
org.apache.activemq:activemq-broker CVE-2026-34197 高危 5.14.3 5.19.5, 6.2.3 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: Apache ActiveMQ: RCE via crafted discovery URI in Jolokia JMX-HTTP bridge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34197

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-07 09:16 修改: 2026-08-04 13:18
org.apache.activemq:activemq-broker CVE-2026-34197 高危 5.14.3 5.19.5, 6.2.3 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: Apache ActiveMQ: RCE via crafted discovery URI in Jolokia JMX-HTTP bridge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34197

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-07 09:16 修改: 2026-08-04 13:18
org.apache.activemq:activemq-broker CVE-2026-39304 高危 5.14.3 5.19.4, 6.2.4 Apache ActiveMQ Client: Apache ActiveMQ Broker: Apache ActiveMQ: Apache ActiveMQ: Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39304

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-10 11:16 修改: 2026-07-15 02:20
org.apache.activemq:activemq-broker CVE-2026-39304 高危 5.14.3 5.19.4, 6.2.4 Apache ActiveMQ Client: Apache ActiveMQ Broker: Apache ActiveMQ: Apache ActiveMQ: Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39304

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-10 11:16 修改: 2026-07-15 02:20
org.apache.activemq:activemq-broker CVE-2026-40466 高危 5.14.3 5.19.6, 6.2.5 org.apache.activemq/activemq-all: org.apache.activemq/activemq-broker: Apache ActiveMQ: Arbitrary code execution via improper input validation in HTTP Discovery transport

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40466

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-24 11:16 修改: 2026-07-15 02:21
org.apache.activemq:activemq-broker CVE-2026-40466 高危 5.14.3 5.19.6, 6.2.5 org.apache.activemq/activemq-all: org.apache.activemq/activemq-broker: Apache ActiveMQ: Arbitrary code execution via improper input validation in HTTP Discovery transport

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40466

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-24 11:16 修改: 2026-07-15 02:21
org.apache.activemq:activemq-broker CVE-2026-41044 高危 5.14.3 5.19.6, 6.2.5 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: Apache ActiveMQ: Arbitrary code execution via improper input validation in admin console

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41044

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-24 11:16 修改: 2026-07-15 02:21
org.apache.activemq:activemq-broker CVE-2026-41044 高危 5.14.3 5.19.6, 6.2.5 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: Apache ActiveMQ: Arbitrary code execution via improper input validation in admin console

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41044

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-24 11:16 修改: 2026-07-15 02:21
org.apache.activemq:activemq-broker CVE-2026-42588 高危 5.14.3 5.19.7, 6.2.6 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/apache-activemq: Apache ActiveMQ: Arbitrary code execution via improper input validation in Jolokia JMX-HTTP bridge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42588

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-22 07:10
org.apache.activemq:activemq-broker CVE-2026-42588 高危 5.14.3 5.19.7, 6.2.6 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/apache-activemq: Apache ActiveMQ: Arbitrary code execution via improper input validation in Jolokia JMX-HTTP bridge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42588

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-22 07:10
org.apache.activemq:activemq-broker CVE-2026-45505 高危 5.14.3 5.19.7, 6.2.6 activemq: Apache ActiveMQ: Arbitrary Code Execution via crafted discovery URI bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45505

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-21 19:10
org.apache.activemq:activemq-broker CVE-2026-45505 高危 5.14.3 5.19.7, 6.2.6 activemq: Apache ActiveMQ: Arbitrary Code Execution via crafted discovery URI bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45505

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-21 19:10
com.fasterxml.jackson.core:jackson-databind CVE-2019-14892 高危 2.6.3 2.6.7.3, 2.8.11.5, 2.9.10 jackson-databind: Serialization gadgets in classes of the commons-configuration package

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-03-02 17:15 修改: 2026-06-17 02:19
com.fasterxml.jackson.core:jackson-databind CVE-2020-10650 高危 2.6.3 2.9.10.4 A deserialization flaw was discovered in jackson-databind through 2.9. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-12-26 20:15 修改: 2026-06-17 02:48
org.apache.activemq:activemq-client CVE-2018-11775 高危 5.14.3 5.15.6 activemq: ActiveMQ Client Missing TLS Hostname Verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11775

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-09-10 20:29 修改: 2026-06-17 01:36
org.apache.activemq:activemq-client CVE-2018-11775 高危 5.14.3 5.15.6 activemq: ActiveMQ Client Missing TLS Hostname Verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11775

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-09-10 20:29 修改: 2026-06-17 01:36
org.apache.activemq:activemq-client CVE-2019-0222 高危 5.14.3 5.15.9 activemq: Corrupt MQTT frame can cause broker shutdown

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0222

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-03-28 22:29 修改: 2026-06-17 02:08
org.apache.activemq:activemq-client CVE-2019-0222 高危 5.14.3 5.15.9 activemq: Corrupt MQTT frame can cause broker shutdown

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0222

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-03-28 22:29 修改: 2026-06-17 02:08
org.apache.activemq:activemq-client CVE-2026-39304 高危 5.14.3 5.19.4, 6.2.4 Apache ActiveMQ Client: Apache ActiveMQ Broker: Apache ActiveMQ: Apache ActiveMQ: Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39304

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-10 11:16 修改: 2026-07-15 02:20
org.apache.activemq:activemq-client CVE-2026-39304 高危 5.14.3 5.19.4, 6.2.4 Apache ActiveMQ Client: Apache ActiveMQ Broker: Apache ActiveMQ: Apache ActiveMQ: Denial of Service due to TLSv1.3 KeyUpdate memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39304

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-10 11:16 修改: 2026-07-15 02:20
com.fasterxml.jackson.core:jackson-databind CVE-2020-10673 高危 2.6.3 2.9.10.4, 2.6.7.4 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-03-18 22:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-24616 高危 2.6.3 2.9.10.6 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-08-25 18:15 修改: 2026-08-25 16:28
org.apache.camel:camel-core CVE-2017-5643 高危 2.16.3 2.17.6, 2.18.2 camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5643

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2017-03-16 15:59 修改: 2026-06-17 01:20
org.apache.camel:camel-core CVE-2017-5643 高危 2.16.3 2.17.6, 2.18.2 camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5643

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2017-03-16 15:59 修改: 2026-06-17 01:20
org.apache.camel:camel-core CVE-2019-0188 高危 2.16.3 2.24.0 camel-xmljson: XML external entity injection vulnerability inoutdated JSON-lib library

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0188

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-05-28 19:29 修改: 2026-06-17 02:07
org.apache.camel:camel-core CVE-2019-0188 高危 2.16.3 2.24.0 camel-xmljson: XML external entity injection vulnerability inoutdated JSON-lib library

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0188

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-05-28 19:29 修改: 2026-06-17 02:07
org.apache.camel:camel-core CVE-2020-11971 高危 2.16.3 3.2.0 camel: DNS Rebinding in JMX Connector could result in remote command execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11971

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-05-14 17:15 修改: 2026-06-17 02:51
org.apache.camel:camel-core CVE-2020-11971 高危 2.16.3 3.2.0 camel: DNS Rebinding in JMX Connector could result in remote command execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11971

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-05-14 17:15 修改: 2026-06-17 02:51
org.apache.qpid:proton-j CVE-2018-17187 高危 0.16.0 0.30.0 qpid-proton-java: Hostname verification mode not implemented in transport TLS wrapper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17187

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-11-13 15:29 修改: 2026-06-17 01:45
com.fasterxml.jackson.core:jackson-databind CVE-2020-24750 高危 2.6.3 2.6.7.5, 2.9.10.6 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-09-17 19:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-25649 高危 2.6.3 2.6.7.4, 2.9.10.7, 2.10.5.1 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-12-03 17:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-35490 高危 2.6.3 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-12-17 19:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-35491 高危 2.6.3 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-12-17 19:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-35728 高危 2.6.3 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-12-27 05:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-36179 高危 2.6.3 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
org.apache.shiro:shiro-core CVE-2019-12422 高危 1.2.4 1.4.2 shiro: Cookie padding oracle vulnerability with default configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12422

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-11-18 23:15 修改: 2026-06-17 02:14
org.apache.shiro:shiro-core CVE-2020-13933 高危 1.2.4 1.6.0 shiro: specially crafted HTTP request may cause an authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13933

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-08-17 21:15 修改: 2026-06-17 02:53
org.apache.shiro:shiro-core CVE-2026-49268 高危 1.2.4 2.2.1, 3.0.0-alpha-2 A remote attacker can inject LDAP special characters into the Distingu ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49268

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-17 14:17 修改: 2026-06-18 14:45
com.fasterxml.jackson.core:jackson-databind CVE-2020-36180 高危 2.6.3 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-36181 高危 2.6.3 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
org.apache.velocity:velocity CVE-2020-13936 高危 1.7 velocity: arbitrary code execution when attacker is able to modify templates

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13936

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-10 08:15 修改: 2026-06-17 02:53
com.fasterxml.jackson.core:jackson-databind CVE-2020-36182 高危 2.6.3 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
org.apache.zookeeper:zookeeper CVE-2017-5637 高危 3.4.6 3.4.10, 3.5.3 zookeeper: Incorrect input validation with wchp/wchc four letter words

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5637

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2017-10-10 01:30 修改: 2026-06-17 01:20
org.apache.zookeeper:zookeeper CVE-2018-8012 高危 3.4.6 3.4.10, 3.5.4-beta zookeeper: No authentication or authorization is enforced when a server joins a quorum

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8012

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-05-21 19:29 修改: 2026-06-17 02:04
org.codehaus.jettison:jettison CVE-2022-40150 高危 1.3.8 1.5.2 jettison: memory exhaustion via user-supplied XML or JSON data

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.codehaus.jettison:jettison CVE-2022-45685 高危 1.3.8 1.5.2 jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison CVE-2022-45693 高危 1.3.8 1.5.2 jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison CVE-2023-1436 高危 1.3.8 1.5.4 jettison: Uncontrolled Recursion in JSONArray

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
com.fasterxml.jackson.core:jackson-databind CVE-2020-36183 高危 2.6.3 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind CVE-2020-36184 高危 2.6.3 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
org.eclipse.jetty:jetty-server CVE-2017-7656 高危 9.2.13.v20150730 9.3.24.v20180605, 9.4.11.v20180605 jetty: HTTP request smuggling using the range header

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7656

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-06-26 15:29 修改: 2026-06-17 01:24
org.eclipse.jetty:jetty-server CVE-2017-9735 高危 9.2.13.v20150730 9.4.6.v20170531, 9.3.20.v20170531, 9.2.22.v20170606 jetty: Timing channel attack in util/security/Password.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9735

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2017-06-16 21:29 修改: 2026-06-17 01:28
org.eclipse.jetty:jetty-server CVE-2021-28165 高危 9.2.13.v20150730 9.4.39, 10.0.2, 11.0.2 jetty: Resource exhaustion when receiving an invalid large TLS frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28165

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-04-01 15:15 修改: 2026-06-17 03:45
org.eclipse.jetty:jetty-webapp CVE-2020-27216 高危 9.2.13.v20150730 9.4.33.v20201020, 10.0.0.beta3, 11.0.0.beta3 jetty: local temporary directory hijacking vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27216

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-10-23 13:15 修改: 2026-06-17 03:08
org.jolokia:jolokia-core CVE-2018-10899 高危 1.3.3 1.6.1 jolokia: system-wide CSRF that could lead to Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10899

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-08-01 14:15 修改: 2026-06-17 01:34
com.fasterxml.jackson.core:jackson-databind CVE-2020-36185 高危 2.6.3 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
org.springframework:spring-beans CVE-2022-22970 高危 4.1.9.RELEASE 5.2.22.RELEASE, 5.3.20 springframework: DoS via data binding to multipartFile or servlet part

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29
org.springframework:spring-context CVE-2022-22968 高危 4.1.9.RELEASE 5.3.19, 5.2.21.RELEASE Framework: Data Binding Rules Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29
org.springframework:spring-core CVE-2016-5007 高危 4.1.9.RELEASE 4.3.1 spring: Path matching inconsistency

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5007

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2017-05-25 17:29 修改: 2026-06-17 00:48
org.springframework:spring-core CVE-2018-1272 高危 4.1.9.RELEASE 4.3.15, 5.0.5 spring-framework: Multipart content pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1272

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-04-06 13:29 修改: 2026-06-17 01:50
org.springframework:spring-expression CVE-2023-20863 高危 4.1.9.RELEASE 6.0.8, 5.3.27, 5.2.24.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31
org.springframework:spring-expression CVE-2026-41849 高危 4.1.9.RELEASE spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41849

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-expression CVE-2026-41850 高危 4.1.9.RELEASE 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-jms CVE-2026-41855 高危 4.1.9.RELEASE 6.2.19, 7.0.8 spring-jms: Spring Framework: Arbitrary code execution via deserialization in JMS message converters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41855

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.fasterxml.jackson.core:jackson-databind CVE-2020-36186 高危 2.6.3 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
org.springframework:spring-web CVE-2024-22243 高危 4.1.9.RELEASE 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web CVE-2024-22259 高危 4.1.9.RELEASE 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web CVE-2024-22262 高危 4.1.9.RELEASE 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11
com.fasterxml.jackson.core:jackson-databind CVE-2020-36187 高危 2.6.3 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
org.springframework:spring-webmvc CVE-2024-38819 高危 4.1.9.RELEASE 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc CVE-2026-41842 高危 4.1.9.RELEASE 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41845 高危 4.1.9.RELEASE 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.xerial.snappy:snappy-java CVE-2023-34455 高危 1.1.2 1.1.10.1 snappy-java: Unchecked chunk length leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-06-15 18:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java CVE-2023-43642 高危 1.1.2 1.1.10.4 snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-09-25 20:15 修改: 2026-06-17 06:26
com.fasterxml.jackson.core:jackson-databind CVE-2019-12814 中危 2.6.3 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-06-19 14:15 修改: 2026-06-17 02:15
com.thoughtworks.xstream:xstream CVE-2020-26258 中危 1.4.9 1.4.15 XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26258

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-12-16 01:15 修改: 2026-06-17 03:07
com.thoughtworks.xstream:xstream CVE-2020-26259 中危 1.4.9 1.4.15 XStream: arbitrary file deletion on the local host when unmarshalling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26259

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-12-16 01:15 修改: 2026-06-17 03:07
com.thoughtworks.xstream:xstream CVE-2021-21342 中危 1.4.9 1.4.16 XStream: SSRF via crafted input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21342

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21343 中危 1.4.9 1.4.16 XStream: arbitrary file deletion on the local host via crafted input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21343

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21344 中危 1.4.9 1.4.16 XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21344

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21345 中危 1.4.9 1.4.16 XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21345

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
org.apache.activemq:activemq-broker CVE-2026-33227 中危 5.14.3 5.19.3, 6.2.2 org.apache.activemq/activemq-client: org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/activemq-web: improper limitation of a pathname to a restricted classpath directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33227

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-07 09:16 修改: 2026-06-17 10:37
org.apache.shiro:shiro-core CVE-2023-46749 中危 1.2.4 1.13.0, 2.0.0-alpha4 shiro: path traversal attack may lead to authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46749

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-01-15 10:15 修改: 2026-06-17 06:31
org.apache.shiro:shiro-core CVE-2026-43827 中危 1.2.4 2.2.0, 3.0.0-alpha-2 apache-shiro: Apache Shiro: Session fixation vulnerability due to improper session invalidation upon login

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43827

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-05-25 21:16 修改: 2026-07-24 10:10
org.apache.activemq:activemq-broker CVE-2026-33227 中危 5.14.3 5.19.3, 6.2.2 org.apache.activemq/activemq-client: org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/activemq-web: improper limitation of a pathname to a restricted classpath directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33227

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-07 09:16 修改: 2026-06-17 10:37
org.apache.activemq:activemq-broker CVE-2026-41043 中危 5.14.3 5.19.6, 6.2.5 Apache ActiveMQ: Apache ActiveMQ Web: Apache ActiveMQ: Information disclosure via Cross-Site Scripting in web console

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41043

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-24 11:16 修改: 2026-06-17 10:46
org.apache.shiro:shiro-spring CVE-2026-23903 中危 1.2.4 2.1.0 org.apache.shiro/shiro-web: Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23903

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-02-09 10:15 修改: 2026-08-20 10:16
org.apache.activemq:activemq-broker CVE-2026-41043 中危 5.14.3 5.19.6, 6.2.5 Apache ActiveMQ: Apache ActiveMQ Web: Apache ActiveMQ: Information disclosure via Cross-Site Scripting in web console

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41043

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-24 11:16 修改: 2026-06-17 10:46
org.apache.activemq:activemq-broker CVE-2026-49270 中危 5.14.3 5.19.7, 6.2.6 apache-activemq-broker: apache-activemq: apache-activemq-all: Apache ActiveMQ: Information disclosure via unauthenticated BrokerInfo command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49270

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-22 07:10
org.apache.activemq:activemq-broker CVE-2026-49270 中危 5.14.3 5.19.7, 6.2.6 apache-activemq-broker: apache-activemq: apache-activemq-all: Apache ActiveMQ: Information disclosure via unauthenticated BrokerInfo command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49270

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-22 07:10
com.thoughtworks.xstream:xstream CVE-2021-21346 中危 1.4.9 1.4.16 XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21346

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
org.apache.zookeeper:zookeeper CVE-2019-0201 中危 3.4.6 3.4.14, 3.5.5 zookeeper: Information disclosure in Apache ZooKeeper

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0201

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-05-23 14:29 修改: 2026-06-17 02:07
com.thoughtworks.xstream:xstream CVE-2021-21347 中危 1.4.9 1.4.16 XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21347

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21348 中危 1.4.9 1.4.16 XStream: ReDoS vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21348

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21349 中危 1.4.9 1.4.16 XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21349

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21350 中危 1.4.9 1.4.16 XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21350

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
org.codehaus.jettison:jettison CVE-2022-40149 中危 1.3.8 1.5.1 jettison: parser crash by stackoverflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.eclipse.jetty:jetty-http CVE-2023-40167 中危 9.2.13.v20150730 9.4.52, 10.0.16, 11.0.16, 12.0.1 jetty: Improper validation of HTTP/1 content-length

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-09-15 20:15 修改: 2026-06-17 06:16
org.eclipse.jetty:jetty-http CVE-2024-6763 中危 9.2.13.v20150730 12.0.12 org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
com.thoughtworks.xstream:xstream CVE-2021-21351 中危 1.4.9 1.4.16 XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21351

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-39140 中危 1.4.9 1.4.18 xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39140

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-08-23 19:15 修改: 2026-06-17 04:03
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.6.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.apache.activemq:activemq-client CVE-2015-7559 中危 5.14.3 5.14.5 ActiveMQ: DoS in client via shutdown command

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-7559

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-08-01 14:15 修改: 2024-11-21 02:36
org.apache.activemq:activemq-client CVE-2015-7559 中危 5.14.3 5.14.5 ActiveMQ: DoS in client via shutdown command

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-7559

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-08-01 14:15 修改: 2024-11-21 02:36
org.eclipse.jetty:jetty-server CVE-2018-12536 中危 9.2.13.v20150730 9.4.11.v20180605, 9.3.24.v20180605 jetty: full server path revealed when using the default Error Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12536

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-06-27 17:29 修改: 2026-06-17 01:37
org.eclipse.jetty:jetty-server CVE-2019-10241 中危 9.2.13.v20150730 9.2.27.v20190403, 9.3.26.v20190403, 9.4.16.v20190411 jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10241

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-04-22 20:29 修改: 2026-06-17 02:10
org.eclipse.jetty:jetty-server CVE-2019-10246 中危 9.2.13.v20150730 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418 jetty: Directory Listing on Windows reveals Resource Base path

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10246

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-04-22 20:29 修改: 2026-06-17 02:10
org.eclipse.jetty:jetty-server CVE-2019-10247 中危 9.2.13.v20150730 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418 jetty: error path information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10247

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-04-22 20:29 修改: 2026-06-17 02:10
org.eclipse.jetty:jetty-server CVE-2023-26048 中危 9.2.13.v20150730 9.4.51.v20230217, 10.0.14, 11.0.14 jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
org.eclipse.jetty:jetty-servlets CVE-2021-28169 中危 9.2.13.v20150730 9.4.41, 10.0.3, 11.0.3 jetty: requests to the ConcatServlet and WelcomeFilter are able to access protected resources within the WEB-INF directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28169

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-06-09 02:15 修改: 2026-06-17 03:45
org.eclipse.jetty:jetty-servlets CVE-2024-9823 中危 9.2.13.v20150730 9.4.54, 10.0.18, 11.0.18 org.eclipse.jetty:jetty-servlets: jetty: Jetty DOS vulnerability on DosFilter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9823

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-10-14 15:15 修改: 2026-06-17 08:25
org.apache.activemq:activemq-client CVE-2025-27533 中危 5.14.3 5.16.8, 5.17.7, 5.18.7, 6.1.6 ActiveMQ: ActiveMQ: Unvalidated Buffer Size Allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27533

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2025-05-07 09:15 修改: 2026-06-17 09:03
org.iq80.snappy:snappy CVE-2024-36124 中危 0.2 0.5 snappy: tries to read outside the bounds of the given byte arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36124

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-06-03 15:15 修改: 2026-06-17 07:36
org.apache.activemq:activemq-client CVE-2025-27533 中危 5.14.3 5.16.8, 5.17.7, 5.18.7, 6.1.6 ActiveMQ: ActiveMQ: Unvalidated Buffer Size Allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27533

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2025-05-07 09:15 修改: 2026-06-17 09:03
org.apache.activemq:activemq-client CVE-2026-33227 中危 5.14.3 5.19.3, 6.2.2 org.apache.activemq/activemq-client: org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/activemq-web: improper limitation of a pathname to a restricted classpath directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33227

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-07 09:16 修改: 2026-06-17 10:37
org.apache.activemq:activemq-client CVE-2026-33227 中危 5.14.3 5.19.3, 6.2.2 org.apache.activemq/activemq-client: org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/activemq-web: improper limitation of a pathname to a restricted classpath directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33227

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-07 09:16 修改: 2026-06-17 10:37
org.apache.activemq:activemq-mqtt CVE-2025-66168 中危 5.14.3 5.19.2, 6.1.9, 6.2.1 org.apache.activemq/apache-activemq: org.apache.activemq/activemq-all: org.apache.activemq/activemq-mqtt: Apache ActiveMQ: Unexpected behavior due to integer overflow in MQTT packet decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66168

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-03-04 09:15 修改: 2026-06-17 09:56
org.springframework:spring-context CVE-2024-38820 中危 4.1.9.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
org.apache.activemq:activemq-mqtt CVE-2025-66168 中危 5.14.3 5.19.2, 6.1.9, 6.2.1 org.apache.activemq/apache-activemq: org.apache.activemq/activemq-all: org.apache.activemq/activemq-mqtt: Apache ActiveMQ: Unexpected behavior due to integer overflow in MQTT packet decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66168

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-03-04 09:15 修改: 2026-06-17 09:56
com.google.guava:guava CVE-2018-10237 中危 12.0 24.1.1-android guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
org.springframework:spring-core CVE-2018-1257 中危 4.1.9.RELEASE 5.0.6, 4.3.17 spring-framework: ReDoS Attack with spring-messaging

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1257

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-05-11 20:29 修改: 2026-06-17 01:50
org.springframework:spring-core CVE-2018-1271 中危 4.1.9.RELEASE 5.0.5, 4.3.15 spring-framework: Directory traversal vulnerability with static resources on Windows filesystems

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1271

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2018-04-06 13:29 修改: 2026-06-17 01:50
org.apache.activemq:activemq-all CVE-2025-66168 中危 5.14.3 5.19.2, 6.1.9, 6.2.1 org.apache.activemq/apache-activemq: org.apache.activemq/activemq-all: org.apache.activemq/activemq-mqtt: Apache ActiveMQ: Unexpected behavior due to integer overflow in MQTT packet decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66168

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-03-04 09:15 修改: 2026-06-17 09:56
org.apache.activemq:activemq-openwire-legacy CVE-2025-27533 中危 5.14.3 5.16.8, 5.17.7, 5.18.7, 6.1.6 ActiveMQ: ActiveMQ: Unvalidated Buffer Size Allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27533

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2025-05-07 09:15 修改: 2026-06-17 09:03
org.apache.activemq:activemq-openwire-legacy CVE-2025-27533 中危 5.14.3 5.16.8, 5.17.7, 5.18.7, 6.1.6 ActiveMQ: ActiveMQ: Unvalidated Buffer Size Allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27533

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2025-05-07 09:15 修改: 2026-06-17 09:03
org.springframework:spring-expression CVE-2022-22950 中危 4.1.9.RELEASE 5.3.17, 5.2.20.RELEASE spring-expression: Denial of service via specially crafted SpEL expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-expression CVE-2023-20861 中危 4.1.9.RELEASE 6.0.7, 5.3.26, 5.2.23.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31
org.springframework:spring-expression CVE-2024-38808 中危 4.1.9.RELEASE 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41
org.springframework:spring-expression CVE-2026-41851 中危 4.1.9.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.activemq:activemq-web CVE-2026-33227 中危 5.14.3 5.19.3, 6.2.2 org.apache.activemq/activemq-client: org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/activemq-web: improper limitation of a pathname to a restricted classpath directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33227

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-07 09:16 修改: 2026-06-17 10:37
org.apache.activemq:activemq-web CVE-2026-42253 中危 5.14.3 5.19.7, 6.2.6 Improper Neutralization of Input During Web Page Generation ('Cross-si ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42253

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-22 07:10
org.apache.activemq:activemq-all CVE-2026-33227 中危 5.14.3 5.19.3, 6.2.2 org.apache.activemq/activemq-client: org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/activemq-web: improper limitation of a pathname to a restricted classpath directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33227

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-07 09:16 修改: 2026-06-17 10:37
org.apache.activemq:activemq-all CVE-2026-41043 中危 5.14.3 5.19.6, 6.2.5 Apache ActiveMQ: Apache ActiveMQ Web: Apache ActiveMQ: Information disclosure via Cross-Site Scripting in web console

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41043

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-24 11:16 修改: 2026-06-17 10:46
org.apache.activemq:activemq-all CVE-2026-49270 中危 5.14.3 5.19.7, 6.2.6 apache-activemq-broker: apache-activemq: apache-activemq-all: Apache ActiveMQ: Information disclosure via unauthenticated BrokerInfo command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49270

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-01 09:16 修改: 2026-07-22 07:10
org.springframework:spring-web CVE-2024-38809 中危 4.1.9.RELEASE 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41
org.springframework:spring-web CVE-2024-38820 中危 4.1.9.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
com.google.guava:guava CVE-2023-2976 中危 12.0 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-net:commons-net CVE-2021-37533 中危 3.5 3.9.0 apache-commons-net: FTP client trusts the host from PASV response by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00
org.apache.httpcomponents:httpclient CVE-2020-13956 中危 4.5.2 4.5.13, 5.0.3 apache-httpclient: incorrect handling of malformed authority component in request URIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53
org.springframework:spring-webmvc CVE-2026-22745 中危 4.1.9.RELEASE 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-41841 中危 4.1.9.RELEASE 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41843 中危 4.1.9.RELEASE 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41844 中危 4.1.9.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41846 中危 4.1.9.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41853 中危 4.1.9.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.6.3 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
com.fasterxml.jackson.core:jackson-databind CVE-2019-12384 中危 2.6.3 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2019-06-24 16:15 修改: 2026-06-17 02:14
org.xerial.snappy:snappy-java CVE-2023-34453 中危 1.1.2 1.1.10.1 snappy-java: Integer overflow in shuffle leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java CVE-2023-34454 中危 1.1.2 1.1.10.1 snappy-java: Integer overflow in compress leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
org.springframework:spring-core CVE-2026-41848 低危 4.1.9.RELEASE 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.eclipse.jetty:jetty-http CVE-2022-2047 低危 9.2.13.v20150730 9.4.47, 10.0.10, 11.0.10 jetty-http: improver hostname input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2022-07-07 21:15 修改: 2026-06-17 04:41
org.eclipse.jetty:jetty-servlets CVE-2023-36479 低危 9.2.13.v20150730 9.4.52, 10.0.16, 11.0.16 jetty: Improper addition of quotation marks to user inputs in CgiServlet

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36479

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-09-15 19:15 修改: 2026-06-17 06:06
org.apache.shiro:shiro-core CVE-2026-23901 低危 1.2.4 2.1.0 org.apache.shiro/shiro-core: Apache Shiro: Brute force attack possible to determine valid user names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23901

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-02-10 10:15 修改: 2026-06-17 10:22
org.springframework:spring-context CVE-2025-22233 低危 4.1.9.RELEASE 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45
org.eclipse.jetty:jetty-xml GHSA-58qw-p7qm-5rvh 低危 9.2.13.v20150730 10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823 Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations

漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-07-10 21:52 修改: 2026-02-10 20:06
org.springframework:spring-webmvc CVE-2026-22741 低危 4.1.9.RELEASE 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.eclipse.jetty:jetty-server CVE-2021-34428 低危 9.2.13.v20150730 9.4.41, 10.0.3, 11.0.3 jetty: SessionListener can prevent a session from being invalidated breaking logout

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34428

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2021-06-22 15:15 修改: 2026-06-17 03:55
org.eclipse.jetty:jetty-server CVE-2023-26049 低危 9.2.13.v20150730 9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0 jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
org.springframework:spring-expression CVE-2026-41852 低危 4.1.9.RELEASE 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.google.guava:guava CVE-2020-8908 低危 12.0 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:55f0049e80207b498335373887b0ed410cbec8a6fdc81732eba60b79c8a38b11

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
Python (python-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×