docker.io/wurstmeister/kafka:2.13-2.7.1 linux/arm64

docker.io/wurstmeister/kafka:2.13-2.7.1 - Trivy安全扫描结果 扫描时间: 2026-08-20 15:37 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:8 中危漏洞:41 高危漏洞:66 严重漏洞:11

系统OS: alpine 3.13.5 扫描引擎: Trivy 扫描时间: 2026-08-20 15:37

docker.io/wurstmeister/kafka:2.13-2.7.1 (alpine 3.13.5) (alpine)
低危漏洞:2 中危漏洞:16 高危漏洞:37 严重漏洞:6
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
apk-tools CVE-2021-36159 严重 2.12.5-r0 2.12.6-r0 libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36159

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-08-03 14:15 修改: 2026-06-17 03:58
curl CVE-2022-32207 严重 7.79.1-r0 7.79.1-r2 curl: Unpreserved file permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32207

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46
libcrypto1.1 CVE-2021-3711 严重 1.1.1k-r0 1.1.1l-r0 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05
libcurl CVE-2022-32207 严重 7.79.1-r0 7.79.1-r2 curl: Unpreserved file permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32207

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46
libssl1.1 CVE-2021-3711 严重 1.1.1k-r0 1.1.1l-r0 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05
zlib CVE-2022-37434 严重 1.2.11-r3 1.2.12-r2 zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-08-05 07:15 修改: 2026-07-14 12:16
busybox CVE-2021-42383 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42383

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42384 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42384

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42385 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42385

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42386 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42386

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2022-28391 高危 1.32.1-r6 1.32.1-r8 busybox: remote attackers may execute arbitrary code if netstat is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28391

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-04-03 21:15 修改: 2026-06-17 04:38
busybox CVE-2022-30065 高危 1.32.1-r6 1.32.1-r9 busybox: A use-after-free in Busybox's awk applet leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30065

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-05-18 15:15 修改: 2026-07-07 19:16
busybox CVE-2021-42378 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42378

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
curl CVE-2022-22576 高危 7.79.1-r0 7.79.1-r1 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28
curl CVE-2022-27775 高危 7.79.1-r0 7.79.1-r1 curl: bad local IPv6 connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27775

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
curl CVE-2022-27781 高危 7.79.1-r0 7.79.1-r2 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
curl CVE-2022-27782 高危 7.79.1-r0 7.79.1-r2 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
busybox CVE-2021-42379 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42379

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
libcrypto1.1 CVE-2021-3712 高危 1.1.1k-r0 1.1.1l-r0 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05
libcrypto1.1 CVE-2022-0778 高危 1.1.1k-r0 1.1.1n-r0 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21
busybox CVE-2021-42380 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42380

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
libcurl CVE-2022-22576 高危 7.79.1-r0 7.79.1-r1 curl: OAUTH2 bearer bypass in connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:28
libcurl CVE-2022-27775 高危 7.79.1-r0 7.79.1-r1 curl: bad local IPv6 connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27775

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
libcurl CVE-2022-27781 高危 7.79.1-r0 7.79.1-r2 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
libcurl CVE-2022-27782 高危 7.79.1-r0 7.79.1-r2 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
busybox CVE-2021-42381 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42381

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
libssl1.1 CVE-2021-3712 高危 1.1.1k-r0 1.1.1l-r0 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05
libssl1.1 CVE-2022-0778 高危 1.1.1k-r0 1.1.1n-r0 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21
ncurses-libs CVE-2022-29458 高危 6.2_p20210109-r0 6.2_p20210109-r1 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43
ncurses-terminfo-base CVE-2022-29458 高危 6.2_p20210109-r0 6.2_p20210109-r1 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43
ssl_client CVE-2021-42378 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42378

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42379 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42379

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42380 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42380

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42381 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42381

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42382 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42382

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42383 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42383

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42384 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42384

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42385 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42385

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42386 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42386

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2022-28391 高危 1.32.1-r6 1.32.1-r8 busybox: remote attackers may execute arbitrary code if netstat is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28391

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-04-03 21:15 修改: 2026-06-17 04:38
ssl_client CVE-2022-30065 高危 1.32.1-r6 1.32.1-r9 busybox: A use-after-free in Busybox's awk applet leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30065

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-05-18 15:15 修改: 2026-07-07 19:16
busybox CVE-2021-42382 高危 1.32.1-r6 1.32.1-r7 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42382

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
zlib CVE-2018-25032 高危 1.2.11-r3 1.2.12-r0 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-03-25 09:15 修改: 2026-07-14 12:16
curl CVE-2022-32205 中危 7.79.1-r0 7.79.1-r2 curl: Set-Cookie denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32205

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46
curl CVE-2022-32206 中危 7.79.1-r0 7.79.1-r2 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46
curl CVE-2022-32208 中危 7.79.1-r0 7.79.1-r2 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46
busybox CVE-2021-42375 中危 1.32.1-r6 1.32.1-r7 busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42375

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
libcurl CVE-2022-27774 中危 7.79.1-r0 7.79.1-r1 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
libcurl CVE-2022-27776 中危 7.79.1-r0 7.79.1-r1 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
libcurl CVE-2022-32205 中危 7.79.1-r0 7.79.1-r2 curl: Set-Cookie denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32205

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46
libcurl CVE-2022-32206 中危 7.79.1-r0 7.79.1-r2 curl: HTTP compression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32206

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46
libcurl CVE-2022-32208 中危 7.79.1-r0 7.79.1-r2 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-07-07 13:15 修改: 2026-06-17 04:46
busybox CVE-2021-42374 中危 1.32.1-r6 1.32.1-r7 busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42374

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
curl CVE-2022-27774 中危 7.79.1-r0 7.79.1-r1 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
libcrypto1.1 CVE-2022-2097 中危 1.1.1k-r0 1.1.1q-r0 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41
ssl_client CVE-2021-42374 中危 1.32.1-r6 1.32.1-r7 busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42374

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42375 中危 1.32.1-r6 1.32.1-r7 busybox: incorrect handling of a special element in ash applet leads to denial of service when processing a crafted shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42375

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
libssl1.1 CVE-2022-2097 中危 1.1.1k-r0 1.1.1q-r0 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:b2d5eeeaba3a22b9b8aa97261957974a6bd65274ebd43e1d81d0a7b8b752b116

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41
curl CVE-2022-27776 中危 7.79.1-r0 7.79.1-r1 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:37
libcurl CVE-2022-35252 低危 7.79.1-r0 7.79.1-r3 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51
curl CVE-2022-35252 低危 7.79.1-r0 7.79.1-r3 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51
Java (jar)
低危漏洞:6 中危漏洞:25 高危漏洞:29 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
log4j:log4j CVE-2019-17571 严重 1.2.17 log4j: deserialization of untrusted data in SocketServer

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2019-12-20 17:15 修改: 2026-06-17 02:24
log4j:log4j CVE-2022-23305 严重 1.2.17 log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j CVE-2022-23307 严重 1.2.17 log4j: Unsafe deserialization flaw in Chainsaw log viewer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
org.apache.zookeeper:zookeeper CVE-2023-44981 严重 3.5.9 3.7.2, 3.8.3, 3.9.1 zookeeper: Authorization Bypass in Apache ZooKeeper

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-10-11 12:15 修改: 2026-06-17 06:28
org.scala-lang:scala-library CVE-2022-36944 严重 2.13.3 2.13.9 scala: deserialization gadget chain

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36944

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-09-23 18:15 修改: 2026-06-17 04:54
com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.10.5.1 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.10.5.1 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.10.5.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
io.netty:netty-codec CVE-2021-37136 高危 4.1.59.Final 4.1.68.Final netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec CVE-2021-37137 高危 4.1.59.Final 4.1.68.Final netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec CVE-2026-42583 高危 4.1.59.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec CVE-2026-59901 高危 4.1.59.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-handler CVE-2026-44249 高危 4.1.59.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-06-11 22:16 修改: 2026-08-17 12:18
io.netty:netty-handler CVE-2026-45416 高危 4.1.59.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-06-12 15:16 修改: 2026-08-17 12:18
io.netty:netty-handler CVE-2026-50010 高危 4.1.59.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-06-12 16:16 修改: 2026-08-17 12:18
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.10.5 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.10.5 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.10.5.1 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15
log4j:log4j CVE-2021-4104 高危 1.2.17 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2021-12-14 12:15 修改: 2026-06-17 04:19
log4j:log4j CVE-2022-23302 高危 1.2.17 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j CVE-2023-26464 高危 1.2.17 2.0 log4j1-socketappender: DoS via hashmap logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26464

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-03-10 14:15 修改: 2026-06-17 05:43
org.apache.kafka:kafka_2.13 CVE-2025-27818 高危 2.7.1 3.9.1 apache-kafka: Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27818

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-06-10 08:15 修改: 2026-06-17 09:04
org.apache.kafka:kafka_2.13 CVE-2025-27819 高危 2.7.1 3.4.0 org.apache.kafka: Kafka JNDI Login Module RCE Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27819

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-06-10 08:15 修改: 2026-06-17 09:04
com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 高危 2.10.5.1 2.12.6, 2.13.1 jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-03-18 22:15 修改: 2026-06-17 04:15
org.codehaus.plexus:plexus-utils CVE-2025-67030 高危 3.2.1 4.0.3, 3.6.1 org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67030

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-03-25 18:16 修改: 2026-07-21 12:17
org.eclipse.jetty:jetty-http CVE-2026-2332 高危 9.4.38.v20210224 12.1.7, 12.0.33, 11.0.29, 10.0.28, 9.4.60 org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-04-14 12:16 修改: 2026-08-17 15:16
org.eclipse.jetty:jetty-security CVE-2026-10050 高危 9.4.38.v20210224 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-08-04 11:22 修改: 2026-08-08 00:38
org.eclipse.jetty:jetty-server CVE-2021-28165 高危 9.4.38.v20210224 9.4.39, 10.0.2, 11.0.2 jetty: Resource exhaustion when receiving an invalid large TLS frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28165

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2021-04-01 15:15 修改: 2026-06-17 03:45
org.eclipse.jetty:jetty-server CVE-2024-13009 高危 9.4.38.v20210224 9.4.57.v20241219 jetty-server: Jetty: Gzip Request Body Buffer Corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13009

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-05-08 18:15 修改: 2026-06-17 07:00
org.lz4:lz4-java CVE-2025-12183 高危 1.7.1 1.8.1 lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31
org.lz4:lz4-java CVE-2025-66566 高危 1.7.1 lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57
com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.10.5.1 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
org.xerial.snappy:snappy-java CVE-2023-34455 高危 1.1.7.7 1.1.10.1 snappy-java: Unchecked chunk length leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-06-15 18:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java CVE-2023-43642 高危 1.1.7.7 1.1.10.4 snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-09-25 20:15 修改: 2026-06-17 06:26
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.10.5.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
io.netty:netty-handler CVE-2023-34462 中危 4.1.59.Final 4.1.94.Final netty: SniHandler 16MB allocation leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
org.apache.kafka:kafka_2.13 CVE-2021-38153 中危 2.7.1 2.6.3, 2.7.2, 2.8.1 Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38153

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2021-09-22 09:15 修改: 2026-06-17 04:01
io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.59.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.10.5.1 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec CVE-2025-58057 中危 4.1.59.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
org.eclipse.jetty:jetty-http CVE-2023-40167 中危 9.4.38.v20210224 9.4.52, 10.0.16, 11.0.16, 12.0.1 jetty: Improper validation of HTTP/1 content-length

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-09-15 20:15 修改: 2026-06-17 06:16
org.eclipse.jetty:jetty-http CVE-2024-6763 中危 9.4.38.v20210224 12.0.12 org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
io.netty:netty-common CVE-2024-47535 中危 4.1.59.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common CVE-2025-25193 中危 4.1.59.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.10.5 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
org.eclipse.jetty:jetty-server CVE-2023-26048 中危 9.4.38.v20210224 9.4.51.v20230217, 10.0.14, 11.0.14 jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
org.eclipse.jetty:jetty-server CVE-2024-8184 中危 9.4.38.v20210224 12.0.9, 10.0.24, 11.0.24, 9.4.56 org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:22
org.eclipse.jetty:jetty-server CVE-2026-6790 中危 9.4.38.v20210224 12.0.35, 12.1.9 jetty: Jetty: Improper Host header validation can lead to request routing issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35
org.eclipse.jetty:jetty-servlets CVE-2021-28169 中危 9.4.38.v20210224 9.4.41, 10.0.3, 11.0.3 jetty: requests to the ConcatServlet and WelcomeFilter are able to access protected resources within the WEB-INF directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28169

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2021-06-09 02:15 修改: 2026-06-17 03:45
org.eclipse.jetty:jetty-servlets CVE-2024-9823 中危 9.4.38.v20210224 9.4.54, 10.0.18, 11.0.18 org.eclipse.jetty:jetty-servlets: jetty: Jetty DOS vulnerability on DosFilter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9823

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2024-10-14 15:15 修改: 2026-06-17 08:25
org.glassfish.jersey.core:jersey-common CVE-2021-28168 中危 2.31 2.34, 3.0.2 jersey: Local information disclosure via system temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28168

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2021-04-22 18:15 修改: 2026-06-17 03:45
com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.10.5.1 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.8.1 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.lz4:lz4-java CVE-2026-59949 中危 1.7.1 LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-08-18 15:16 修改: 2026-08-18 18:18
org.apache.kafka:kafka-clients CVE-2021-38153 中危 2.7.1 2.6.3, 2.7.2, 2.8.1 Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38153

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2021-09-22 09:15 修改: 2026-06-17 04:01
org.apache.kafka:kafka-clients CVE-2024-31141 中危 2.7.1 3.7.1 kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-31141

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2024-11-19 09:15 修改: 2026-06-17 07:27
org.apache.kafka:kafka-clients CVE-2026-33558 中危 2.7.1 3.9.2, 4.0.1 Apache Kafka exposes sensitive information in its DEBUG logs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33558

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-04-20 14:16 修改: 2026-06-17 10:37
org.xerial.snappy:snappy-java CVE-2023-34453 中危 1.1.7.7 1.1.10.1 snappy-java: Integer overflow in shuffle leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java CVE-2023-34454 中危 1.1.7.7 1.1.10.1 snappy-java: Integer overflow in compress leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
org.apache.kafka:kafka_2.13 CVE-2024-56128 低危 2.7.1 3.7.2, 3.8.1 kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56128

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2024-12-18 14:15 修改: 2026-06-17 08:11
org.eclipse.jetty:jetty-http CVE-2022-2047 低危 9.4.38.v20210224 9.4.47, 10.0.10, 11.0.10 jetty-http: improver hostname input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2022-07-07 21:15 修改: 2026-06-17 04:41
org.eclipse.jetty:jetty-servlets CVE-2023-36479 低危 9.4.38.v20210224 9.4.52, 10.0.16, 11.0.16 jetty: Improper addition of quotation marks to user inputs in CgiServlet

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36479

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-09-15 19:15 修改: 2026-06-17 06:06
org.eclipse.jetty:jetty-http CVE-2025-11143 低危 9.4.38.v20210224 12.0.31, 12.1.5 org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29
org.eclipse.jetty:jetty-server CVE-2021-34428 低危 9.4.38.v20210224 9.4.41, 10.0.3, 11.0.3 jetty: SessionListener can prevent a session from being invalidated breaking logout

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34428

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2021-06-22 15:15 修改: 2026-06-17 03:55
org.eclipse.jetty:jetty-server CVE-2023-26049 低危 9.4.38.v20210224 9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0 jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049

镜像层: sha256:f03551f68eb1223ff1382e451e802434d70c54509b5cf5b45c2f90d99b47302b

发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×