| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-24813 |
严重 |
10.1.31 |
11.0.3, 10.1.35, 9.0.99 |
tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-41293 |
严重 |
10.1.31 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43512 |
严重 |
10.1.31 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43515 |
严重 |
10.1.31 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: tomcat: Improper Authorization allows security bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-65182 |
严重 |
10.1.31 |
11.0.25, 10.1.58, 9.0.121 |
Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-65905 |
严重 |
10.1.31 |
11.0.25, 10.1.58, 9.0.121 |
tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-68525 |
严重 |
10.1.31 |
11.0.25, 10.1.58, 9.0.121 |
org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15
|
| io.micrometer:micrometer-core |
CVE-2026-40984 |
高危 |
1.13.6 |
1.16.6, 1.15.12 |
micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-09-11 13:17
|
| org.apache.httpcomponents.core5:httpcore5 |
CVE-2026-54399 |
高危 |
5.2.5 |
5.4.3, 5.5-beta2 |
org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
|
| org.apache.httpcomponents.core5:httpcore5-h2 |
CVE-2026-54428 |
高危 |
5.2.5 |
5.4.3, 5.5-beta2 |
org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
|
| com.fasterxml.jackson.core:jackson-core |
GHSA-r7wm-3cxj-wff9 |
高危 |
2.17.2 |
2.18.8, 2.21.4 |
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
高危 |
2.17.2 |
2.18.8, 3.1.4, 2.21.4 |
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
高危 |
2.17.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-23 21:17 修改: 2026-09-11 13:18
|
| com.google.protobuf:protobuf-java |
CVE-2024-7254 |
高危 |
4.26.1 |
3.25.5, 4.27.5, 4.28.2 |
protobuf: StackOverflow vulnerability in Protocol Buffers
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
|
| com.rabbitmq:amqp-client |
CVE-2026-63337 |
高危 |
5.22.0 |
5.33.0 |
The RabbitMQ Java client library allows Java and JVM-based application ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63337
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-18 17:17 修改: 2026-08-18 20:17
|
| com.rabbitmq:amqp-client |
CVE-2026-69219 |
高危 |
5.22.0 |
5.33.1 |
The RabbitMQ Java client library allows Java and JVM-based application ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69219
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-18 17:17 修改: 2026-08-19 15:17
|
| com.rabbitmq:amqp-client |
CVE-2026-69220 |
高危 |
5.22.0 |
5.33.1 |
The RabbitMQ Java client library allows Java and JVM-based application ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69220
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-18 17:17 修改: 2026-09-10 20:32
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-50379 |
高危 |
10.1.31 |
11.0.2, 10.1.34, 9.0.98 |
tomcat: RCE due to TOCTOU issue in JSP compilation
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-56337 |
高危 |
10.1.31 |
11.0.2, 10.1.34, 9.0.98 |
tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2024-12-20 16:15 修改: 2026-06-17 08:12
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-48988 |
高危 |
10.1.31 |
11.0.8, 10.1.42, 9.0.106 |
tomcat: Apache Tomcat DoS in multipart upload
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-48989 |
高危 |
10.1.31 |
11.0.10, 10.1.44, 9.0.108 |
tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-52520 |
高危 |
10.1.31 |
11.0.9, 10.1.43, 9.0.107 |
tomcat: Apache Tomcat denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-53506 |
高危 |
10.1.31 |
9.0.107, 10.1.43, 11.0.9 |
tomcat: Apache Tomcat denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-55752 |
高危 |
10.1.31 |
11.0.11, 10.1.45, 9.0.109 |
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-24734 |
高危 |
10.1.31 |
11.0.18, 10.1.52, 9.0.115 |
tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24734
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-02-17 19:21 修改: 2026-07-15 14:17
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-24880 |
高危 |
10.1.31 |
9.0.116, 10.1.52, 11.0.20 |
Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-34483 |
高危 |
10.1.31 |
9.0.116, 10.1.54, 11.0.21 |
Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34483
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-34487 |
高危 |
10.1.31 |
9.0.117, 10.1.54, 11.0.21 |
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34487
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-41284 |
高危 |
10.1.31 |
9.0.118, 10.1.55, 11.0.22 |
tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-42498 |
高危 |
10.1.31 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43513 |
高危 |
10.1.31 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
|
| org.lz4:lz4-java |
CVE-2025-12183 |
高危 |
1.8.0 |
1.8.1 |
lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31
|
| org.lz4:lz4-java |
CVE-2025-66566 |
高危 |
1.8.0 |
|
lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57
|
| org.springframework.boot:spring-boot |
CVE-2025-22235 |
高危 |
3.3.5 |
3.3.11, 3.4.5 |
org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45
|
| org.springframework.boot:spring-boot |
CVE-2026-40973 |
高危 |
3.3.5 |
4.0.6, 3.5.14 |
Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10
|
| org.springframework.data:spring-data-commons |
CVE-2026-41716 |
高危 |
3.3.5 |
4.0.6, 3.5.12 |
Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
|
| org.springframework:spring-core |
CVE-2025-41249 |
高危 |
6.1.14 |
6.2.11 |
org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22
|
| org.springframework:spring-expression |
CVE-2026-41850 |
高危 |
6.1.14 |
7.0.8, 6.2.19 |
spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| org.springframework:spring-webmvc |
CVE-2026-41842 |
高危 |
6.1.14 |
7.0.8, 6.2.19 |
spring-framework: Spring Framework: Denial of Service when resolving static resources
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| org.springframework:spring-webmvc |
CVE-2026-41845 |
高危 |
6.1.14 |
7.0.8, 6.2.19 |
org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| ch.qos.logback:logback-core |
CVE-2025-11226 |
中危 |
1.5.11 |
1.5.19, 1.3.16 |
ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-31650 |
中危 |
10.1.31 |
9.0.104, 10.1.40, 11.0.6 |
tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31650
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-49124 |
中危 |
10.1.31 |
11.0.8, 10.1.42, 9.0.106 |
Apache Tomcat installer for Windows has an untrusted search path vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-49125 |
中危 |
10.1.31 |
11.0.8, 10.1.42, 9.0.106 |
tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-55668 |
中危 |
10.1.31 |
11.0.8, 10.1.42, 9.0.106 |
org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-66614 |
中危 |
10.1.31 |
11.0.15, 10.1.50, 9.0.113 |
tomcat: Client certificate verification bypass due to virtual host mapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-25854 |
中危 |
10.1.31 |
9.0.116, 10.1.53, 11.0.20 |
Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25
|
| ch.qos.logback:logback-core |
CVE-2024-12798 |
中危 |
1.5.11 |
1.5.13, 1.3.15 |
logback-core: arbitrary code execution via JaninoEventEvaluator
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
中危 |
2.17.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
|
| org.lz4:lz4-java |
CVE-2026-59949 |
中危 |
1.8.0 |
|
lz4-java: lz4-java: Denial of Service via insufficient validation in XXHash JNI implementations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-18 15:16 修改: 2026-08-18 18:18
|
| com.rabbitmq:amqp-client |
CVE-2026-63335 |
中危 |
5.22.0 |
5.31.0 |
The RabbitMQ Java client library allows Java and JVM-based application ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63335
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-18 17:17 修改: 2026-09-10 20:32
|
| com.rabbitmq:amqp-client |
CVE-2026-63336 |
中危 |
5.22.0 |
5.33.0 |
The RabbitMQ Java client library allows Java and JVM-based application ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63336
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-18 17:17 修改: 2026-09-10 20:32
|
| org.springframework.boot:spring-boot-autoconfigure |
CVE-2026-41001 |
中危 |
3.3.5 |
4.0.7, 3.5.15 |
spring-boot: Spring Boot: Local attacker can manipulate data directory due to predictable path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41001
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-11 07:16 修改: 2026-09-04 18:13
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
中危 |
2.17.2 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
|
| org.springframework.data:spring-data-commons |
CVE-2026-41711 |
中危 |
3.3.5 |
4.0.6, 3.5.12 |
Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
|
| org.springframework.data:spring-data-commons |
CVE-2026-41721 |
中危 |
3.3.5 |
4.0.6, 3.5.12 |
Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
|
| org.apache.httpcomponents.client5:httpclient5 |
CVE-2026-64607 |
中危 |
5.3.1 |
5.6.3 |
org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59888 |
中危 |
2.17.2 |
2.18.8, 2.21.4 |
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
|
| org.springframework:spring-expression |
CVE-2026-41851 |
中危 |
6.1.14 |
7.0.8, 6.2.19 |
Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| org.springframework:spring-web |
CVE-2025-41234 |
中危 |
6.1.14 |
6.2.8, 6.1.21 |
springframework: Reflected download attack in Spring Framework with non-ASCII headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41234
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-06-12 22:15 修改: 2026-06-17 09:22
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-18401 |
中危 |
2.17.2 |
2.21.1, 2.18.6 |
tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
|
| org.apache.logging.log4j:log4j-api |
CVE-2026-49844 |
中危 |
2.23.1 |
2.25.5, 2.26.1 |
org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
|
| org.springframework:spring-webmvc |
CVE-2025-41242 |
中危 |
6.1.14 |
6.2.10 |
org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41242
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-08-18 09:15 修改: 2026-06-17 09:22
|
| org.springframework:spring-webmvc |
CVE-2026-22737 |
中危 |
6.1.14 |
7.0.6, 6.2.17 |
Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
|
| org.springframework:spring-webmvc |
CVE-2026-22745 |
中危 |
6.1.14 |
7.0.7, 6.2.18 |
spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
|
| org.springframework:spring-webmvc |
CVE-2026-41841 |
中危 |
6.1.14 |
7.0.8, 6.2.19 |
Spring MVC and WebFlux applications are vulnerable to Information Disc ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| org.springframework:spring-webmvc |
CVE-2026-41843 |
中危 |
6.1.14 |
7.0.8, 6.2.19 |
spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| org.springframework:spring-webmvc |
CVE-2026-41844 |
中危 |
6.1.14 |
7.0.8, 6.2.19 |
Spring Framework: Spring Framework: Open Redirect via crafted link
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| org.springframework:spring-webmvc |
CVE-2026-41846 |
中危 |
6.1.14 |
7.0.8, 6.2.19 |
Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| org.springframework:spring-webmvc |
CVE-2026-41853 |
中危 |
6.1.14 |
7.0.8, 6.2.19 |
Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| ch.qos.logback:logback-core |
CVE-2024-12801 |
低危 |
1.5.11 |
1.5.13, 1.3.15 |
logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
|
| org.springframework:spring-expression |
CVE-2026-41852 |
低危 |
6.1.14 |
7.0.8, 6.2.19 |
spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| com.rabbitmq:amqp-client |
CVE-2026-61634 |
低危 |
5.22.0 |
5.33.0 |
The RabbitMQ Java client library allows Java and JVM-based application ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-61634
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-08-18 17:16 修改: 2026-09-10 20:30
|
| ch.qos.logback:logback-core |
CVE-2026-10532 |
低危 |
1.5.11 |
1.5.34 |
Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
|
| ch.qos.logback:logback-core |
CVE-2026-1225 |
低危 |
1.5.11 |
1.5.25 |
ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-31651 |
低危 |
10.1.31 |
9.0.104, 10.1.40, 11.0.6 |
tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31651
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-46701 |
低危 |
10.1.31 |
9.0.105, 10.1.41, 11.0.7 |
tomcat: Apache Tomcat: Security constraint bypass for CGI scripts
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-55754 |
低危 |
10.1.31 |
11.0.11, 10.1.45, 9.0.109 |
org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55754
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-61795 |
低危 |
10.1.31 |
11.0.12, 10.1.47, 9.0.110 |
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50
|
| org.springframework:spring-context |
CVE-2025-22233 |
低危 |
6.1.14 |
6.2.7, 6.1.20 |
CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43514 |
低危 |
10.1.31 |
9.0.118, 10.1.55, 11.0.22 |
tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
|
| org.springframework:spring-core |
CVE-2026-41848 |
低危 |
6.1.14 |
7.0.8, 6.2.19 |
spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
|
| ch.qos.logback:logback-core |
CVE-2026-9828 |
低危 |
1.5.11 |
1.5.33 |
Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
|
| org.springframework:spring-webmvc |
CVE-2026-22735 |
低危 |
6.1.14 |
7.0.6, 6.2.17 |
org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
|
| org.springframework:spring-webmvc |
CVE-2026-22741 |
低危 |
6.1.14 |
7.0.7, 6.2.18 |
Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741
镜像层: sha256:96d9f869589ba0a6b5fab9d682ba93888baae17ac2033dedd6c82a4f75bb3e76
发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
|