ghcr.io/tapdata/tapdata:v3.27.0 linux/amd64

ghcr.io/tapdata/tapdata:v3.27.0 - Trivy安全扫描结果 扫描时间: 2026-08-26 10:40
全部漏洞信息
低危漏洞:231 中危漏洞:849 高危漏洞:270 严重漏洞:92

系统OS: ubuntu 22.04 扫描引擎: Trivy 扫描时间: 2026-08-26 10:40

ghcr.io/tapdata/tapdata:v3.27.0 (ubuntu 22.04) (ubuntu)
低危漏洞:197 中危漏洞:618 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gpgv CVE-2025-68973 高危 2.2.27-3ubuntu2.1 2.2.27-3ubuntu2.5 GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59

libssl3 CVE-2026-45447 高危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-08-24 13:18

libtiff5 CVE-2025-9900 高危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.12 libtiff: Libtiff Write-What-Where

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9900

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-09-23 17:15 修改: 2026-06-29 21:16

openssl CVE-2026-45447 高危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-08-24 13:18

curl CVE-2026-11856 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.26 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

curl CVE-2026-1965 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.23 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

curl CVE-2026-3783 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.23 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

curl CVE-2026-5545 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

curl CVE-2026-6253 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-6429 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

curl CVE-2026-7168 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01

curl CVE-2026-8925 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04

curl CVE-2026-8927 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21

dmsetup CVE-2026-19617 中危 2:1.02.175-2.1ubuntu4 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-14 06:17 修改: 2026-08-14 19:07

bsdutils CVE-2026-27456 中危 1:2.37.2-4ubuntu3.4 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

gpgv CVE-2025-30258 中危 2.2.27-3ubuntu2.1 2.2.27-3ubuntu2.3 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08

gtk-update-icon-cache CVE-2024-6655 中危 3.24.33-1ubuntu2.1 3.24.33-1ubuntu2.2 gtk3: gtk2: Library injection from CWD

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6655

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 15:15 修改: 2026-06-17 08:18

gzip CVE-2026-41991 中危 1.10-4ubuntu4.1 1.10-4ubuntu4.2 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02

gzip CVE-2026-41992 中危 1.10-4ubuntu4.1 1.10-4ubuntu4.2 GNU gzip contains a global buffer overflow vulnerability in the LZH de ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-29 12:16 修改: 2026-08-25 04:18

libapparmor1 CVE-2016-1585 中危 3.0.4-2ubuntu2.3 3.0.4-2ubuntu2.4 In all versions of AppArmor mount rules are accidentally widened when ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1585

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2019-04-22 16:29 修改: 2026-06-17 00:42

libasound2 CVE-2026-25068 中危 1.2.6.1-1ubuntu1 1.2.6.1-1ubuntu1.1 alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25068

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-29 20:16 修改: 2026-06-17 10:24

libasound2 CVE-2026-56109 中危 1.2.6.1-1ubuntu1 1.2.6.1-1ubuntu1.2 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56109

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-22 18:16 修改: 2026-07-14 22:17

libasound2-data CVE-2026-25068 中危 1.2.6.1-1ubuntu1 1.2.6.1-1ubuntu1.1 alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25068

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-29 20:16 修改: 2026-06-17 10:24

libasound2-data CVE-2026-56109 中危 1.2.6.1-1ubuntu1 1.2.6.1-1ubuntu1.2 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56109

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-22 18:16 修改: 2026-07-14 22:17

libattr1 CVE-2026-54371 中危 1:2.5.1-1build1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-29 14:16 修改: 2026-08-24 13:19

libavahi-client3 CVE-2025-59529 中危 0.8-5ubuntu5.2 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

libavahi-client3 CVE-2025-68276 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.4 avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68276

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:58

libavahi-client3 CVE-2025-68468 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.4 avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68468

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-client3 CVE-2025-68471 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.4 avahi: Avahi: Denial of Service via unsolicited CNAME announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68471

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-client3 CVE-2026-24401 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.5 avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24401

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-24 02:15 修改: 2026-06-17 10:23

libavahi-client3 CVE-2026-34933 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.5 avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34933

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-03 23:17 修改: 2026-07-24 22:10

libavahi-common-data CVE-2025-59529 中危 0.8-5ubuntu5.2 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

libavahi-common-data CVE-2025-68276 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.4 avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68276

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:58

libavahi-common-data CVE-2025-68468 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.4 avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68468

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-common-data CVE-2025-68471 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.4 avahi: Avahi: Denial of Service via unsolicited CNAME announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68471

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-common-data CVE-2026-24401 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.5 avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24401

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-24 02:15 修改: 2026-06-17 10:23

libavahi-common-data CVE-2026-34933 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.5 avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34933

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-03 23:17 修改: 2026-07-24 22:10

libavahi-common3 CVE-2025-59529 中危 0.8-5ubuntu5.2 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

libavahi-common3 CVE-2025-68276 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.4 avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68276

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:58

libavahi-common3 CVE-2025-68468 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.4 avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68468

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-common3 CVE-2025-68471 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.4 avahi: Avahi: Denial of Service via unsolicited CNAME announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68471

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-common3 CVE-2026-24401 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.5 avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24401

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-24 02:15 修改: 2026-06-17 10:23

libavahi-common3 CVE-2026-34933 中危 0.8-5ubuntu5.2 0.8-5ubuntu5.5 avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34933

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-03 23:17 修改: 2026-07-24 22:10

libblkid1 CVE-2026-27456 中危 2.37.2-4ubuntu3.4 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libc-bin CVE-2024-33599 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.8 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc-bin CVE-2024-33600 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.8 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc-bin CVE-2024-33601 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.8 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc-bin CVE-2024-33602 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.8 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc-bin CVE-2025-0395 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.9 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26

libc-bin CVE-2025-15281 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.13 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

libc-bin CVE-2025-4802 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.10 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34

libc-bin CVE-2025-8058 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.11 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06

libc-bin CVE-2026-0861 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.13 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11

libc-bin CVE-2026-0915 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.13 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

libc-bin CVE-2026-4046 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

libc-bin CVE-2026-5435 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

libc-bin CVE-2026-5450 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-bin CVE-2026-5928 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-bin CVE-2026-6238 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

libc6 CVE-2024-33599 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.8 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc6 CVE-2024-33600 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.8 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc6 CVE-2024-33601 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.8 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc6 CVE-2024-33602 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.8 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32

libc6 CVE-2025-0395 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.9 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26

libc6 CVE-2025-15281 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.13 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

libc6 CVE-2025-4802 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.10 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34

libc6 CVE-2025-8058 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.11 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06

libc6 CVE-2026-0861 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.13 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11

libc6 CVE-2026-0915 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.13 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

libc6 CVE-2026-4046 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

libc6 CVE-2026-5435 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

libc6 CVE-2026-5450 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc6 CVE-2026-5928 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc6 CVE-2026-6238 中危 2.35-0ubuntu3.7 2.35-0ubuntu3.14 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

libcap2 CVE-2025-1390 中危 1:2.44-1ubuntu0.22.04.1 1:2.44-1ubuntu0.22.04.2 libcap: pam_cap: Fix potential configuration parsing error

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1390

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-02-18 03:15 修改: 2026-06-17 08:39

libcap2 CVE-2026-4878 中危 1:2.44-1ubuntu0.22.04.1 1:2.44-1ubuntu0.22.04.3 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-09 16:16 修改: 2026-08-25 10:18

libcups2 CVE-2024-35235 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.9 cups: Cupsd Listen arbitrary chmod 0140777

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35235

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-06-11 15:16 修改: 2026-06-17 07:34

libcups2 CVE-2024-47175 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.11 cups: libppd: remote command injection via attacker controlled data in PPD file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47175

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-09-26 22:15 修改: 2026-06-17 07:56

libcups2 CVE-2025-58060 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.12 cups: Authentication Bypass in CUPS Authorization Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58060

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-09-11 18:15 修改: 2026-06-17 09:43

libcups2 CVE-2025-58364 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.12 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58364

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-09-11 18:15 修改: 2026-06-17 09:44

libcups2 CVE-2025-58436 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.16 cups: Slow client communication leads to a possible DoS attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58436

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-11-29 03:15 修改: 2026-06-17 09:44

libcups2 CVE-2025-61915 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.15 CUPS: Local denial-of-service via cupsd.conf update and related issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61915

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-11-29 03:15 修改: 2026-06-17 09:51

libcups2 CVE-2026-27447 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.20 cups: OpenPrinting CUPS: Authorization bypass via case-insensitive username comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27447

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libcups2 CVE-2026-34978 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.20 cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifier

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34978

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-03 22:16 修改: 2026-07-20 20:10

libcups2 CVE-2026-34979 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.20 cups: OpenPrinting CUPS: Denial of Service via heap-based buffer overflow in job attribute processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34979

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-03 22:16 修改: 2026-07-24 21:10

libcups2 CVE-2026-34980 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.20 cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34980

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-03 22:16 修改: 2026-07-24 21:10

libcups2 CVE-2026-34990 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.20 cups: OpenPrinting CUPS: Privilege escalation via arbitrary file overwrite due to coerced authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34990

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-03 22:16 修改: 2026-07-24 21:10

libcups2 CVE-2026-39314 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.20 cups: CUPS: Denial of Service via integer underflow in IPP attribute handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39314

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:41

libcups2 CVE-2026-39316 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.20 cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39316

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:41

libcups2 CVE-2026-41079 中危 2.4.1op1-1ubuntu4.8 2.4.1op1-1ubuntu4.20 cups: CUPS: Information disclosure via crafted SNMP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41079

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

libcurl4 CVE-2024-7264 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.17 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19

libcurl4 CVE-2024-8096 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.18 curl: OCSP stapling bypass with GnuTLS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-09-11 10:15 修改: 2026-06-17 08:21

libcurl4 CVE-2025-14017 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.22 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35

libcurl4 CVE-2026-11856 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.26 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43

libcurl4 CVE-2026-1965 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.23 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

libcurl4 CVE-2026-3783 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.23 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

libcurl4 CVE-2026-5545 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

libcurl4 CVE-2026-6253 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl4 CVE-2026-6429 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl4 CVE-2026-7168 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01

libcurl4 CVE-2026-8925 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04

libcurl4 CVE-2026-8927 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21

libdevmapper1.02.1 CVE-2026-19617 中危 2:1.02.175-2.1ubuntu4 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-14 06:17 修改: 2026-08-14 19:07

libelf1 CVE-2025-1372 中危 0.186-1build1 0.186-1ubuntu0.1 elfutils: GNU elfutils eu-readelf readelf.c print_string_section buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1372

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-17 03:15 修改: 2026-06-17 08:39

libelf1 CVE-2025-1377 中危 0.186-1build1 0.186-1ubuntu0.1 elfutils: GNU elfutils eu-strip strip.c gelf_getsymshndx denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1377

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39

libexpat1 CVE-2024-45490 中危 2.4.7-1ubuntu0.3 2.4.7-1ubuntu0.4 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54

libexpat1 CVE-2024-45491 中危 2.4.7-1ubuntu0.3 2.4.7-1ubuntu0.4 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54

libexpat1 CVE-2024-45492 中危 2.4.7-1ubuntu0.3 2.4.7-1ubuntu0.4 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54

libexpat1 CVE-2024-50602 中危 2.4.7-1ubuntu0.3 2.4.7-1ubuntu0.5 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-27 05:15 修改: 2026-06-17 08:04

libexpat1 CVE-2024-8176 中危 2.4.7-1ubuntu0.3 2.4.7-1ubuntu0.6 libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8176

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-03-14 09:15 修改: 2026-06-30 00:16

libexpat1 CVE-2025-66382 中危 2.4.7-1ubuntu0.3 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

libexpat1 CVE-2026-24515 中危 2.4.7-1ubuntu0.3 2.4.7-1ubuntu0.7 libexpat: libexpat null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23

libexpat1 CVE-2026-25210 中危 2.4.7-1ubuntu0.3 2.4.7-1ubuntu0.7 libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24

libfreetype6 CVE-2025-27363 中危 2.11.1+dfsg-1ubuntu0.2 2.11.1+dfsg-1ubuntu0.3 freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27363

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-03-11 14:15 修改: 2026-06-17 09:03

libgail-common CVE-2024-6655 中危 2.24.33-2ubuntu2 2.24.33-2ubuntu2.1 gtk3: gtk2: Library injection from CWD

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6655

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 15:15 修改: 2026-06-17 08:18

libgail18 CVE-2024-6655 中危 2.24.33-2ubuntu2 2.24.33-2ubuntu2.1 gtk3: gtk2: Library injection from CWD

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6655

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 15:15 修改: 2026-06-17 08:18

libgcrypt20 CVE-2026-41989 中危 1.9.4-3ubuntu3 1.9.4-3ubuntu3.2 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18

libgdk-pixbuf-2.0-0 CVE-2022-48622 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.3 gnome: heap memory corruption on gdk-pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48622

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-01-26 09:15 修改: 2026-06-17 05:15

libgdk-pixbuf-2.0-0 CVE-2025-6199 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.4 gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6199

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-17 15:15 修改: 2026-06-30 11:16

libgdk-pixbuf-2.0-0 CVE-2025-7345 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.4 gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7345

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-08 14:15 修改: 2026-06-30 02:16

libgdk-pixbuf-2.0-0 CVE-2026-5201 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.5 gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5201

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-31 09:16 修改: 2026-07-15 01:16

libgdk-pixbuf2.0-bin CVE-2022-48622 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.3 gnome: heap memory corruption on gdk-pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48622

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-01-26 09:15 修改: 2026-06-17 05:15

libgdk-pixbuf2.0-bin CVE-2025-6199 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.4 gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6199

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-17 15:15 修改: 2026-06-30 11:16

libgdk-pixbuf2.0-bin CVE-2025-7345 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.4 gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7345

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-08 14:15 修改: 2026-06-30 02:16

libgdk-pixbuf2.0-bin CVE-2026-5201 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.5 gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5201

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-31 09:16 修改: 2026-07-15 01:16

libgdk-pixbuf2.0-common CVE-2022-48622 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.3 gnome: heap memory corruption on gdk-pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48622

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-01-26 09:15 修改: 2026-06-17 05:15

libgdk-pixbuf2.0-common CVE-2025-6199 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.4 gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6199

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-17 15:15 修改: 2026-06-30 11:16

libgdk-pixbuf2.0-common CVE-2025-7345 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.4 gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7345

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-08 14:15 修改: 2026-06-30 02:16

libgdk-pixbuf2.0-common CVE-2026-5201 中危 2.42.8+dfsg-1ubuntu0.2 2.42.8+dfsg-1ubuntu0.5 gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5201

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-31 09:16 修改: 2026-07-15 01:16

libgif7 CVE-2026-23868 中危 5.1.9-2build2 5.1.9-2ubuntu0.3 giflib: Giflib: Double-free vulnerability leading to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23868

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-10 20:16 修改: 2026-07-15 02:18

libgif7 CVE-2026-26740 中危 5.1.9-2build2 5.1.9-2ubuntu0.3 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26740

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-18 18:16 修改: 2026-07-23 12:17

libgl1-mesa-dri CVE-2026-40393 中危 23.2.1-1ubuntu3.1~22.04.2 23.2.1-1ubuntu3.1~22.04.4 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

libgl1-mesa-glx CVE-2026-40393 中危 23.0.4-0ubuntu1~22.04.1 23.2.1-1ubuntu3.1~22.04.4 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

libglapi-mesa CVE-2026-40393 中危 23.2.1-1ubuntu3.1~22.04.2 23.2.1-1ubuntu3.1~22.04.4 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

libglib2.0-0 CVE-2024-52533 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.4 glib: buffer overflow in set_connect_msg()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52533

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-11 23:15 修改: 2026-06-17 08:07

libglib2.0-0 CVE-2025-13601 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glib: Integer overflow in in g_escape_uri_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13601

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-11-26 15:15 修改: 2026-06-30 00:16

libglib2.0-0 CVE-2025-14087 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-10 09:15 修改: 2026-08-25 10:18

libglib2.0-0 CVE-2025-14512 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-11 07:16 修改: 2026-08-25 10:18

libglib2.0-0 CVE-2025-4373 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.5 glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4373

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-06 15:16 修改: 2026-08-25 08:18

libglib2.0-0 CVE-2026-0988 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.8 glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0988

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-21 12:15 修改: 2026-06-17 10:11

libglib2.0-0 CVE-2026-1484 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.9 Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1484

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

libglib2.0-0 CVE-2026-1485 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.9 Glib: Glib: Local denial of service via buffer underflow in content type parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1485

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

libglib2.0-0 CVE-2026-1489 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.9 Glib: GLib: Memory corruption via integer overflow in Unicode case conversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1489

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-27 15:15 修改: 2026-06-17 10:15

libglib2.0-data CVE-2024-52533 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.4 glib: buffer overflow in set_connect_msg()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52533

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-11 23:15 修改: 2026-06-17 08:07

libglib2.0-data CVE-2025-13601 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glib: Integer overflow in in g_escape_uri_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13601

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-11-26 15:15 修改: 2026-06-30 00:16

libglib2.0-data CVE-2025-14087 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-10 09:15 修改: 2026-08-25 10:18

libglib2.0-data CVE-2025-14512 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-11 07:16 修改: 2026-08-25 10:18

libglib2.0-data CVE-2025-4373 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.5 glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4373

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-06 15:16 修改: 2026-08-25 08:18

libglib2.0-data CVE-2026-0988 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.8 glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0988

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-21 12:15 修改: 2026-06-17 10:11

libglib2.0-data CVE-2026-1484 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.9 Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1484

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

libglib2.0-data CVE-2026-1485 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.9 Glib: Glib: Local denial of service via buffer underflow in content type parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1485

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

libglib2.0-data CVE-2026-1489 中危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.9 Glib: GLib: Memory corruption via integer overflow in Unicode case conversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1489

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-27 15:15 修改: 2026-06-17 10:15

libglx-mesa0 CVE-2026-40393 中危 23.2.1-1ubuntu3.1~22.04.2 23.2.1-1ubuntu3.1~22.04.4 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

libgnutls30 CVE-2024-12243 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.6 gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12243

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-02-10 16:15 修改: 2026-06-17 06:59

libgnutls30 CVE-2025-14831 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.8 gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-02-09 15:16 修改: 2026-08-21 14:16

libgnutls30 CVE-2025-32988 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.7 gnutls: Vulnerability in GnuTLS otherName SAN export

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32988

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-07-10 08:15 修改: 2026-08-21 13:16

libgnutls30 CVE-2025-32989 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.7 gnutls: Vulnerability in GnuTLS SCT extension parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32989

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-07-10 08:15 修改: 2026-08-21 13:16

libgnutls30 CVE-2025-32990 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.7 gnutls: Vulnerability in GnuTLS certtool template parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32990

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-07-10 10:15 修改: 2026-08-21 13:16

libgnutls30 CVE-2025-6395 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.7 gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6395

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-07-10 16:15 修改: 2026-08-21 13:16

libgnutls30 CVE-2026-33845 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-30 18:16 修改: 2026-08-25 10:18

libgnutls30 CVE-2026-33846 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-04 10:15 修改: 2026-08-25 10:18

libgnutls30 CVE-2026-3832 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-30 18:16 修改: 2026-08-25 10:18

libgnutls30 CVE-2026-3833 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-30 18:16 修改: 2026-08-25 10:18

libgnutls30 CVE-2026-42009 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-18 13:16 修改: 2026-08-25 10:18

libgnutls30 CVE-2026-42010 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-07 12:16 修改: 2026-08-25 10:18

libgnutls30 CVE-2026-42011 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-07 15:16 修改: 2026-08-25 11:16

libgnutls30 CVE-2026-42012 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-26 22:16 修改: 2026-08-25 10:18

libgnutls30 CVE-2026-42013 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-26 22:16 修改: 2026-08-25 11:16

libgnutls30 CVE-2026-42014 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-16 02:16 修改: 2026-08-25 10:18

libgnutls30 CVE-2026-42015 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-26 22:16 修改: 2026-08-25 10:18

libgnutls30 CVE-2026-5260 中危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.9 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-26 22:16 修改: 2026-08-25 11:16

libgraphite2-3 CVE-2026-50593 中危 1.3.14-1build2 1.3.14-1ubuntu0.1 Graphite before 1.3.15 has an integer underflow and resultant out-of-b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50593

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-05 04:17 修改: 2026-07-23 07:10

libgssapi-krb5-2 CVE-2024-3596 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.5 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44

libgssapi-krb5-2 CVE-2024-37370 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.4 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38

libgssapi-krb5-2 CVE-2024-37371 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.4 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38

libgssapi-krb5-2 CVE-2025-24528 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59

libgssapi-krb5-2 CVE-2025-3576 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.7 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-04-15 06:15 修改: 2026-08-21 13:16

libgssapi-krb5-2 CVE-2026-11850 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-11 10:16 修改: 2026-08-21 13:16

libgssapi-krb5-2 CVE-2026-40355 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libgssapi-krb5-2 CVE-2026-40356 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libgtk2.0-0 CVE-2024-6655 中危 2.24.33-2ubuntu2 2.24.33-2ubuntu2.1 gtk3: gtk2: Library injection from CWD

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6655

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 15:15 修改: 2026-06-17 08:18

libgtk2.0-bin CVE-2024-6655 中危 2.24.33-2ubuntu2 2.24.33-2ubuntu2.1 gtk3: gtk2: Library injection from CWD

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6655

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 15:15 修改: 2026-06-17 08:18

libgtk2.0-common CVE-2024-6655 中危 2.24.33-2ubuntu2 2.24.33-2ubuntu2.1 gtk3: gtk2: Library injection from CWD

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6655

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 15:15 修改: 2026-06-17 08:18

libk5crypto3 CVE-2024-3596 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.5 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44

libk5crypto3 CVE-2024-37370 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.4 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38

libk5crypto3 CVE-2024-37371 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.4 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38

libk5crypto3 CVE-2025-24528 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59

libk5crypto3 CVE-2025-3576 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.7 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-04-15 06:15 修改: 2026-08-21 13:16

libk5crypto3 CVE-2026-11850 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-11 10:16 修改: 2026-08-21 13:16

libk5crypto3 CVE-2026-40355 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libk5crypto3 CVE-2026-40356 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libkrb5-3 CVE-2024-3596 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.5 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44

libkrb5-3 CVE-2024-37370 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.4 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38

libkrb5-3 CVE-2024-37371 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.4 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38

libkrb5-3 CVE-2025-24528 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59

libkrb5-3 CVE-2025-3576 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.7 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-04-15 06:15 修改: 2026-08-21 13:16

libkrb5-3 CVE-2026-11850 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-11 10:16 修改: 2026-08-21 13:16

libkrb5-3 CVE-2026-40355 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libkrb5-3 CVE-2026-40356 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libkrb5support0 CVE-2024-3596 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.5 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44

libkrb5support0 CVE-2024-37370 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.4 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38

libkrb5support0 CVE-2024-37371 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.4 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38

libkrb5support0 CVE-2025-24528 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59

libkrb5support0 CVE-2025-3576 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.7 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-04-15 06:15 修改: 2026-08-21 13:16

libkrb5support0 CVE-2026-11850 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-11 10:16 修改: 2026-08-21 13:16

libkrb5support0 CVE-2026-40355 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libkrb5support0 CVE-2026-40356 中危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

liblcms2-2 CVE-2026-41254 中危 2.12~rc1-2build2 2.12~rc1-2ubuntu0.1 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46

libmount1 CVE-2026-27456 中危 2.37.2-4ubuntu3.4 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libnghttp2-14 CVE-2026-27135 中危 1.43.0-1ubuntu0.2 1.43.0-1ubuntu0.3 nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-18 18:16 修改: 2026-07-15 02:19

libnghttp2-14 CVE-2026-58055 中危 1.43.0-1ubuntu0.2 1.43.0-1ubuntu0.4 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41

libnss-systemd CVE-2025-4598 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.16 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-30 14:15 修改: 2026-08-21 13:16

libnss-systemd CVE-2026-15059 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17

libnss-systemd CVE-2026-16742 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19

libnss-systemd CVE-2026-29111 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libnss-systemd CVE-2026-40225 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libnss-systemd CVE-2026-40226 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libnss3 CVE-2026-12318 中危 2:3.98-0ubuntu0.22.04.2 2:3.98-0ubuntu0.22.04.4 firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12318

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-16 13:16 修改: 2026-06-17 14:26

libnss3 CVE-2026-2781 中危 2:3.98-0ubuntu0.22.04.2 2:3.98-0ubuntu0.22.04.3 firefox: thunderbird: Integer overflow in the Libraries component in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2781

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-02-24 14:16 修改: 2026-06-17 10:31

libp11-kit0 CVE-2026-13757 中危 0.24.0-6build1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18

libpam-modules CVE-2025-6020 中危 1.4.0-11ubuntu2.4 1.4.0-11ubuntu2.6 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-06-17 13:15 修改: 2026-08-25 06:18

libpam-modules CVE-2026-54411 中危 1.4.0-11ubuntu2.4 1.4.0-11ubuntu2.7 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-modules-bin CVE-2025-6020 中危 1.4.0-11ubuntu2.4 1.4.0-11ubuntu2.6 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-06-17 13:15 修改: 2026-08-25 06:18

libpam-modules-bin CVE-2026-54411 中危 1.4.0-11ubuntu2.4 1.4.0-11ubuntu2.7 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-runtime CVE-2025-6020 中危 1.4.0-11ubuntu2.4 1.4.0-11ubuntu2.6 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-06-17 13:15 修改: 2026-08-25 06:18

libpam-runtime CVE-2026-54411 中危 1.4.0-11ubuntu2.4 1.4.0-11ubuntu2.7 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-systemd CVE-2025-4598 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.16 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-30 14:15 修改: 2026-08-21 13:16

libpam-systemd CVE-2026-15059 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17

libpam-systemd CVE-2026-16742 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19

libpam-systemd CVE-2026-29111 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libpam-systemd CVE-2026-40225 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libpam-systemd CVE-2026-40226 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libpam0g CVE-2025-6020 中危 1.4.0-11ubuntu2.4 1.4.0-11ubuntu2.6 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-06-17 13:15 修改: 2026-08-25 06:18

libpam0g CVE-2026-54411 中危 1.4.0-11ubuntu2.4 1.4.0-11ubuntu2.7 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpixman-1-0 CVE-2023-37769 中危 0.40.0-1ubuntu0.22.04.1 stress-test master commit e4c878 was discovered to contain a FPE vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37769

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-07-17 20:15 修改: 2026-06-17 06:08

libpng16-16 CVE-2025-64505 中危 1.6.37-3build5 1.6.37-3ubuntu0.1 libpng: LIBPNG heap buffer overflow via malformed palette index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

libpng16-16 CVE-2025-64506 中危 1.6.37-3build5 1.6.37-3ubuntu0.1 libpng: LIBPNG heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

libpng16-16 CVE-2025-64720 中危 1.6.37-3build5 1.6.37-3ubuntu0.1 libpng: LIBPNG buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

libpng16-16 CVE-2025-65018 中危 1.6.37-3build5 1.6.37-3ubuntu0.1 libpng: LIBPNG heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

libpng16-16 CVE-2025-66293 中危 1.6.37-3build5 1.6.37-3ubuntu0.3 libpng: LIBPNG out-of-bounds read in png_image_read_composite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56

libpng16-16 CVE-2026-22695 中危 1.6.37-3build5 1.6.37-3ubuntu0.3 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

libpng16-16 CVE-2026-22801 中危 1.6.37-3build5 1.6.37-3ubuntu0.3 libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

libpng16-16 CVE-2026-25646 中危 1.6.37-3build5 1.6.37-3ubuntu0.4 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-02-10 18:16 修改: 2026-08-11 13:17

libpng16-16 CVE-2026-33416 中危 1.6.37-3build5 1.6.37-3ubuntu0.5 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

libpng16-16 CVE-2026-33636 中危 1.6.37-3build5 1.6.37-3ubuntu0.5 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

libpng16-16 CVE-2026-34757 中危 1.6.37-3build5 1.6.37-3ubuntu0.5 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39

libpng16-16 CVE-2026-40930 中危 1.6.37-3build5 1.6.37-3ubuntu0.6 LIBPNG is a reference library for use in applications that process PNG ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40930

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-04 16:16 修改: 2026-07-22 20:10

libpython3.10-minimal CVE-2023-27043 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44

libpython3.10-minimal CVE-2023-6597 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.4 python: Path traversal on tempfile.TemporaryDirectory

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51

libpython3.10-minimal CVE-2024-0397 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.5 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53

libpython3.10-minimal CVE-2024-0450 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.4 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53

libpython3.10-minimal CVE-2024-11168 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.8 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57

libpython3.10-minimal CVE-2024-6232 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17

libpython3.10-minimal CVE-2024-6923 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18

libpython3.10-minimal CVE-2024-8088 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-22 19:15 修改: 2026-06-17 08:21

libpython3.10-minimal CVE-2024-9287 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.7 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24

libpython3.10-minimal CVE-2025-0938 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.9 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-01-31 18:15 修改: 2026-07-31 14:16

libpython3.10-minimal CVE-2025-11468 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

libpython3.10-minimal CVE-2025-12084 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

libpython3.10-minimal CVE-2025-13462 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2025-13836 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.13 cpython: Excessive read buffering DoS in http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

libpython3.10-minimal CVE-2025-13837 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

libpython3.10-minimal CVE-2025-15282 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

libpython3.10-minimal CVE-2025-4516 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.10 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-15 14:15 修改: 2026-07-31 14:16

libpython3.10-minimal CVE-2025-6069 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.11 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-17 14:15 修改: 2026-07-31 14:16

libpython3.10-minimal CVE-2025-6075 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.12 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16

libpython3.10-minimal CVE-2025-69534 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python-markdown: denial of service via malformed HTML-like sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-05 15:16 修改: 2026-07-15 02:17

libpython3.10-minimal CVE-2025-8194 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.11 cpython: Cpython infinite loop when parsing a tarfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-28 19:15 修改: 2026-07-31 14:16

libpython3.10-minimal CVE-2025-8291 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.12 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16

libpython3.10-minimal CVE-2026-0672 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

libpython3.10-minimal CVE-2026-0865 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

libpython3.10-minimal CVE-2026-1299 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

libpython3.10-minimal CVE-2026-1502 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2026-2297 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2026-3276 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2026-3644 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2026-4224 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2026-4519 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2026-4786 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2026-6019 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34

libpython3.10-minimal CVE-2026-6100 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2026-8328 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

libpython3.10-minimal CVE-2026-9669 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2023-27043 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44

libpython3.10-stdlib CVE-2023-6597 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.4 python: Path traversal on tempfile.TemporaryDirectory

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51

libpython3.10-stdlib CVE-2024-0397 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.5 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53

libpython3.10-stdlib CVE-2024-0450 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.4 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53

libpython3.10-stdlib CVE-2024-11168 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.8 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57

libpython3.10-stdlib CVE-2024-6232 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17

libpython3.10-stdlib CVE-2024-6923 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18

libpython3.10-stdlib CVE-2024-8088 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-22 19:15 修改: 2026-06-17 08:21

libpython3.10-stdlib CVE-2024-9287 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.7 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24

libpython3.10-stdlib CVE-2025-0938 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.9 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-01-31 18:15 修改: 2026-07-31 14:16

libpython3.10-stdlib CVE-2025-11468 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

libpython3.10-stdlib CVE-2025-12084 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

libpython3.10-stdlib CVE-2025-13462 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2025-13836 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.13 cpython: Excessive read buffering DoS in http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

libpython3.10-stdlib CVE-2025-13837 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

libpython3.10-stdlib CVE-2025-15282 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

libpython3.10-stdlib CVE-2025-4516 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.10 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-15 14:15 修改: 2026-07-31 14:16

libpython3.10-stdlib CVE-2025-6069 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.11 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-17 14:15 修改: 2026-07-31 14:16

libpython3.10-stdlib CVE-2025-6075 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.12 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16

libpython3.10-stdlib CVE-2025-69534 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python-markdown: denial of service via malformed HTML-like sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-05 15:16 修改: 2026-07-15 02:17

libpython3.10-stdlib CVE-2025-8194 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.11 cpython: Cpython infinite loop when parsing a tarfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-28 19:15 修改: 2026-07-31 14:16

libpython3.10-stdlib CVE-2025-8291 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.12 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16

libpython3.10-stdlib CVE-2026-0672 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

libpython3.10-stdlib CVE-2026-0865 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

libpython3.10-stdlib CVE-2026-1299 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

libpython3.10-stdlib CVE-2026-1502 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2026-2297 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2026-3276 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2026-3644 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2026-4224 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2026-4519 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2026-4786 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2026-6019 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34

libpython3.10-stdlib CVE-2026-6100 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2026-8328 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

libpython3.10-stdlib CVE-2026-9669 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

libsmartcols1 CVE-2026-27456 中危 2.37.2-4ubuntu3.4 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libsndfile1 CVE-2025-52194 中危 1.0.31-2ubuntu0.1 libsndfile: buffer overflow when processing crafted IRCAM audio files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52194

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-08-21 15:15 修改: 2026-06-17 09:36

libsndfile1 CVE-2026-37555 中危 1.0.31-2ubuntu0.1 libsndfile: integer overflow in ima_reader_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37555

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-29 16:16 修改: 2026-07-15 02:20

libsqlite3-0 CVE-2025-29088 中危 3.37.2-2ubuntu0.3 3.37.2-2ubuntu0.4 sqlite: Denial of Service in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29088

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-10 14:15 修改: 2026-06-17 09:05

libsqlite3-0 CVE-2025-6965 中危 3.37.2-2ubuntu0.3 3.37.2-2ubuntu0.5 sqlite: Integer Truncation in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6965

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 14:15 修改: 2026-06-26 16:36

libsqlite3-0 CVE-2026-11822 中危 3.37.2-2ubuntu0.3 3.37.2-2ubuntu0.6 SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

libsqlite3-0 CVE-2026-11824 中危 3.37.2-2ubuntu0.3 3.37.2-2ubuntu0.6 SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

libsqlite3-0 CVE-2026-50812 中危 3.37.2-2ubuntu0.3 3.37.2-2ubuntu0.7 sqlite: SQLite: Denial of Service via malformed changeset in Session Extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48

libsqlite3-0 CVE-2026-50813 中危 3.37.2-2ubuntu0.3 3.37.2-2ubuntu0.7 sqlite: SQLite: Information disclosure via Session Extension changeset merge path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48

libssh-4 CVE-2025-4877 中危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.4 libssh: Write beyond bounds in binary to base64 conversion functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4877

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-08-20 13:15 修改: 2026-08-21 13:16

libssh-4 CVE-2025-4878 中危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.4 libssh: Use of uninitialized variable in privatekey_from_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4878

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-07-22 15:15 修改: 2026-08-21 13:16

libssh-4 CVE-2025-5318 中危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.4 libssh: out-of-bounds read in sftp_handle()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5318

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-06-24 14:15 修改: 2026-08-25 09:17

libssh-4 CVE-2025-5372 中危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.4 libssh: Incorrect Return Code Handling in ssh_kdf() in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5372

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-07-04 06:15 修改: 2026-08-21 13:16

libssh-4 CVE-2026-0964 中危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.6 libssh: Improper sanitation of paths received from SCP servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0964

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-26 21:17 修改: 2026-08-21 12:16

libssh-4 CVE-2026-0967 中危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.6 libssh: libssh: Denial of Service via inefficient regular expression processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0967

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-26 21:17 修改: 2026-08-21 13:16

libssh-4 CVE-2026-0968 中危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.6 libssh: libssh: Denial of Service due to malformed SFTP message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0968

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-26 21:17 修改: 2026-08-21 13:16

libssh-4 CVE-2026-3731 中危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.7 libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3731

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-08 11:15 修改: 2026-06-17 10:44

curl CVE-2024-7264 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.17 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19

libssl3 CVE-2022-40735 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.16 The Diffie-Hellman Key Agreement Protocol allows use of long expo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40735

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2022-11-14 23:15 修改: 2026-06-17 05:01

libssl3 CVE-2024-6119 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.18 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-09-03 16:15 修改: 2026-06-17 08:17

libssl3 CVE-2025-15467 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-27 16:16 修改: 2026-08-24 13:16

libssl3 CVE-2025-9230 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.20 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18

libssl3 CVE-2026-31790 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3 CVE-2026-34182 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3 CVE-2026-45445 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libsystemd0 CVE-2025-4598 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.16 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-05-30 14:15 修改: 2026-08-21 13:16

libsystemd0 CVE-2026-15059 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17

libsystemd0 CVE-2026-16742 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19

libsystemd0 CVE-2026-29111 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libsystemd0 CVE-2026-40225 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libsystemd0 CVE-2026-40226 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libtasn1-6 CVE-2024-12133 中危 4.18.0-4build1 4.18.0-4ubuntu0.1 libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-02-10 16:15 修改: 2026-06-30 03:16

libtasn1-6 CVE-2025-13151 中危 4.18.0-4build1 4.18.0-4ubuntu0.2 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33

curl CVE-2024-8096 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.18 curl: OCSP stapling bypass with GnuTLS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-09-11 10:15 修改: 2026-06-17 08:21

libtiff5 CVE-2024-7006 中危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.10 libtiff: NULL pointer dereference in tif_dirinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7006

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-12 13:38 修改: 2026-06-17 08:19

libtiff5 CVE-2025-8534 中危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.11 libtiff: Libtiff Null Pointer Dereference Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8534

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-08-05 00:15 修改: 2026-06-17 10:07

libtiff5 CVE-2025-8851 中危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.11 libtiff: LibTIFF Stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8851

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-08-11 14:15 修改: 2026-06-17 10:07

libudev1 CVE-2025-4598 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.16 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-05-30 14:15 修改: 2026-08-21 13:16

libudev1 CVE-2026-15059 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17

libudev1 CVE-2026-16742 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19

libudev1 CVE-2026-29111 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libudev1 CVE-2026-40225 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libudev1 CVE-2026-40226 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libuuid1 CVE-2026-27456 中危 2.37.2-4ubuntu3.4 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libxml2 CVE-2022-49043 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.5 libxml: use-after-free in xmlXIncludeAddNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-49043

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-01-26 06:15 修改: 2026-06-17 05:16

libxml2 CVE-2024-56171 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.6 libxml2: Use-After-Free in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56171

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-18 22:15 修改: 2026-06-17 08:11

libxml2 CVE-2025-24928 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.6 libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24928

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-18 23:15 修改: 2026-06-17 08:59

libxml2 CVE-2025-27113 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.6 libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27113

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-18 23:15 修改: 2026-06-17 09:03

libxml2 CVE-2025-32414 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.7 libxml2: Out-of-Bounds Read in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32414

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-08 03:15 修改: 2026-06-17 09:11

libxml2 CVE-2025-32415 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.7 libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32415

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-17 17:15 修改: 2026-06-17 09:11

libxml2 CVE-2025-49794 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.8 libxml: Heap use after free (UAF) leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49794

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-16 16:15 修改: 2026-08-24 11:16

libxml2 CVE-2025-49796 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.8 libxml: Type confusion leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49796

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-16 16:15 修改: 2026-08-24 11:16

libxml2 CVE-2025-6021 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.8 libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6021

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-12 13:15 修改: 2026-06-30 11:16

libxml2 CVE-2025-6170 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.8 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-16 16:15 修改: 2026-08-25 10:18

libxml2 CVE-2025-7425 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.10 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-10 14:15 修改: 2026-08-25 06:18

libxml2 CVE-2025-9714 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.9 libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9714

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-09-10 19:15 修改: 2026-06-17 10:09

libxml2 CVE-2026-0989 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.11 libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0989

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-15 15:15 修改: 2026-08-21 13:16

libxml2 CVE-2026-0990 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.11 libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0990

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-15 15:15 修改: 2026-08-21 12:16

libxml2 CVE-2026-0992 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.11 libxml2: libxml2: Denial of Service via crafted XML catalogs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0992

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-15 15:15 修改: 2026-08-21 13:16

libxml2 CVE-2026-6653 中危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.12 libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6653

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-22 14:17 修改: 2026-07-14 16:00

libxpm4 CVE-2026-4367 中危 1:3.5.12-1ubuntu0.22.04.2 1:3.5.12-1ubuntu0.22.04.3 libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4367

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-16 19:16 修改: 2026-07-28 10:16

mount CVE-2026-27456 中危 2.37.2-4ubuntu3.4 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

openjdk-8-jdk CVE-2024-21011 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: long Exception message leading to crash (8319851)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21011

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21068 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: integer overflow in C1 compiler address generation (8322122)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21068

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21085 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: Pack200 excessive memory allocation (8322114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21085

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21094 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21094

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21131 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: potential UTF8 size overflow (8314794)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21131

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21138 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Excessive symbol length can lead to infinite loop (8319859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21138

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21140 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21140

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21144 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Pack200 increase loading time due to improper header validation (8322106)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21144

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21145 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Out-of-bounds access in 2D image handling (8324559)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21145

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21147 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: RangeCheckElimination array index overflow (8323231)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21147

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21235 中危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Integer conversion error leads to incorrect range check (8332644)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21235

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2025-21587 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Better TLS connection support (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21587

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 08:43

openjdk-8-jdk CVE-2025-30691 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Improve compiler transformations (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30691

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jdk CVE-2025-30698 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30698

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jdk CVE-2025-30749 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Better Glyph drawing (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30749

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

openjdk-8-jdk CVE-2025-30754 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30754

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

openjdk-8-jdk CVE-2025-30761 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Improve scripting supports (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30761

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jdk CVE-2025-50106 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50106

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34

openjdk-8-jdk CVE-2025-53057 中危 8u402-ga-2ubuntu1~22.04 8u472-ga-1~22.04 openjdk: Enhance certificate handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53057

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

openjdk-8-jdk CVE-2025-53066 中危 8u402-ga-2ubuntu1~22.04 8u472-ga-1~22.04 openjdk: Enhance Path Factories (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53066

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

openjdk-8-jdk CVE-2026-21925 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Improve JMX connections (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21925

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

openjdk-8-jdk CVE-2026-21932 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Enhance Handling of URIs (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21932

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

openjdk-8-jdk CVE-2026-21933 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21933

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

openjdk-8-jdk CVE-2026-21945 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21945

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

openjdk-8-jdk CVE-2026-22007 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jdk CVE-2026-22013 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jdk CVE-2026-22016 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

openjdk-8-jdk CVE-2026-22018 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jdk CVE-2026-22021 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jdk CVE-2026-23865 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

openjdk-8-jdk CVE-2026-34268 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

openjdk-8-jdk CVE-2026-34282 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34282

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:20

openjdk-8-jdk-headless CVE-2024-21011 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: long Exception message leading to crash (8319851)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21011

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21068 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: integer overflow in C1 compiler address generation (8322122)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21068

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21085 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: Pack200 excessive memory allocation (8322114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21085

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21094 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21094

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21131 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: potential UTF8 size overflow (8314794)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21131

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21138 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Excessive symbol length can lead to infinite loop (8319859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21138

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21140 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21140

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21144 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Pack200 increase loading time due to improper header validation (8322106)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21144

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21145 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Out-of-bounds access in 2D image handling (8324559)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21145

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21147 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: RangeCheckElimination array index overflow (8323231)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21147

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21235 中危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Integer conversion error leads to incorrect range check (8332644)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21235

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2025-21587 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Better TLS connection support (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21587

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 08:43

openjdk-8-jdk-headless CVE-2025-30691 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Improve compiler transformations (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30691

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jdk-headless CVE-2025-30698 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30698

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jdk-headless CVE-2025-30749 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Better Glyph drawing (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30749

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

openjdk-8-jdk-headless CVE-2025-30754 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30754

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

openjdk-8-jdk-headless CVE-2025-30761 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Improve scripting supports (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30761

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jdk-headless CVE-2025-50106 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50106

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34

openjdk-8-jdk-headless CVE-2025-53057 中危 8u402-ga-2ubuntu1~22.04 8u472-ga-1~22.04 openjdk: Enhance certificate handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53057

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

openjdk-8-jdk-headless CVE-2025-53066 中危 8u402-ga-2ubuntu1~22.04 8u472-ga-1~22.04 openjdk: Enhance Path Factories (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53066

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

openjdk-8-jdk-headless CVE-2026-21925 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Improve JMX connections (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21925

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

openjdk-8-jdk-headless CVE-2026-21932 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Enhance Handling of URIs (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21932

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

openjdk-8-jdk-headless CVE-2026-21933 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21933

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

openjdk-8-jdk-headless CVE-2026-21945 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21945

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

openjdk-8-jdk-headless CVE-2026-22007 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jdk-headless CVE-2026-22013 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jdk-headless CVE-2026-22016 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

openjdk-8-jdk-headless CVE-2026-22018 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jdk-headless CVE-2026-22021 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jdk-headless CVE-2026-23865 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

openjdk-8-jdk-headless CVE-2026-34268 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

openjdk-8-jdk-headless CVE-2026-34282 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34282

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:20

openjdk-8-jre CVE-2024-21011 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: long Exception message leading to crash (8319851)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21011

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21068 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: integer overflow in C1 compiler address generation (8322122)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21068

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21085 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: Pack200 excessive memory allocation (8322114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21085

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21094 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21094

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21131 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: potential UTF8 size overflow (8314794)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21131

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21138 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Excessive symbol length can lead to infinite loop (8319859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21138

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21140 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21140

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21144 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Pack200 increase loading time due to improper header validation (8322106)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21144

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21145 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Out-of-bounds access in 2D image handling (8324559)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21145

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21147 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: RangeCheckElimination array index overflow (8323231)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21147

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21235 中危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Integer conversion error leads to incorrect range check (8332644)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21235

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2025-21587 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Better TLS connection support (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21587

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 08:43

openjdk-8-jre CVE-2025-30691 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Improve compiler transformations (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30691

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jre CVE-2025-30698 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30698

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jre CVE-2025-30749 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Better Glyph drawing (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30749

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

openjdk-8-jre CVE-2025-30754 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30754

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

openjdk-8-jre CVE-2025-30761 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Improve scripting supports (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30761

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jre CVE-2025-50106 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50106

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34

openjdk-8-jre CVE-2025-53057 中危 8u402-ga-2ubuntu1~22.04 8u472-ga-1~22.04 openjdk: Enhance certificate handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53057

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

openjdk-8-jre CVE-2025-53066 中危 8u402-ga-2ubuntu1~22.04 8u472-ga-1~22.04 openjdk: Enhance Path Factories (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53066

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

openjdk-8-jre CVE-2026-21925 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Improve JMX connections (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21925

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

openjdk-8-jre CVE-2026-21932 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Enhance Handling of URIs (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21932

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

openjdk-8-jre CVE-2026-21933 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21933

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

openjdk-8-jre CVE-2026-21945 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21945

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

openjdk-8-jre CVE-2026-22007 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jre CVE-2026-22013 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jre CVE-2026-22016 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

openjdk-8-jre CVE-2026-22018 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jre CVE-2026-22021 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jre CVE-2026-23865 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

openjdk-8-jre CVE-2026-34268 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

openjdk-8-jre CVE-2026-34282 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34282

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:20

openjdk-8-jre-headless CVE-2024-21011 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: long Exception message leading to crash (8319851)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21011

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21068 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: integer overflow in C1 compiler address generation (8322122)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21068

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21085 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: Pack200 excessive memory allocation (8322114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21085

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21094 中危 8u402-ga-2ubuntu1~22.04 8u412-ga-1~22.04.1 OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21094

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21131 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: potential UTF8 size overflow (8314794)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21131

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21138 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Excessive symbol length can lead to infinite loop (8319859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21138

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21140 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21140

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21144 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Pack200 increase loading time due to improper header validation (8322106)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21144

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21145 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: Out-of-bounds access in 2D image handling (8324559)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21145

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21147 中危 8u402-ga-2ubuntu1~22.04 8u422-b05-1~22.04 OpenJDK: RangeCheckElimination array index overflow (8323231)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21147

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21235 中危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Integer conversion error leads to incorrect range check (8332644)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21235

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2025-21587 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Better TLS connection support (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21587

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 08:43

openjdk-8-jre-headless CVE-2025-30691 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Improve compiler transformations (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30691

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jre-headless CVE-2025-30698 中危 8u402-ga-2ubuntu1~22.04 8u452-ga~us1-0ubuntu1~22.04 openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30698

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jre-headless CVE-2025-30749 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Better Glyph drawing (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30749

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

openjdk-8-jre-headless CVE-2025-30754 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30754

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09

openjdk-8-jre-headless CVE-2025-30761 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Improve scripting supports (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30761

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:09

openjdk-8-jre-headless CVE-2025-50106 中危 8u402-ga-2ubuntu1~22.04 8u462-ga~us1-0ubuntu2~22.04.2 openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50106

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34

openjdk-8-jre-headless CVE-2025-53057 中危 8u402-ga-2ubuntu1~22.04 8u472-ga-1~22.04 openjdk: Enhance certificate handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53057

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

openjdk-8-jre-headless CVE-2025-53066 中危 8u402-ga-2ubuntu1~22.04 8u472-ga-1~22.04 openjdk: Enhance Path Factories (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53066

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37

openjdk-8-jre-headless CVE-2026-21925 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Improve JMX connections (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21925

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

openjdk-8-jre-headless CVE-2026-21932 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Enhance Handling of URIs (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21932

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

openjdk-8-jre-headless CVE-2026-21933 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21933

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19

openjdk-8-jre-headless CVE-2026-21945 中危 8u402-ga-2ubuntu1~22.04 8u482-ga~us1-0ubuntu1~22.04 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21945

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18

openjdk-8-jre-headless CVE-2026-22007 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jre-headless CVE-2026-22013 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jre-headless CVE-2026-22016 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

openjdk-8-jre-headless CVE-2026-22018 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jre-headless CVE-2026-22021 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk-8-jre-headless CVE-2026-23865 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

openjdk-8-jre-headless CVE-2026-34268 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

openjdk-8-jre-headless CVE-2026-34282 中危 8u402-ga-2ubuntu1~22.04 8u492-ga~us2-0ubuntu1~22.04.1 openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34282

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:20

curl CVE-2025-14017 中危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.22 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35

openssl CVE-2022-40735 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.16 The Diffie-Hellman Key Agreement Protocol allows use of long expo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40735

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2022-11-14 23:15 修改: 2026-06-17 05:01

openssl CVE-2024-6119 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.18 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-09-03 16:15 修改: 2026-06-17 08:17

openssl CVE-2025-15467 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-27 16:16 修改: 2026-08-24 13:16

openssl CVE-2025-9230 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.20 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18

openssl CVE-2026-31790 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-34182 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-45445 中危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

perl-base CVE-2024-56406 中危 5.34.0-3ubuntu1.3 5.34.0-3ubuntu1.4 perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56406

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-04-13 14:15 修改: 2026-06-17 08:12

perl-base CVE-2025-40909 中危 5.34.0-3ubuntu1.3 5.34.0-3ubuntu1.5 perl: Perl threads have a working directory race condition where file operations may target unintended paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-05-30 13:15 修改: 2026-06-17 09:22

perl-base CVE-2026-42496 中危 5.34.0-3ubuntu1.3 5.34.0-3ubuntu1.7 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

perl-base CVE-2026-8376 中危 5.34.0-3ubuntu1.3 5.34.0-3ubuntu1.7 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10

python3-pkg-resources CVE-2025-47273 中危 59.6.0-1.2ubuntu0.22.04.2 59.6.0-1.2ubuntu0.22.04.3 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:3d29b64f2f9c30f02191560ef15517b2e49c73eec744a49ce9bfda68ff11088f

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27

python3.10 CVE-2023-27043 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44

python3.10 CVE-2023-6597 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.4 python: Path traversal on tempfile.TemporaryDirectory

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51

python3.10 CVE-2024-0397 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.5 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53

python3.10 CVE-2024-0450 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.4 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53

python3.10 CVE-2024-11168 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.8 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57

python3.10 CVE-2024-6232 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17

python3.10 CVE-2024-6923 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18

python3.10 CVE-2024-8088 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-22 19:15 修改: 2026-06-17 08:21

python3.10 CVE-2024-9287 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.7 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24

python3.10 CVE-2025-0938 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.9 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-01-31 18:15 修改: 2026-07-31 14:16

python3.10 CVE-2025-11468 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

python3.10 CVE-2025-12084 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

python3.10 CVE-2025-13462 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16

python3.10 CVE-2025-13836 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.13 cpython: Excessive read buffering DoS in http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

python3.10 CVE-2025-13837 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

python3.10 CVE-2025-15282 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

python3.10 CVE-2025-4516 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.10 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-15 14:15 修改: 2026-07-31 14:16

python3.10 CVE-2025-6069 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.11 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-17 14:15 修改: 2026-07-31 14:16

python3.10 CVE-2025-6075 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.12 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16

python3.10 CVE-2025-69534 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python-markdown: denial of service via malformed HTML-like sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-05 15:16 修改: 2026-07-15 02:17

python3.10 CVE-2025-8194 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.11 cpython: Cpython infinite loop when parsing a tarfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-28 19:15 修改: 2026-07-31 14:16

python3.10 CVE-2025-8291 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.12 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16

python3.10 CVE-2026-0672 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3.10 CVE-2026-0865 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3.10 CVE-2026-1299 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

python3.10 CVE-2026-1502 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16

python3.10 CVE-2026-2297 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16

python3.10 CVE-2026-3276 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

python3.10 CVE-2026-3644 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

python3.10 CVE-2026-4224 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

python3.10 CVE-2026-4519 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16

python3.10 CVE-2026-4786 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16

python3.10 CVE-2026-6019 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34

python3.10 CVE-2026-6100 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16

python3.10 CVE-2026-8328 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

python3.10 CVE-2026-9669 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

python3.10-minimal CVE-2023-27043 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44

python3.10-minimal CVE-2023-6597 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.4 python: Path traversal on tempfile.TemporaryDirectory

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51

python3.10-minimal CVE-2024-0397 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.5 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53

python3.10-minimal CVE-2024-0450 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.4 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53

python3.10-minimal CVE-2024-11168 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.8 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57

python3.10-minimal CVE-2024-6232 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17

python3.10-minimal CVE-2024-6923 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18

python3.10-minimal CVE-2024-8088 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-22 19:15 修改: 2026-06-17 08:21

python3.10-minimal CVE-2024-9287 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.7 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24

python3.10-minimal CVE-2025-0938 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.9 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-01-31 18:15 修改: 2026-07-31 14:16

python3.10-minimal CVE-2025-11468 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

python3.10-minimal CVE-2025-12084 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

python3.10-minimal CVE-2025-13462 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2025-13836 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.13 cpython: Excessive read buffering DoS in http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

python3.10-minimal CVE-2025-13837 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34

python3.10-minimal CVE-2025-15282 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

python3.10-minimal CVE-2025-4516 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.10 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-15 14:15 修改: 2026-07-31 14:16

python3.10-minimal CVE-2025-6069 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.11 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-06-17 14:15 修改: 2026-07-31 14:16

python3.10-minimal CVE-2025-6075 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.12 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16

python3.10-minimal CVE-2025-69534 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python-markdown: denial of service via malformed HTML-like sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-05 15:16 修改: 2026-07-15 02:17

python3.10-minimal CVE-2025-8194 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.11 cpython: Cpython infinite loop when parsing a tarfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-28 19:15 修改: 2026-07-31 14:16

python3.10-minimal CVE-2025-8291 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.12 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16

python3.10-minimal CVE-2026-0672 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3.10-minimal CVE-2026-0865 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.14 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3.10-minimal CVE-2026-1299 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

python3.10-minimal CVE-2026-1502 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2026-2297 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2026-3276 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2026-3644 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2026-4224 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2026-4519 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2026-4786 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2026-6019 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34

python3.10-minimal CVE-2026-6100 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2026-8328 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

python3.10-minimal CVE-2026-9669 中危 3.10.12-1~22.04.3 3.10.12-1~22.04.16 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

sed CVE-2026-5958 中危 4.8-1ubuntu2 4.8-1ubuntu2.1 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59

systemd CVE-2025-4598 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.16 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-30 14:15 修改: 2026-08-21 13:16

systemd CVE-2026-15059 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17

systemd CVE-2026-16742 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19

systemd CVE-2026-29111 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd CVE-2026-40225 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd CVE-2026-40226 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-sysv CVE-2025-4598 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.16 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-30 14:15 修改: 2026-08-21 13:16

systemd-sysv CVE-2026-15059 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17

systemd-sysv CVE-2026-16742 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19

systemd-sysv CVE-2026-29111 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd-sysv CVE-2026-40225 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-sysv CVE-2026-40226 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-timesyncd CVE-2025-4598 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.16 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-30 14:15 修改: 2026-08-21 13:16

systemd-timesyncd CVE-2026-15059 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17

systemd-timesyncd CVE-2026-16742 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.22 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19

systemd-timesyncd CVE-2026-29111 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd-timesyncd CVE-2026-40225 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.19 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-timesyncd CVE-2026-40226 中危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

tar CVE-2025-45582 中危 1.34+dfsg-1ubuntu0.1.22.04.2 1.34+dfsg-1ubuntu0.1.22.04.4 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25

tar CVE-2026-5704 中危 1.34+dfsg-1ubuntu0.1.22.04.2 1.34+dfsg-1ubuntu0.1.22.04.6 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59

util-linux CVE-2026-27456 中危 2.37.2-4ubuntu3.4 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

wget CVE-2021-31879 中危 1.21.2-2ubuntu1.1 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:177b247725d6f735e8e247aa83c6aeed261bed04fd0ba93416f69edd38dcae68

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52

wget CVE-2026-15146 中危 1.21.2-2ubuntu1.1 1.21.2-2ubuntu1.4 wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15146

镜像层: sha256:177b247725d6f735e8e247aa83c6aeed261bed04fd0ba93416f69edd38dcae68

发布日期: 2026-07-10 19:17 修改: 2026-07-15 19:16

wget CVE-2026-58469 中危 1.21.2-2ubuntu1.1 1.21.2-2ubuntu1.3 wget: GNU Wget: Memory corruption via crafted Metalink URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58469

镜像层: sha256:177b247725d6f735e8e247aa83c6aeed261bed04fd0ba93416f69edd38dcae68

发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:59

wget CVE-2026-58470 中危 1.21.2-2ubuntu1.1 1.21.2-2ubuntu1.3 wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58470

镜像层: sha256:177b247725d6f735e8e247aa83c6aeed261bed04fd0ba93416f69edd38dcae68

发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:01

wget CVE-2026-58471 中危 1.21.2-2ubuntu1.1 1.21.2-2ubuntu1.3 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58471

镜像层: sha256:177b247725d6f735e8e247aa83c6aeed261bed04fd0ba93416f69edd38dcae68

发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:02

wget CVE-2026-58472 中危 1.21.2-2ubuntu1.1 1.21.2-2ubuntu1.3 wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58472

镜像层: sha256:177b247725d6f735e8e247aa83c6aeed261bed04fd0ba93416f69edd38dcae68

发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:58

libcurl4 CVE-2025-0167 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.23 When asked to use a `.netrc` file for credentials **and** to follow HT ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0167

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:25

libcurl4 CVE-2025-14524 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.22 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36

libcurl4 CVE-2025-15079 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.22 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

libsystemd0 CVE-2023-7008 低危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

libsystemd0 CVE-2026-40228 低危 249.11-0ubuntu3.12 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libkrb5-3 CVE-2024-26458 低危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5-3 CVE-2024-26461 低危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

openjdk-8-jre CVE-2024-21208 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: HTTP client improper handling of maxHeaderSize (8328286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21208

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21210 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Array indexing integer overflow (8328544)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21210

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jre CVE-2024-21217 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Unbounded allocation leads to out-of-memory error (8331446)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21217

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

libtasn1-6 CVE-2021-46848 低危 4.18.0-4build1 4.18.0-4ubuntu0.2 libtasn1: Out-of-bound access in ETYPE_OK

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2022-10-24 14:15 修改: 2026-06-17 04:15

libcurl4 CVE-2025-15224 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.22 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

libglib2.0-0 CVE-2025-3360 低危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3360

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-07 13:15 修改: 2026-06-30 15:16

libglib2.0-0 CVE-2025-7039 低危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7039

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-09-03 02:15 修改: 2026-06-17 10:04

libcurl4 CVE-2026-3784 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.23 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

libtiff5 CVE-2023-3164 低危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.9 libtiff: heap-buffer-overflow in extractImageSection()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3164

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-11-02 12:15 修改: 2026-06-17 06:13

libtiff5 CVE-2025-61143 低危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.13 libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61143

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50

libtiff5 CVE-2025-61144 低危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.13 libtiff: libtiff: Denial of Service via buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61144

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50

libtiff5 CVE-2025-61145 低危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.12 libtiff: libtiff: Denial of service via double free in tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61145

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50

libtiff5 CVE-2025-8176 低危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.11 libtiff: LibTIFF Use-After-Free Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8176

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-07-26 04:16 修改: 2026-06-17 10:06

libtiff5 CVE-2025-8961 低危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.12 libtiff: LibTIFF memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8961

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-08-14 13:15 修改: 2026-06-17 10:08

libtiff5 CVE-2025-9165 低危 4.3.0-6ubuntu0.8 4.3.0-6ubuntu0.12 libtiff: LibTIFF memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9165

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-08-19 20:15 修改: 2026-06-17 10:08

libtinfo6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libtinfo6 CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libcurl4 CVE-2026-4873 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57

libcurl4 CVE-2026-5773 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

libcurl4 CVE-2026-6276 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libcurl4 CVE-2026-8286 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

libkrb5support0 CVE-2024-26458 低危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libkrb5support0 CVE-2024-26461 低危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libudev1 CVE-2023-7008 低危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

libudev1 CVE-2026-40228 低危 249.11-0ubuntu3.12 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libcurl4 CVE-2026-8458 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12

libllvm15 CVE-2024-7883 低危 1:15.0.7-0ubuntu0.22.04.3 clang: CMSE secure state may leak from stack to floating-point registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7883

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-31 17:15 修改: 2026-06-17 08:21

liblzma5 CVE-2026-34743 低危 5.2.5-2ubuntu1 5.2.5-2ubuntu1.1 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10

libcurl4 CVE-2026-8924 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06

libpython3.10-minimal CVE-2024-4032 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.5 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00

libpython3.10-minimal CVE-2024-7592 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20

libpython3.10-minimal CVE-2025-1795 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.10 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-28 19:15 修改: 2026-07-31 14:16

libncurses6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libncurses6 CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libncursesw6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

openjdk-8-jre-headless CVE-2024-21208 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: HTTP client improper handling of maxHeaderSize (8328286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21208

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21210 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Array indexing integer overflow (8328544)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21210

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jre-headless CVE-2024-21217 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Unbounded allocation leads to out-of-memory error (8331446)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21217

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

libncursesw6 CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libcurl4 CVE-2026-9547 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52

libdbus-1-3 CVE-2023-34969 低危 1.12.20-2ubuntu4.1 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-06-08 03:15 修改: 2026-06-17 06:04

libglib2.0-data CVE-2025-3360 低危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3360

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-04-07 13:15 修改: 2026-06-30 15:16

libglib2.0-data CVE-2025-7039 低危 2.72.4-0ubuntu2.3 2.72.4-0ubuntu2.7 glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7039

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-09-03 02:15 修改: 2026-06-17 10:04

libcairo-gobject2 CVE-2019-6461 低危 1.16.0-5ubuntu2 1.16.0-5ubuntu2.1 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6461

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2019-01-16 18:29 修改: 2026-06-17 02:39

libcairo-gobject2 CVE-2019-6462 低危 1.16.0-5ubuntu2 1.16.0-5ubuntu2.1 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6462

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2019-01-16 18:29 修改: 2026-06-17 02:39

libxml2 CVE-2024-34459 低危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.5 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-05-14 15:39 修改: 2026-06-17 07:33

openssl CVE-2024-13176 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.19 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01

openssl CVE-2024-2511 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

openssl CVE-2024-4603 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-05-16 16:15 修改: 2026-06-17 08:02

openssl CVE-2024-4741 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

openssl CVE-2024-5535 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16

openssl CVE-2024-9143 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.19 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24

openssl CVE-2025-68160 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

openssl CVE-2025-69418 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69419 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69420 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69421 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2026-22795 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl CVE-2026-22796 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl CVE-2026-28387 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-28388 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-28389 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-28390 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-31789 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-34180 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-42766 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-42767 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-42770 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-45446 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-7383 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-9076 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

passwd CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

passwd CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libxml2 CVE-2025-8732 低危 2.9.13+dfsg-1ubuntu0.4 2.9.13+dfsg-1ubuntu0.11 libxml2: libxml2: Uncontrolled Recursion Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8732

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-08-08 17:15 修改: 2026-07-01 15:25

libcairo2 CVE-2017-7475 低危 1.16.0-5ubuntu2 cairo: NULL pointer dereference with a crafted font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24

libzstd1 CVE-2022-4899 低危 1.4.8+dfsg-3build1 zstd: mysql: buffer overrun in util.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22

login CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

login CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libelf1 CVE-2025-1352 低危 0.186-1build1 elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38

ncurses-base CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

ncurses-base CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

ncurses-bin CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

ncurses-bin CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libnss-systemd CVE-2023-7008 低危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

libnss-systemd CVE-2026-40228 低危 249.11-0ubuntu3.12 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libelf1 CVE-2025-1376 低危 0.186-1build1 elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39

libcairo2 CVE-2017-9814 低危 1.16.0-5ubuntu2 1.16.0-5ubuntu2.1 cairo: Out-of-bounds read due to mishandling of unexpected malloc(0) call

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9814

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2017-07-17 13:18 修改: 2026-06-17 01:28

libcairo2 CVE-2018-18064 低危 1.16.0-5ubuntu2 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46

libcairo2 CVE-2019-6461 低危 1.16.0-5ubuntu2 1.16.0-5ubuntu2.1 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6461

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2019-01-16 18:29 修改: 2026-06-17 02:39

libcairo2 CVE-2019-6462 低危 1.16.0-5ubuntu2 1.16.0-5ubuntu2.1 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6462

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2019-01-16 18:29 修改: 2026-06-17 02:39

dpkg CVE-2025-6297 低危 1.21.1ubuntu2.3 1.21.1ubuntu2.6 It was discovered that dpkg-deb does not properly sanitize directory p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6297

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-07-01 17:15 修改: 2026-07-08 09:16

libavahi-client3 CVE-2024-52615 低危 0.8-5ubuntu5.2 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libavahi-client3 CVE-2024-52616 低危 0.8-5ubuntu5.2 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

gcc-12-base CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

gcc-12-base CVE-2023-4039 低危 12.3.0-1ubuntu1~22.04 12.3.0-1ubuntu1~22.04.2 gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17

curl CVE-2024-9681 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.19 curl: HSTS subdomain overwrites parent cache entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-11-06 08:15 修改: 2026-06-17 08:25

curl CVE-2025-0167 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.23 When asked to use a `.netrc` file for credentials **and** to follow HT ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0167

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:25

libgcc-s1 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libgcc-s1 CVE-2023-4039 低危 12.3.0-1ubuntu1~22.04 12.3.0-1ubuntu1~22.04.2 gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17

curl CVE-2025-14524 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.22 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36

libpam-systemd CVE-2023-7008 低危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

libpam-systemd CVE-2026-40228 低危 249.11-0ubuntu3.12 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libgnutls30 CVE-2025-9820 低危 3.7.3-4ubuntu1.5 3.7.3-4ubuntu1.8 gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9820

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-26 20:16 修改: 2026-08-21 18:16

libgcrypt20 CVE-2024-2236 低危 1.9.4-3ubuntu3 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24

libpcre2-8-0 CVE-2022-41409 低危 10.39-3ubuntu0.1 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03

curl CVE-2025-15079 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.22 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

libavahi-common-data CVE-2024-52615 低危 0.8-5ubuntu5.2 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libpython3.10-stdlib CVE-2024-4032 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.5 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00

libpython3.10-stdlib CVE-2024-7592 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20

libpython3.10-stdlib CVE-2025-1795 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.10 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-28 19:15 修改: 2026-07-31 14:16

libavahi-common-data CVE-2024-52616 低危 0.8-5ubuntu5.2 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

curl CVE-2025-15224 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.22 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37

curl CVE-2026-3784 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.23 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

libsndfile1 CVE-2021-4156 低危 1.0.31-2ubuntu0.1 1.0.31-2ubuntu0.2 libsndfile: heap out-of-bounds read in src/flac.c in flac_buffer_copy

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4156

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2022-03-23 20:15 修改: 2026-06-17 04:19

python3.10 CVE-2024-4032 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.5 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00

python3.10 CVE-2024-7592 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20

python3.10 CVE-2025-1795 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.10 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-28 19:15 修改: 2026-07-31 14:16

libsndfile1 CVE-2024-50612 低危 1.0.31-2ubuntu0.1 1.0.31-2ubuntu0.2 libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50612

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-27 22:15 修改: 2026-06-17 08:04

openjdk-8-jdk CVE-2024-21208 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: HTTP client improper handling of maxHeaderSize (8328286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21208

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21210 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Array indexing integer overflow (8328544)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21210

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jdk CVE-2024-21217 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Unbounded allocation leads to out-of-memory error (8331446)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21217

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

libsndfile1 CVE-2024-50613 低危 1.0.31-2ubuntu0.1 libsndfile: Reachable assertion in mpeg_l3_encoder_close

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50613

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-27 22:15 修改: 2026-06-17 08:04

curl CVE-2026-4873 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57

curl CVE-2026-5773 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59

curl CVE-2026-6276 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.24 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00

libgssapi-krb5-2 CVE-2024-26458 低危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libgssapi-krb5-2 CVE-2024-26461 低危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

curl CVE-2026-8286 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

libavahi-common3 CVE-2024-52615 低危 0.8-5ubuntu5.2 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libavahi-common3 CVE-2024-52616 低危 0.8-5ubuntu5.2 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libharfbuzz0b CVE-2023-25193 低危 2.7.4-1ubuntu3.1 2.7.4-1ubuntu3.2 harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25193

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-02-04 20:15 修改: 2026-06-17 05:40

libicu70 CVE-2025-5222 低危 70.1-2 icu: Stack buffer overflow in the SRBRoot::addTag function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-05-27 21:15 修改: 2026-08-19 18:16

curl CVE-2026-8458 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12

curl CVE-2026-8924 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06

curl CVE-2026-9547 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.25 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52

libgif7 CVE-2021-40633 低危 5.1.9-2build2 5.1.9-2ubuntu0.1 A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40633

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2022-06-14 11:15 修改: 2026-06-17 04:07

libssh-4 CVE-2025-8114 低危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.5 libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8114

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-07-24 15:15 修改: 2026-08-21 12:16

libssh-4 CVE-2025-8277 低危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.6 libssh: Memory Exhaustion via Repeated Key Exchange in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8277

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2025-09-09 12:15 修改: 2026-08-21 13:16

libssh-4 CVE-2026-0965 低危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.6 libssh: libssh: Denial of Service via improper configuration file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0965

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-26 21:17 修改: 2026-08-21 13:16

libssh-4 CVE-2026-0966 低危 0.9.6-2ubuntu0.22.04.3 0.9.6-2ubuntu0.22.04.6 libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0966

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2026-03-26 21:17 修改: 2026-08-21 12:16

libgif7 CVE-2022-28506 低危 5.1.9-2build2 5.1.9-2ubuntu0.1 giflib: buffer overflow in function DumpScreen2RGB()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28506

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2022-04-25 13:15 修改: 2026-06-17 04:38

dbus CVE-2023-34969 低危 1.12.20-2ubuntu4.1 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-06-08 03:15 修改: 2026-06-17 06:04

dbus-user-session CVE-2023-34969 低危 1.12.20-2ubuntu4.1 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-06-08 03:15 修改: 2026-06-17 06:04

curl CVE-2024-11053 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.20 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56

libk5crypto3 CVE-2024-26458 低危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libk5crypto3 CVE-2024-26461 低危 1.19.2-2ubuntu0.3 1.19.2-2ubuntu0.6 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17

libcairo-gobject2 CVE-2017-7475 低危 1.16.0-5ubuntu2 cairo: NULL pointer dereference with a crafted font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24

libcairo-gobject2 CVE-2017-9814 低危 1.16.0-5ubuntu2 1.16.0-5ubuntu2.1 cairo: Out-of-bounds read due to mishandling of unexpected malloc(0) call

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9814

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2017-07-17 13:18 修改: 2026-06-17 01:28

libssl3 CVE-2024-13176 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.19 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01

libssl3 CVE-2024-2511 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

libssl3 CVE-2024-4603 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-05-16 16:15 修改: 2026-06-17 08:02

libssl3 CVE-2024-4741 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

libssl3 CVE-2024-5535 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16

python3.10-minimal CVE-2024-4032 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.5 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00

python3.10-minimal CVE-2024-7592 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.6 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20

python3.10-minimal CVE-2025-1795 低危 3.10.12-1~22.04.3 3.10.12-1~22.04.10 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2025-02-28 19:15 修改: 2026-07-31 14:16

openjdk-8-jdk-headless CVE-2024-21208 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: HTTP client improper handling of maxHeaderSize (8328286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21208

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21210 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Array indexing integer overflow (8328544)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21210

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

openjdk-8-jdk-headless CVE-2024-21217 低危 8u402-ga-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04 JDK: Unbounded allocation leads to out-of-memory error (8331446)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21217

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08

libssl3 CVE-2024-9143 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.19 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24

libssl3 CVE-2025-68160 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

libssl3 CVE-2025-69418 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3 CVE-2025-69419 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

systemd CVE-2023-7008 低危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

systemd CVE-2026-40228 低危 249.11-0ubuntu3.12 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libssl3 CVE-2025-69420 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3 CVE-2025-69421 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3 CVE-2026-22795 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl3 CVE-2026-22796 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.21 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl3 CVE-2026-28387 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3 CVE-2026-28388 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

systemd-sysv CVE-2023-7008 低危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

systemd-sysv CVE-2026-40228 低危 249.11-0ubuntu3.12 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libssl3 CVE-2026-28389 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3 CVE-2026-28390 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3 CVE-2026-31789 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.23 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3 CVE-2026-34180 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3 CVE-2026-42766 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3 CVE-2026-42767 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

systemd-timesyncd CVE-2023-7008 低危 249.11-0ubuntu3.12 249.11-0ubuntu3.21 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51

systemd-timesyncd CVE-2026-40228 低危 249.11-0ubuntu3.12 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libssl3 CVE-2026-42770 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3 CVE-2026-45446 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3 CVE-2026-7383 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3 CVE-2026-9076 低危 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.25 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libstdc++6 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libstdc++6 CVE-2023-4039 低危 12.3.0-1ubuntu1~22.04 12.3.0-1ubuntu1~22.04.2 gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039

镜像层: sha256:629ca62fb7c791374ce57626d6b8b62c76378be091a0daf1a60d32700b49add7

发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17

libcairo-gobject2 CVE-2018-18064 低危 1.16.0-5ubuntu2 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:25cd27eef54a33120dfcf4321fa42a6f0777da6a37e298d612826907d3e40b2c

发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46

libcurl4 CVE-2024-11053 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.20 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56

libcurl4 CVE-2024-9681 低危 7.81.0-1ubuntu1.16 7.81.0-1ubuntu1.19 curl: HSTS subdomain overwrites parent cache entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681

镜像层: sha256:20e016a30512524d531ea3479d466bdeea82ecea8bbc42402c5b2a4ba6eee4e6

发布日期: 2024-11-06 08:15 修改: 2026-06-17 08:25

Java (jar)
低危漏洞:34 中危漏洞:231 高危漏洞:266 严重漏洞:92
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
cn.hutool:hutool-all CVE-2023-24162 严重 5.5.1 Dromara Hutool Deserialization of Untrusted Data vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24162

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-01-31 16:15 修改: 2026-06-17 05:38

cn.hutool:hutool-all CVE-2023-24163 严重 5.5.1 5.8.21 Dromara hutool vulnerable to SQL Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24163

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-01-31 16:15 修改: 2026-06-17 05:38

cn.hutool:hutool-all CVE-2023-24162 严重 5.5.2 Dromara Hutool Deserialization of Untrusted Data vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24162

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-01-31 16:15 修改: 2026-06-17 05:38

cn.hutool:hutool-all CVE-2023-24162 严重 5.5.2 Dromara Hutool Deserialization of Untrusted Data vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24162

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-01-31 16:15 修改: 2026-06-17 05:38

cn.hutool:hutool-all CVE-2023-24163 严重 5.5.2 5.8.21 Dromara hutool vulnerable to SQL Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24163

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-01-31 16:15 修改: 2026-06-17 05:38

cn.hutool:hutool-all CVE-2023-24163 严重 5.5.2 5.8.21 Dromara hutool vulnerable to SQL Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24163

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-01-31 16:15 修改: 2026-06-17 05:38

cn.hutool:hutool-core CVE-2023-42276 严重 5.5.1 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42276

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-42277 严重 5.5.1 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42277

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-42276 严重 5.5.2 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42276

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-42276 严重 5.5.2 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42276

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-42277 严重 5.5.2 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42277

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-42277 严重 5.5.2 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42277

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-42276 严重 5.7.15 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42276

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-42277 严重 5.7.15 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42277

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-http CVE-2022-22885 严重 5.5.1 5.7.19 Improper Certificate Validation in Hutool

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22885

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-02-16 22:15 修改: 2026-06-17 04:29

cn.hutool:hutool-http CVE-2022-22885 严重 5.5.2 5.7.19 Improper Certificate Validation in Hutool

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22885

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-02-16 22:15 修改: 2026-06-17 04:29

cn.hutool:hutool-http CVE-2022-22885 严重 5.5.2 5.7.19 Improper Certificate Validation in Hutool

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22885

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-02-16 22:15 修改: 2026-06-17 04:29

cn.hutool:hutool-json CVE-2023-42276 严重 5.5.1 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42276

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-json CVE-2023-42277 严重 5.5.1 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42277

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-json CVE-2023-42276 严重 5.5.2 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42276

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-json CVE-2023-42276 严重 5.5.2 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42276

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-json CVE-2023-42277 严重 5.5.2 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42277

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-json CVE-2023-42277 严重 5.5.2 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42277

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

com.alibaba:fastjson CVE-2026-16723 严重 1.2.83 fastjson has a remote code execution (RCE) vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16723

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-23 09:16 修改: 2026-07-23 15:01

com.alibaba:fastjson CVE-2026-16723 严重 1.2.83 fastjson has a remote code execution (RCE) vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16723

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-23 09:16 修改: 2026-07-23 15:01

com.alibaba:fastjson CVE-2026-16723 严重 1.2.83 fastjson has a remote code execution (RCE) vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16723

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-07-23 09:16 修改: 2026-07-23 15:01

com.fasterxml.jackson.core:jackson-databind CVE-2018-11307 严重 2.9.4 2.7.9.4, 2.8.11.2, 2.9.6 jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-07-09 16:15 修改: 2026-06-17 01:35

com.fasterxml.jackson.core:jackson-databind CVE-2018-14718 严重 2.9.4 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 jackson-databind: arbitrary code execution in slf4j-ext class

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41

com.fasterxml.jackson.core:jackson-databind CVE-2018-14719 严重 2.9.4 2.9.7, 2.8.11.3, 2.7.9.5 jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41

com.fasterxml.jackson.core:jackson-databind CVE-2018-14720 严重 2.9.4 2.9.7, 2.8.11.3, 2.7.9.5 jackson-databind: exfiltration/XXE in some JDK classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41

com.fasterxml.jackson.core:jackson-databind CVE-2018-14721 严重 2.9.4 2.9.7, 2.8.11.3, 2.7.9.5 jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41

com.fasterxml.jackson.core:jackson-databind CVE-2018-19360 严重 2.9.4 2.9.8, 2.8.11.3, 2.7.9.5 jackson-databind: improper polymorphic deserialization in axis2-transport-jms class

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:49

com.fasterxml.jackson.core:jackson-databind CVE-2018-19361 严重 2.9.4 2.7.9.5, 2.9.8, 2.8.11.3 jackson-databind: improper polymorphic deserialization in openjpa class

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:49

com.fasterxml.jackson.core:jackson-databind CVE-2018-19362 严重 2.9.4 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 jackson-databind: improper polymorphic deserialization in jboss-common-core class

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:49

com.fasterxml.jackson.core:jackson-databind CVE-2018-7489 严重 2.9.4 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7489

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2018-02-26 15:29 修改: 2026-06-17 02:03

com.fasterxml.jackson.core:jackson-databind CVE-2019-14379 严重 2.9.4 2.9.9.2, 2.8.11.4, 2.7.9.6 jackson-databind: default typing mishandling leading to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-07-29 12:15 修改: 2026-06-17 02:18

com.fasterxml.jackson.core:jackson-databind CVE-2019-14540 严重 2.9.4 2.9.10, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:18

com.fasterxml.jackson.core:jackson-databind CVE-2019-16335 严重 2.9.4 2.9.10, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:22

com.fasterxml.jackson.core:jackson-databind CVE-2019-16942 严重 2.9.4 2.9.10.1, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23

com.fasterxml.jackson.core:jackson-databind CVE-2019-16943 严重 2.9.4 2.9.10.1, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23

com.fasterxml.jackson.core:jackson-databind CVE-2019-17267 严重 2.9.4 2.9.10, 2.8.11.5 jackson-databind: Serialization gadgets in classes of the ehcache package

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-10-07 00:15 修改: 2026-06-17 02:23

com.fasterxml.jackson.core:jackson-databind CVE-2019-17531 严重 2.9.4 2.9.10.1, 2.8.11.5, 2.6.7.3 jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-10-12 21:15 修改: 2026-06-17 02:24

com.fasterxml.jackson.core:jackson-databind CVE-2019-20330 严重 2.9.4 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 jackson-databind: lacks certain net.sf.ehcache blocking

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-01-03 04:15 修改: 2026-06-17 02:30

com.fasterxml.jackson.core:jackson-databind CVE-2020-8840 严重 2.9.4 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 jackson-databind: Lacks certain xbean-reflect/JNDI blocking

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-02-10 21:56 修改: 2026-06-17 03:27

com.fasterxml.jackson.core:jackson-databind CVE-2020-9546 严重 2.9.4 2.9.10.4 jackson-databind: Serialization gadgets in shaded-hikari-config

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28

com.fasterxml.jackson.core:jackson-databind CVE-2020-9547 严重 2.9.4 2.9.10.4, 2.8.11.6, 2.7.9.7 jackson-databind: Serialization gadgets in ibatis-sqlmap

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28

com.fasterxml.jackson.core:jackson-databind CVE-2020-9548 严重 2.9.4 2.9.10.4, 2.8.11.6, 2.7.9.7 jackson-databind: Serialization gadgets in anteros-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28

dom4j:dom4j CVE-2020-10683 严重 1.6.1 dom4j: XML External Entity vulnerability in default SAX parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10683

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-05-01 19:15 修改: 2026-06-17 02:48

org.apache.avro:avro CVE-2024-47561 严重 1.9.0 1.11.4 apache-avro: Schema parsing may trigger Remote Code Execution (RCE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-10-03 11:15 修改: 2026-06-17 07:57

org.apache.avro:avro CVE-2024-47561 严重 1.9.0 1.11.4 apache-avro: Schema parsing may trigger Remote Code Execution (RCE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2024-10-03 11:15 修改: 2026-06-17 07:57

org.apache.commons:commons-text CVE-2022-42889 严重 1.9 1.10.0 apache-commons-text: variable interpolation RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42889

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-10-13 13:15 修改: 2026-06-17 05:05

org.apache.commons:commons-text CVE-2022-42889 严重 1.9 1.10.0 apache-commons-text: variable interpolation RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42889

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-10-13 13:15 修改: 2026-06-17 05:05

org.apache.tomcat.embed:tomcat-embed-core CVE-2018-8014 严重 8.5.28 9.0.9, 8.5.32, 8.0.53, 7.0.88 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8014

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-05-16 16:29 修改: 2026-06-17 02:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-1938 严重 8.5.28 9.0.31, 8.5.51, 7.0.100 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1938

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-02-24 22:15 修改: 2026-06-17 03:02

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-24813 严重 8.5.28 11.0.3, 10.1.35, 9.0.99 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41293 严重 8.5.28 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43512 严重 8.5.28 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43515 严重 8.5.28 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-24813 严重 9.0.48 11.0.3, 10.1.35, 9.0.99 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41293 严重 9.0.48 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43512 严重 9.0.48 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43515 严重 9.0.48 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.zookeeper:zookeeper CVE-2023-44981 严重 3.4.14 3.7.2, 3.8.3, 3.9.1 zookeeper: Authorization Bypass in Apache ZooKeeper

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-11 12:15 修改: 2026-06-17 06:28

org.quartz-scheduler:quartz CVE-2019-13990 严重 2.2.1 2.3.2 libquartz: XXE attacks via job description

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13990

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-07-26 19:15 修改: 2026-06-17 02:17

org.quartz-scheduler:quartz CVE-2019-13990 严重 2.2.1 2.3.2 libquartz: XXE attacks via job description

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13990

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-07-26 19:15 修改: 2026-06-17 02:17

org.springframework.boot:spring-boot-actuator-autoconfigure CVE-2023-20873 严重 2.5.2 3.0.6, 2.7.11, 2.6.15, 2.5.15 spring-boot: Security Bypass With Wildcard Pattern Matching on Cloud Foundry

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20873

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-04-20 21:15 修改: 2026-06-17 05:31

org.springframework.boot:spring-boot-starter-web CVE-2022-22965 严重 2.0.0.RELEASE 2.5.12, 2.6.6 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework.data:spring-data-commons CVE-2018-1273 严重 2.0.5.RELEASE 1.13.11, 2.0.6 spring-data-commons: Improper neutralization of special elements allow remote attackers to execute code via crafted requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1273

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-04-11 13:29 修改: 2026-06-26 18:44

org.springframework.data:spring-data-commons CVE-2018-1273 严重 2.0.5.RELEASE 1.13.11, 2.0.6 spring-data-commons: Improper neutralization of special elements allow remote attackers to execute code via crafted requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1273

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2018-04-11 13:29 修改: 2026-06-26 18:44

org.springframework.data:spring-data-mongodb CVE-2022-22980 严重 2.0.5.RELEASE 3.4.1, 3.3.5 MongoDB: SpEL in query methods allow code injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22980

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-06-23 17:15 修改: 2026-06-17 04:29

org.springframework.data:spring-data-mongodb CVE-2022-22980 严重 2.0.5.RELEASE 3.4.1, 3.3.5 MongoDB: SpEL in query methods allow code injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22980

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-06-23 17:15 修改: 2026-06-17 04:29

org.springframework.data:spring-data-mongodb CVE-2022-22980 严重 3.2.2 3.4.1, 3.3.5 MongoDB: SpEL in query methods allow code injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22980

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-06-23 17:15 修改: 2026-06-17 04:29

org.springframework.security:spring-security-core CVE-2022-22978 严重 5.5.1 5.5.7, 5.6.4, 5.4.11 springframework: Authorization Bypass in RegexRequestMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22978

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-05-19 15:15 修改: 2026-06-17 04:29

org.springframework.security:spring-security-web CVE-2022-22978 严重 5.5.1 5.5.7, 5.6.4, 5.4.11 springframework: Authorization Bypass in RegexRequestMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22978

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-05-19 15:15 修改: 2026-06-17 04:29

org.springframework.security:spring-security-web CVE-2024-38821 严重 5.5.1 5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4 Spring-WebFlux: Authorization Bypass of Static Resources in WebFlux Applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38821

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-10-28 07:15 修改: 2026-06-17 07:41

org.springframework.security:spring-security-web CVE-2026-22732 严重 5.5.1 6.5.9, 7.0.4 Spring Security: Spring Security: Security policy bypass and information disclosure due to unwritten HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22732

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-03-19 23:16 修改: 2026-06-17 10:20

org.springframework:spring-beans CVE-2022-22965 严重 5.0.4.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-beans CVE-2022-22965 严重 5.3.8 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-messaging CVE-2018-1270 严重 5.0.4.RELEASE 5.0.5.RELEASE, 4.3.16.RELEASE spring-framework: Possible RCE via spring messaging

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1270

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-04-06 13:29 修改: 2026-06-17 01:50

org.springframework:spring-messaging CVE-2018-1275 严重 5.0.4.RELEASE 4.3.16.RELEASE, 5.0.5.RELEASE spring-framework: Address partial fix for CVE-2018-1270

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1275

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-04-11 13:29 修改: 2026-06-17 01:50

org.springframework:spring-web CVE-2016-1000027 严重 5.0.4.RELEASE 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42

org.springframework:spring-web CVE-2016-1000027 严重 5.3.8 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42

org.springframework:spring-webmvc CVE-2022-22965 严重 5.0.4.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-webmvc CVE-2022-22965 严重 5.3.8 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-webmvc CVE-2023-20860 严重 5.3.8 6.0.7, 5.3.26 springframework: Security Bypass With Un-Prefixed Double Wildcard Pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20860

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-03-27 22:15 修改: 2026-06-17 05:31

org.thymeleaf:thymeleaf CVE-2026-40477 严重 3.0.12.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via security bypass in expression execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40477

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-17 22:16 修改: 2026-08-04 13:18

org.thymeleaf:thymeleaf CVE-2026-40478 严重 3.0.12.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40478

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-17 22:16 修改: 2026-08-18 12:18

org.thymeleaf:thymeleaf CVE-2026-41901 严重 3.0.12.RELEASE 3.1.5.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection (SSTI) via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41901

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 23:16 修改: 2026-06-17 10:47

org.thymeleaf:thymeleaf-spring5 CVE-2021-43466 严重 3.0.12.RELEASE 3.0.13.RELEASE Template injection in thymeleaf-spring5

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43466

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-11-09 12:15 修改: 2026-06-17 04:11

org.thymeleaf:thymeleaf-spring5 CVE-2026-40477 严重 3.0.12.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via security bypass in expression execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40477

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-17 22:16 修改: 2026-08-04 13:18

org.thymeleaf:thymeleaf-spring5 CVE-2026-40478 严重 3.0.12.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40478

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-17 22:16 修改: 2026-08-18 12:18

org.thymeleaf:thymeleaf-spring5 CVE-2026-41901 严重 3.0.12.RELEASE 3.1.5.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection (SSTI) via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41901

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 23:16 修改: 2026-06-17 10:47

cn.hutool:hutool-core CVE-2023-33695 高危 5.5.1 5.8.19 Insecure Temporary File in HuTool

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33695

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-06-13 16:15 修改: 2026-06-17 06:02

cn.hutool:hutool-core CVE-2023-42278 高危 5.5.1 5.8.22 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42278

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-51075 高危 5.5.1 5.8.24 hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51075

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-12-27 21:15 修改: 2026-06-17 06:40

ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

cn.hutool:hutool-json CVE-2022-45688 高危 5.5.1 5.8.25 json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

com.fasterxml.jackson.core:jackson-databind CVE-2018-12022 高危 2.9.4 2.7.9.4, 2.8.11.2, 2.9.6 jackson-databind: improper polymorphic deserialization of types from Jodd-db library

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-03-21 16:00 修改: 2026-06-17 01:37

com.fasterxml.jackson.core:jackson-databind CVE-2018-12023 高危 2.9.4 2.7.9.4, 2.8.11.2, 2.9.6 jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12023

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-03-21 16:00 修改: 2026-06-17 01:37

com.fasterxml.jackson.core:jackson-databind CVE-2019-12086 高危 2.9.4 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-05-17 17:29 修改: 2026-06-17 02:14

com.fasterxml.jackson.core:jackson-databind CVE-2019-14439 高危 2.9.4 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: Polymorphic typing issue related to logback/JNDI

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-07-30 11:15 修改: 2026-06-17 02:18

com.fasterxml.jackson.core:jackson-databind CVE-2019-14892 高危 2.9.4 2.6.7.3, 2.8.11.5, 2.9.10 jackson-databind: Serialization gadgets in classes of the commons-configuration package

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-02 17:15 修改: 2026-06-17 02:19

com.fasterxml.jackson.core:jackson-databind CVE-2019-14893 高危 2.9.4 2.9.10 jackson-databind: Serialization gadgets in classes of the xalan package

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-02 21:15 修改: 2026-06-17 02:19

com.fasterxml.jackson.core:jackson-databind CVE-2020-10650 高危 2.9.4 2.9.10.4 A deserialization flaw was discovered in jackson-databind through 2.9. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-12-26 20:15 修改: 2026-06-17 02:48

com.fasterxml.jackson.core:jackson-databind CVE-2020-10672 高危 2.9.4 2.9.10.4 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-18 22:15 修改: 2026-06-17 02:48

com.fasterxml.jackson.core:jackson-databind CVE-2020-10673 高危 2.9.4 2.9.10.4, 2.6.7.4 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-18 22:15 修改: 2026-06-17 02:48

com.fasterxml.jackson.core:jackson-databind CVE-2020-10968 高危 2.9.4 2.9.10.4 jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-26 13:15 修改: 2026-06-17 02:48

com.fasterxml.jackson.core:jackson-databind CVE-2020-10969 高危 2.9.4 2.9.10.4 jackson-databind: Serialization gadgets in javax.swing.JEditorPane

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-26 13:15 修改: 2026-06-17 02:48

com.fasterxml.jackson.core:jackson-databind CVE-2020-11111 高危 2.9.4 2.9.10.4 jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-31 05:15 修改: 2026-06-17 02:49

com.fasterxml.jackson.core:jackson-databind CVE-2020-11112 高危 2.9.4 2.9.10.4 jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-31 05:15 修改: 2026-06-17 02:49

com.fasterxml.jackson.core:jackson-databind CVE-2020-11113 高危 2.9.4 2.9.10.4 jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-03-31 05:15 修改: 2026-06-17 02:49

com.fasterxml.jackson.core:jackson-databind CVE-2020-11619 高危 2.9.4 2.9.10.4 jackson-databind: Serialization gadgets in org.springframework:spring-aop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-04-07 23:15 修改: 2026-06-17 02:50

com.fasterxml.jackson.core:jackson-databind CVE-2020-11620 高危 2.9.4 2.9.10.4 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-04-07 23:15 修改: 2026-06-17 02:50

com.fasterxml.jackson.core:jackson-databind CVE-2020-14060 高危 2.9.4 2.9.10.5 jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-06-14 21:15 修改: 2026-06-17 02:54

com.fasterxml.jackson.core:jackson-databind CVE-2020-14061 高危 2.9.4 2.9.10.5 jackson-databind: serialization in weblogic/oracle-aqjms

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-06-14 20:15 修改: 2026-06-17 02:54

com.fasterxml.jackson.core:jackson-databind CVE-2020-14062 高危 2.9.4 2.9.10.5 jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-06-14 20:15 修改: 2026-06-17 02:54

com.fasterxml.jackson.core:jackson-databind CVE-2020-14195 高危 2.9.4 2.9.10.5 jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-06-16 16:15 修改: 2026-06-17 02:54

com.fasterxml.jackson.core:jackson-databind CVE-2020-24616 高危 2.9.4 2.9.10.6 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-08-25 18:15 修改: 2026-06-17 03:05

com.fasterxml.jackson.core:jackson-databind CVE-2020-24750 高危 2.9.4 2.6.7.5, 2.9.10.6 jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-09-17 19:15 修改: 2026-06-17 03:06

com.fasterxml.jackson.core:jackson-databind CVE-2020-25649 高危 2.9.4 2.6.7.4, 2.9.10.7, 2.10.5.1 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-12-03 17:15 修改: 2026-06-17 03:07

com.fasterxml.jackson.core:jackson-databind CVE-2020-35490 高危 2.9.4 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-12-17 19:15 修改: 2026-06-17 03:13

com.fasterxml.jackson.core:jackson-databind CVE-2020-35491 高危 2.9.4 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-12-17 19:15 修改: 2026-06-17 03:13

com.fasterxml.jackson.core:jackson-databind CVE-2020-35728 高危 2.9.4 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-12-27 05:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36179 高危 2.9.4 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36180 高危 2.9.4 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36181 高危 2.9.4 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36182 高危 2.9.4 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36183 高危 2.9.4 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-07 00:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36184 高危 2.9.4 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36185 高危 2.9.4 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36186 高危 2.9.4 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36187 高危 2.9.4 2.9.10.8 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36188 高危 2.9.4 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36189 高危 2.9.4 2.9.10.8, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-06 23:15 修改: 2026-06-17 03:14

com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.9.4 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15

com.fasterxml.jackson.core:jackson-databind CVE-2021-20190 高危 2.9.4 2.9.10.7, 2.6.7.5 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-01-19 17:15 修改: 2026-07-24 14:27

com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.9.4 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.9.4 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.google.code.gson:gson CVE-2022-25647 高危 2.8.6 2.8.9 com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33

com.google.code.gson:gson CVE-2022-25647 高危 2.8.6 2.8.9 com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33

com.google.protobuf:protobuf-java CVE-2021-22569 高危 2.6.1 3.16.1, 3.18.2, 3.19.2 protobuf-java: potential DoS in the parsing procedure for binary data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37

com.google.protobuf:protobuf-java CVE-2024-7254 高危 2.6.1 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19

com.google.protobuf:protobuf-java CVE-2021-22569 高危 3.19.1 3.16.1, 3.18.2, 3.19.2 protobuf-java: potential DoS in the parsing procedure for binary data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37

com.google.protobuf:protobuf-java CVE-2022-3509 高危 3.19.1 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Textformat parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

com.google.protobuf:protobuf-java CVE-2022-3510 高危 3.19.1 3.16.3, 3.19.6, 3.20.3, 3.21.7 protobuf-java: Message-Type Extensions parsing issue leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59

com.google.protobuf:protobuf-java CVE-2024-7254 高危 3.19.1 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19

com.google.protobuf:protobuf-java CVE-2024-7254 高危 3.23.2 3.25.5, 4.27.5, 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19

com.hazelcast:hazelcast CVE-2023-33265 高危 5.2.1 5.2.4, 5.1.7, 5.0.5 Hazelcast Executor Services don't check client permissions properly

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33265

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-07-18 16:15 修改: 2026-06-17 06:01

com.hazelcast:hazelcast CVE-2023-33265 高危 5.2.1 5.2.4, 5.1.7, 5.0.5 Hazelcast Executor Services don't check client permissions properly

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33265

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-07-18 16:15 修改: 2026-06-17 06:01

com.hazelcast:hazelcast CVE-2023-45859 高危 5.2.1 5.2.5, 5.3.5 Missing permission checks on Hazelcast client protocol

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45859

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-28 22:15 修改: 2026-06-17 06:29

com.hazelcast:hazelcast CVE-2023-45859 高危 5.2.1 5.2.5, 5.3.5 Missing permission checks on Hazelcast client protocol

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45859

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2024-02-28 22:15 修改: 2026-06-17 06:29

com.hazelcast:hazelcast CVE-2023-45860 高危 5.2.1 5.3.5, 5.2.5 Hazelcast: Permission checking in CSV File Source connector

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45860

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-16 10:15 修改: 2026-06-17 06:29

com.hazelcast:hazelcast CVE-2023-45860 高危 5.2.1 5.3.5, 5.2.5 Hazelcast: Permission checking in CSV File Source connector

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45860

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2024-02-16 10:15 修改: 2026-06-17 06:29

com.mchange:mchange-commons-java CVE-2026-27727 高危 0.2.15 0.4.0 com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27727

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-02-25 17:25 修改: 2026-08-17 12:17

com.mchange:mchange-commons-java CVE-2026-55153 高危 0.2.15 0.6.0 com.mchange/mchange-commons-java: mchange-commons-java: Remote code execution via JNDI injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55153

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-01 21:17 修改: 2026-07-06 15:16

com.nimbusds:nimbus-jose-jwt CVE-2023-52428 高危 9.10 9.37.2 nimbus-jose-jwt: large JWE p2c header value causes Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42

com.squareup.okhttp3:okhttp CVE-2021-0341 高危 3.10.0 4.9.2 okhttp: information disclosure via improperly used cryptographic function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-0341

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-02-10 17:15 修改: 2026-06-17 03:29

com.squareup.okhttp3:okhttp CVE-2021-0341 高危 4.8.0 4.9.2 okhttp: information disclosure via improperly used cryptographic function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-0341

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-02-10 17:15 修改: 2026-06-17 03:29

com.squareup.okhttp3:okhttp CVE-2021-0341 高危 4.9.1 4.9.2 okhttp: information disclosure via improperly used cryptographic function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-0341

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-02-10 17:15 修改: 2026-06-17 03:29

commons-fileupload:commons-fileupload CVE-2023-24998 高危 1.4 1.5 FileUpload: FileUpload DoS with excessive parts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40

commons-fileupload:commons-fileupload CVE-2025-48976 高危 1.4 1.6.0 apache-commons-fileupload: Apache Commons FileUpload DoS via part headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48976

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

commons-io:commons-io CVE-2024-47554 高危 2.11.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57

commons-io:commons-io CVE-2024-47554 高危 2.11.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57

commons-io:commons-io CVE-2024-47554 高危 2.8.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57

cn.hutool:hutool-json CVE-2023-42278 高危 5.5.1 5.8.22 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42278

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

dom4j:dom4j CVE-2018-1000632 高危 1.6.1 dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000632

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-08-20 19:31 修改: 2026-06-17 01:32

io.micrometer:micrometer-core CVE-2026-40984 高危 1.7.1 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-08-13 13:18

io.netty:netty-all CVE-2019-16869 高危 4.1.22.Final 4.1.42.Final netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16869

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-09-26 16:15 修改: 2026-06-17 02:22

io.netty:netty-codec CVE-2021-37136 高危 4.1.65.Final 4.1.68.Final netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00

io.netty:netty-codec CVE-2021-37137 高危 4.1.65.Final 4.1.68.Final netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00

io.netty:netty-codec CVE-2026-42583 高危 4.1.65.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec CVE-2026-59901 高危 4.1.65.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29

io.netty:netty-codec-http CVE-2026-33870 高危 4.1.65.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18

io.netty:netty-codec-http CVE-2026-42584 高危 4.1.65.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-13 19:17 修改: 2026-08-21 13:17

io.netty:netty-codec-http CVE-2026-42587 高危 4.1.65.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18

io.netty:netty-codec-http CVE-2026-55831 高危 4.1.65.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17

io.netty:netty-codec-http CVE-2026-55833 高危 4.1.65.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34

io.netty:netty-codec-http CVE-2026-56745 高危 4.1.65.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46

io.netty:netty-handler CVE-2026-44249 高危 4.1.65.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-11 22:16 修改: 2026-08-24 13:18

io.netty:netty-handler CVE-2026-45416 高危 4.1.65.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-12 15:16 修改: 2026-08-24 13:18

io.netty:netty-handler CVE-2026-50010 高危 4.1.65.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-12 16:16 修改: 2026-08-24 13:19

net.jpountz.lz4:lz4 CVE-2025-12183 高危 1.3.0 lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31

net.jpountz.lz4:lz4 CVE-2025-66566 高危 1.3.0 lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57

net.minidev:json-smart CVE-2023-1370 高危 2.4.7 2.4.9 json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27

ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

org.apache.avro:avro CVE-2023-39410 高危 1.9.0 1.11.3 apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-29 17:15 修改: 2026-06-17 06:12

org.apache.avro:avro CVE-2023-39410 高危 1.9.0 1.11.3 apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-09-29 17:15 修改: 2026-06-17 06:12

org.apache.commons:commons-compress CVE-2021-35515 高危 1.20 1.21 apache-commons-compress: infinite loop when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57

org.apache.commons:commons-compress CVE-2021-35516 高危 1.20 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57

org.apache.commons:commons-compress CVE-2021-35517 高危 1.20 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57

org.apache.commons:commons-compress CVE-2021-36090 高危 1.20 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:58

org.apache.commons:commons-compress CVE-2021-35515 高危 1.8.1 1.21 apache-commons-compress: infinite loop when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57

org.apache.commons:commons-compress CVE-2021-35516 高危 1.8.1 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57

org.apache.commons:commons-compress CVE-2021-35517 高危 1.8.1 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57

org.apache.commons:commons-compress CVE-2021-36090 高危 1.8.1 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:58

cn.hutool:hutool-core CVE-2022-4565 高危 5.5.2 5.8.11 HuTool vulnerable to Uncontrolled Resource Consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4565

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-16 19:15 修改: 2026-06-17 05:21

cn.hutool:hutool-core CVE-2022-4565 高危 5.5.2 5.8.11 HuTool vulnerable to Uncontrolled Resource Consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4565

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-16 19:15 修改: 2026-06-17 05:21

org.apache.kafka:kafka_2.12 CVE-2025-27818 高危 2.3.1 3.9.1 apache-kafka: Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27818

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-10 08:15 修改: 2026-06-17 09:04

org.apache.kafka:kafka_2.12 CVE-2025-27819 高危 2.3.1 3.4.0 org.apache.kafka: Kafka JNDI Login Module RCE Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27819

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-10 08:15 修改: 2026-06-17 09:04

cn.hutool:hutool-json CVE-2022-45688 高危 5.5.2 5.8.25 json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

cn.hutool:hutool-json CVE-2022-45688 高危 5.5.2 5.8.25 json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

cn.hutool:hutool-json CVE-2023-42278 高危 5.5.2 5.8.22 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42278

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-json CVE-2023-42278 高危 5.5.2 5.8.22 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42278

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-3276 高危 5.5.2 HuTool XML parsing module has blind XXE vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3276

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-15 13:15 修改: 2026-06-17 06:13

cn.hutool:hutool-core CVE-2023-3276 高危 5.5.2 HuTool XML parsing module has blind XXE vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3276

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-15 13:15 修改: 2026-06-17 06:13

org.apache.tomcat.embed:tomcat-embed-core CVE-2018-1336 高危 8.5.28 9.0.8, 8.5.31, 8.0.51, 7.0.87 tomcat: A bug in the UTF-8 decoder can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1336

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-08-02 14:29 修改: 2026-06-17 01:51

org.apache.tomcat.embed:tomcat-embed-core CVE-2018-8034 高危 8.5.28 9.0.10, 8.5.32, 8.0.53, 7.0.90 tomcat: Host name verification missing in WebSocket client

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8034

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-08-01 18:29 修改: 2026-06-17 02:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2019-0199 高危 8.5.28 9.0.16, 8.5.38 tomcat: Apache Tomcat HTTP/2 DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0199

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-04-10 15:29 修改: 2026-06-17 02:07

org.apache.tomcat.embed:tomcat-embed-core CVE-2019-0232 高危 8.5.28 9.0.17, 8.5.40, 7.0.94 tomcat: Remote Code Execution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0232

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-04-15 15:29 修改: 2026-06-17 02:08

org.apache.tomcat.embed:tomcat-embed-core CVE-2019-10072 高危 8.5.28 9.0.20, 8.5.41 tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10072

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-06-21 18:15 修改: 2026-06-17 02:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2019-12418 高危 8.5.28 7.0.99, 8.5.49, 9.0.29 tomcat: local privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12418

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-12-23 18:15 修改: 2026-06-17 02:14

org.apache.tomcat.embed:tomcat-embed-core CVE-2019-17563 高危 8.5.28 7.0.99, 8.5.50, 9.0.30 tomcat: Session fixation when using FORM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17563

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-12-23 17:15 修改: 2026-06-17 02:24

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-11996 高危 8.5.28 10.0.0-M5, 9.0.35, 8.5.55 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11996

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-06-26 17:15 修改: 2026-06-17 02:51

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-9484 高危 8.5.28 10.0.0-M5, 9.0.35, 8.5.55, 7.0.104 tomcat: deserialization flaw in session persistence storage leading to RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9484

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-05-20 19:15 修改: 2026-06-17 03:28

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-25122 高危 8.5.28 10.0.2, 9.0.43, 8.5.63 tomcat: Request mix-up with h2c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25122

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-25329 高危 8.5.28 10.0.2, 9.0.41, 8.5.61, 7.0.108 tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25329

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2022-42252 高危 8.5.28 8.5.83, 9.0.68, 10.0.27, 10.1.1 tomcat: request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-11-01 09:15 修改: 2026-06-17 05:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-46589 高危 8.5.28 11.0.0-M11, 10.1.16, 9.0.83, 8.5.96 tomcat: HTTP request smuggling via malformed trailer headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-34750 高危 8.5.28 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Improper Handling of Exceptional Conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-50379 高危 8.5.28 11.0.2, 10.1.34, 9.0.98 tomcat: RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48988 高危 8.5.28 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat DoS in multipart upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52520 高危 8.5.28 11.0.9, 10.1.43, 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-53506 高危 8.5.28 9.0.107, 10.1.43, 11.0.9 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55752 高危 8.5.28 11.0.11, 10.1.45, 9.0.109 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-24880 高危 8.5.28 9.0.116, 10.1.52, 11.0.20 Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41284 高危 8.5.28 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-42498 高危 8.5.28 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43513 高危 8.5.28 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

cn.hutool:hutool-core CVE-2023-33695 高危 5.5.2 5.8.19 Insecure Temporary File in HuTool

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33695

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-13 16:15 修改: 2026-06-17 06:02

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.12.3 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.12.3 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.12.6 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

org.apache.tomcat.embed:tomcat-embed-core CVE-2022-42252 高危 9.0.48 8.5.83, 9.0.68, 10.0.27, 10.1.1 tomcat: request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-11-01 09:15 修改: 2026-06-17 05:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2022-45143 高危 9.0.48 8.5.84, 9.0.69, 10.1.2 tomcat: JsonErrorReportValve injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45143

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-01-03 19:15 修改: 2026-06-17 05:09

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-24998 高危 9.0.48 10.1.5, 11.0.0-M5, 8.5.88, 9.0.71 FileUpload: FileUpload DoS with excessive parts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-46589 高危 9.0.48 11.0.0-M11, 10.1.16, 9.0.83, 8.5.96 tomcat: HTTP request smuggling via malformed trailer headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-34750 高危 9.0.48 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Improper Handling of Exceptional Conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-38286 高危 9.0.48 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Denial of Service in Tomcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38286

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-11-07 08:15 修改: 2026-06-17 07:39

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-50379 高危 9.0.48 11.0.2, 10.1.34, 9.0.98 tomcat: RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-56337 高危 9.0.48 11.0.2, 10.1.34, 9.0.98 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-12-20 16:15 修改: 2026-06-17 08:12

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48988 高危 9.0.48 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat DoS in multipart upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48989 高危 9.0.48 11.0.10, 10.1.44, 9.0.108 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52520 高危 9.0.48 11.0.9, 10.1.43, 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-53506 高危 9.0.48 9.0.107, 10.1.43, 11.0.9 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55752 高危 9.0.48 11.0.11, 10.1.45, 9.0.109 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-24880 高危 9.0.48 9.0.116, 10.1.52, 11.0.20 Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-34483 高危 9.0.48 9.0.116, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34483

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-34487 高危 9.0.48 9.0.117, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34487

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41284 高危 9.0.48 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-42498 高危 9.0.48 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43513 高危 9.0.48 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.tomcat.embed:tomcat-embed-websocket CVE-2020-13935 高危 8.5.28 7.0.105, 8.5.57, 9.0.37, 10.0.0-M7 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13935

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-07-14 15:15 修改: 2026-06-17 02:53

org.apache.xmlgraphics:batik-bridge CVE-2022-42890 高危 1.14 1.16 batik: Untrusted code execution in Apache XML Graphics Batik

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42890

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-10-25 17:15 修改: 2026-06-17 05:05

org.apache.xmlgraphics:batik-bridge CVE-2022-44729 高危 1.14 1.17 batik: Server-Side Request Forgery vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44729

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:08

org.apache.xmlgraphics:batik-transcoder CVE-2022-44729 高危 1.14 1.17 batik: Server-Side Request Forgery vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44729

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:08

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.12.6 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30

org.bitbucket.b_c:jose4j CVE-2023-31582 高危 0.7.2 0.9.3 jose4j: Insecure iteration count setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31582

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-25 18:17 修改: 2026-06-17 05:57

org.bitbucket.b_c:jose4j CVE-2024-29371 高危 0.7.2 0.9.6 jose4j: jose4j: Denial of Service via malicious JSON Web Encryption (JWE) token compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29371

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-12-17 16:16 修改: 2026-06-17 07:22

org.bouncycastle:bcprov-jdk15on CVE-2020-28052 高危 1.66 1.67 bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28052

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-12-18 01:15 修改: 2026-06-17 03:10

org.codehaus.plexus:plexus-utils CVE-2025-67030 高危 3.3.0 4.0.3, 3.6.1 org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67030

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-03-25 18:16 修改: 2026-08-24 13:17

org.elasticsearch:elasticsearch CVE-2023-31418 高危 7.12.1 7.17.13, 8.9.0 elasticsearch: uncontrolled resource consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31418

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-26 18:15 修改: 2026-06-17 05:56

org.hibernate:hibernate-validator CVE-2017-7536 高危 5.2.4.Final 5.2.5.Final, 5.3.6.Final, 5.4.2.Final hibernate-validator: Privilege escalation when running under the security manager

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7536

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-01-10 15:29 修改: 2026-06-17 01:24

org.json:json CVE-2022-45688 高危 20180813 20230227 json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

org.json:json CVE-2022-45688 高危 20180813 20230227 json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

org.json:json CVE-2023-5072 高危 20180813 20231013 JSON-java: parser confusion leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5072

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-12 17:15 修改: 2026-06-17 06:47

org.json:json CVE-2023-5072 高危 20180813 20231013 JSON-java: parser confusion leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5072

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-10-12 17:15 修改: 2026-06-17 06:47

org.json:json CVE-2022-45688 高危 20220320 20230227 json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

org.json:json CVE-2023-5072 高危 20220320 20231013 JSON-java: parser confusion leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5072

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-12 17:15 修改: 2026-06-17 06:47

org.jsoup:jsoup CVE-2021-37714 高危 1.10.3 1.14.2 jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37714

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-08-18 15:15 修改: 2026-06-17 04:01

org.lz4:lz4-java CVE-2025-12183 高危 1.6.0 1.8.1 lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31

org.lz4:lz4-java CVE-2025-66566 高危 1.6.0 lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.13.4 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.13.4 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30

org.springframework.boot:spring-boot CVE-2022-27772 高危 2.0.0.RELEASE 2.2.11.RELEASE Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27772

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-03-30 18:15 修改: 2026-06-17 04:37

org.springframework.boot:spring-boot CVE-2025-22235 高危 2.0.0.RELEASE 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45

org.springframework.boot:spring-boot CVE-2026-40973 高危 2.0.0.RELEASE 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10

org.springframework.boot:spring-boot CVE-2025-22235 高危 2.5.2 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45

org.springframework.boot:spring-boot CVE-2026-40973 高危 2.5.2 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.9.4 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

org.springframework.boot:spring-boot-autoconfigure CVE-2023-20883 高危 2.0.0.RELEASE 3.0.7, 2.7.12, 2.6.15, 2.5.15 spring-boot: Spring Boot Welcome Page DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31

org.springframework.boot:spring-boot-autoconfigure CVE-2023-20883 高危 2.5.2 3.0.7, 2.7.12, 2.6.15, 2.5.15 spring-boot: Spring Boot Welcome Page DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31

com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.9.4 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30

com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.12.3 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15

com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 高危 2.12.3 2.12.6, 2.13.1 jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-03-18 22:15 修改: 2026-06-17 04:15

org.springframework.data:spring-data-commons CVE-2018-1259 高危 2.0.5.RELEASE 1.13.12, 2.0.7 spring-data-commons: XXE with Spring Data’s XMLBeam integration

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1259

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-05-11 20:29 修改: 2026-06-26 18:44

org.springframework.data:spring-data-commons CVE-2018-1259 高危 2.0.5.RELEASE 1.13.12, 2.0.7 spring-data-commons: XXE with Spring Data’s XMLBeam integration

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1259

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2018-05-11 20:29 修改: 2026-06-26 18:44

org.springframework.data:spring-data-commons CVE-2018-1274 高危 2.0.5.RELEASE 1.13.11, 2.0.6 spring-data-commons: Unlimited path depth in PropertyPath.java allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1274

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-04-18 16:29 修改: 2026-06-26 18:44

org.springframework.data:spring-data-commons CVE-2018-1274 高危 2.0.5.RELEASE 1.13.11, 2.0.6 spring-data-commons: Unlimited path depth in PropertyPath.java allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1274

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2018-04-18 16:29 修改: 2026-06-26 18:44

org.springframework.data:spring-data-commons CVE-2026-41716 高危 2.0.5.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-commons CVE-2026-41716 高危 2.0.5.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-commons CVE-2026-41716 高危 2.5.2 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.12.3 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.12.3 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

org.springframework.data:spring-data-mongodb CVE-2026-41717 高危 2.0.5.RELEASE 5.0.6, 4.5.12 Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41717

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-mongodb CVE-2026-41717 高危 2.0.5.RELEASE 5.0.6, 4.5.12 Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41717

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.12.3 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

org.springframework.data:spring-data-mongodb CVE-2026-41717 高危 3.2.2 5.0.6, 4.5.12 Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41717

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.12.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19

org.springframework.security:spring-security-core CVE-2024-22257 高危 5.5.1 5.7.12, 5.8.11, 6.1.8, 6.2.3 spring-security: Broken Access Control With Direct Use of AuthenticatedVoter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22257

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-03-18 15:15 修改: 2026-06-30 13:16

org.springframework.security:spring-security-crypto CVE-2025-22228 高危 5.5.1 6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16 spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22228

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-03-20 06:15 修改: 2026-06-17 08:45

com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.12.6.1 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.12.6.1 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.12.6.1 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.12.6.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19

org.springframework:spring-beans CVE-2022-22970 高危 5.0.4.RELEASE 5.2.22.RELEASE, 5.3.20 springframework: DoS via data binding to multipartFile or servlet part

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29

cn.hutool:hutool-core CVE-2023-33695 高危 5.5.2 5.8.19 Insecure Temporary File in HuTool

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33695

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-13 16:15 修改: 2026-06-17 06:02

org.springframework:spring-beans CVE-2022-22970 高危 5.3.8 5.2.22.RELEASE, 5.3.20 springframework: DoS via data binding to multipartFile or servlet part

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29

org.springframework:spring-context CVE-2022-22968 高危 5.0.4.RELEASE 5.3.19, 5.2.21.RELEASE Framework: Data Binding Rules Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29

org.springframework:spring-context CVE-2022-22968 高危 5.3.8 5.3.19, 5.2.21.RELEASE Framework: Data Binding Rules Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29

org.springframework:spring-core CVE-2018-1272 高危 5.0.4.RELEASE 4.3.15, 5.0.5 spring-framework: Multipart content pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1272

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-04-06 13:29 修改: 2026-06-17 01:50

org.springframework:spring-core CVE-2018-15756 高危 5.0.4.RELEASE 5.1.1.RELEASE, 5.0.10.RELEASE, 4.3.20.RELEASE springframework: DoS Attack via Range Requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15756

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-10-18 22:29 修改: 2026-06-17 01:43

org.springframework:spring-core CVE-2025-41249 高危 5.3.8 6.2.11 org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22

org.springframework:spring-expression CVE-2023-20863 高危 5.0.4.RELEASE 6.0.8, 5.3.27, 5.2.24.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2026-41849 高危 5.0.4.RELEASE spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41849

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-expression CVE-2026-41850 高危 5.0.4.RELEASE 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-expression CVE-2023-20863 高危 5.3.8 6.0.8, 5.3.27, 5.2.24.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2026-41849 高危 5.3.8 spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41849

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-expression CVE-2026-41850 高危 5.3.8 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

cn.hutool:hutool-core CVE-2023-42278 高危 5.5.2 5.8.22 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42278

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-42278 高危 5.5.2 5.8.22 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42278

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-51075 高危 5.5.2 5.8.24 hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51075

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-12-27 21:15 修改: 2026-06-17 06:40

org.springframework:spring-web CVE-2024-22243 高危 5.0.4.RELEASE 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22259 高危 5.0.4.RELEASE 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22262 高危 5.0.4.RELEASE 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11

cn.hutool:hutool-core CVE-2023-51075 高危 5.5.2 5.8.24 hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51075

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-12-27 21:15 修改: 2026-06-17 06:40

org.springframework:spring-web CVE-2024-22243 高危 5.3.8 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22259 高危 5.3.8 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22262 高危 5.3.8 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11

cn.hutool:hutool-core CVE-2022-4565 高危 5.5.1 5.8.11 HuTool vulnerable to Uncontrolled Resource Consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4565

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-12-16 19:15 修改: 2026-06-17 05:21

org.springframework:spring-webmvc CVE-2020-5398 高危 5.0.4.RELEASE 5.2.3.RELEASE, 5.1.13.RELEASE, 5.0.16.RELEASE springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-5398

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-01-17 00:15 修改: 2026-06-17 03:21

org.springframework:spring-webmvc CVE-2024-38819 高危 5.0.4.RELEASE 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41

org.springframework:spring-webmvc CVE-2026-41842 高危 5.0.4.RELEASE 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41845 高危 5.0.4.RELEASE 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

cn.hutool:hutool-core CVE-2023-3276 高危 5.5.1 HuTool XML parsing module has blind XXE vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3276

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-06-15 13:15 修改: 2026-06-17 06:13

cn.hutool:hutool-core CVE-2022-4565 高危 5.7.15 5.8.11 HuTool vulnerable to Uncontrolled Resource Consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4565

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-16 19:15 修改: 2026-06-17 05:21

org.springframework:spring-webmvc CVE-2024-38816 高危 5.3.8 6.1.13 spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38816

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-09-13 06:15 修改: 2026-06-17 07:41

org.springframework:spring-webmvc CVE-2024-38819 高危 5.3.8 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41

org.springframework:spring-webmvc CVE-2026-41842 高危 5.3.8 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41845 高危 5.3.8 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

cn.hutool:hutool-core CVE-2023-3276 高危 5.7.15 HuTool XML parsing module has blind XXE vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3276

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-15 13:15 修改: 2026-06-17 06:13

cn.hutool:hutool-core CVE-2023-33695 高危 5.7.15 5.8.19 Insecure Temporary File in HuTool

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33695

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-13 16:15 修改: 2026-06-17 06:02

cn.hutool:hutool-core CVE-2023-42278 高危 5.7.15 5.8.22 hutool Buffer Overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42278

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-08 22:15 修改: 2026-06-17 06:23

cn.hutool:hutool-core CVE-2023-51075 高危 5.7.15 5.8.24 hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51075

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-12-27 21:15 修改: 2026-06-17 06:40

cn.hutool:hutool-extra CVE-2025-56769 高危 5.5.1 5.8.40 Hutool allows remote code execution (RCE) via the QLExpressEngine class

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-56769

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2025-09-25 23:15 修改: 2026-06-17 09:42

cn.hutool:hutool-extra CVE-2025-56769 高危 5.5.2 5.8.40 Hutool allows remote code execution (RCE) via the QLExpressEngine class

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-56769

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-09-25 23:15 修改: 2026-06-17 09:42

cn.hutool:hutool-extra CVE-2025-56769 高危 5.5.2 5.8.40 Hutool allows remote code execution (RCE) via the QLExpressEngine class

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-56769

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-09-25 23:15 修改: 2026-06-17 09:42

org.xerial.snappy:snappy-java CVE-2023-34455 高危 1.1.7.3 1.1.10.1 snappy-java: Unchecked chunk length leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-15 18:15 修改: 2026-06-17 06:03

org.xerial.snappy:snappy-java CVE-2023-43642 高危 1.1.7.3 1.1.10.4 snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-09-25 20:15 修改: 2026-06-17 06:26

org.yaml:snakeyaml CVE-2017-18640 高危 1.18 1.26 snakeyaml: Billion laughs attack via alias feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13

org.yaml:snakeyaml CVE-2022-1471 高危 1.18 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22

org.yaml:snakeyaml CVE-2022-25857 高危 1.18 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34

org.yaml:snakeyaml CVE-2017-18640 高危 1.19 1.26 snakeyaml: Billion laughs attack via alias feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13

org.yaml:snakeyaml CVE-2022-1471 高危 1.19 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22

org.yaml:snakeyaml CVE-2022-25857 高危 1.19 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34

org.yaml:snakeyaml CVE-2022-1471 高危 1.28 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22

org.yaml:snakeyaml CVE-2022-25857 高危 1.28 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-45648 中危 9.0.48 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 tomcat: incorrectly parsed http trailer headers can cause request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-24549 中危 9.0.48 8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 Tomcat: HTTP/2 header handling DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49124 中危 9.0.48 11.0.8, 10.1.42, 9.0.106 Apache Tomcat installer for Windows has an untrusted search path vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49125 中危 9.0.48 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52434 中危 9.0.48 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55668 中危 9.0.48 11.0.8, 10.1.42, 9.0.106 org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-66614 中危 9.0.48 11.0.15, 10.1.50, 9.0.113 tomcat: Client certificate verification bypass due to virtual host mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-25854 中危 9.0.48 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25

org.apache.commons:commons-compress CVE-2024-25710 中危 1.20 1.26.0 commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:16

org.apache.tomcat.embed:tomcat-embed-websocket CVE-2024-23672 中危 8.5.28 11.0.0-M17, 10.1.19, 9.0.86, 8.5.99 Tomcat: WebSocket DoS with incomplete closing handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13

org.apache.tomcat.embed:tomcat-embed-websocket CVE-2024-23672 中危 9.0.48 11.0.0-M17, 10.1.19, 9.0.86, 8.5.99 Tomcat: WebSocket DoS with incomplete closing handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13

org.apache.commons:commons-compress CVE-2024-25710 中危 1.21 1.26.0 commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:16

org.apache.commons:commons-compress CVE-2024-25710 中危 1.21 1.26.0 commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:16

org.apache.xmlgraphics:batik-bridge CVE-2022-38398 中危 1.14 1.15 batik: Server-Side Request Forgery

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38398

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-22 15:15 修改: 2026-06-17 04:56

org.apache.xmlgraphics:batik-bridge CVE-2022-38648 中危 1.14 1.15 batik: Server-Side Request Forgery

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38648

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-22 15:15 修改: 2026-06-17 04:56

org.apache.xmlgraphics:batik-script CVE-2022-44730 中危 1.14 1.17 batik: Server-Side Request Forgery vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44730

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:08

org.apache.commons:commons-compress CVE-2024-26308 中危 1.21 1.26.0 commons-compress: OutOfMemoryError unpacking broken Pack200 file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26308

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:17

org.apache.commons:commons-compress CVE-2024-26308 中危 1.21 1.26.0 commons-compress: OutOfMemoryError unpacking broken Pack200 file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26308

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:17

com.squareup.okio:okio CVE-2023-3635 中危 1.14.0 3.4.0, 1.17.6 okio: GzipSource class improper exception handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14

com.squareup.okio:okio CVE-2023-3635 中危 2.7.0 3.4.0, 1.17.6 okio: GzipSource class improper exception handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14

org.bitbucket.b_c:jose4j CVE-2023-51775 中危 0.7.2 0.9.4 jose4j: denial of service via specially crafted JWE

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51775

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-02-29 01:42 修改: 2026-06-17 06:41

org.bitbucket.b_c:jose4j GHSA-jgvc-jfgh-rjvv 中危 0.7.2 0.9.3 Chosen Ciphertext Attack in Jose4j

漏洞详情: https://github.com/advisories/GHSA-jgvc-jfgh-rjvv

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-04-27 23:52 修改: 2023-04-27 23:52

org.bouncycastle:bcprov-ext-jdk15on CVE-2023-33201 中危 1.69 bouncycastle: potential blind LDAP injection attack using a self-signed certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01

org.bouncycastle:bcprov-ext-jdk15on CVE-2023-33202 中危 1.69 1.73 bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-11-23 16:15 修改: 2026-06-17 06:01

org.bouncycastle:bcprov-jdk15on CVE-2020-15522 中危 1.60 1.66 bouncycastle: Timing issue within the EC math library

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15522

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-05-20 12:15 修改: 2026-06-17 02:56

org.bouncycastle:bcprov-jdk15on CVE-2020-26939 中危 1.60 1.61 In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26939

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-11-02 22:15 修改: 2026-06-17 03:08

org.bouncycastle:bcprov-jdk15on CVE-2023-33201 中危 1.60 bouncycastle: potential blind LDAP injection attack using a self-signed certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01

org.bouncycastle:bcprov-jdk15on CVE-2023-33202 中危 1.60 1.70 bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-11-23 16:15 修改: 2026-06-17 06:01

org.bouncycastle:bcprov-jdk15on CVE-2024-29857 中危 1.60 1.78 org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23

org.bouncycastle:bcprov-jdk15on CVE-2024-30171 中危 1.60 1.78 bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26

com.squareup.okio:okio CVE-2023-3635 中危 2.8.0 3.4.0, 1.17.6 okio: GzipSource class improper exception handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14

org.bouncycastle:bcprov-jdk15on CVE-2023-33201 中危 1.66 bouncycastle: potential blind LDAP injection attack using a self-signed certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01

org.bouncycastle:bcprov-jdk15on CVE-2023-33202 中危 1.66 1.70 bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-11-23 16:15 修改: 2026-06-17 06:01

org.bouncycastle:bcprov-jdk15on CVE-2024-29857 中危 1.66 1.78 org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23

org.bouncycastle:bcprov-jdk15on CVE-2024-30171 中危 1.66 1.78 bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26

org.bouncycastle:bcprov-jdk15on CVE-2024-34447 中危 1.66 1.78 org.bouncycastle: Use of Incorrectly-Resolved Name or Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34447

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-05-03 16:15 修改: 2026-06-17 07:33

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.9.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

org.elasticsearch.client:elasticsearch-rest-client CVE-2021-22145 中危 7.12.1 7.13.4 elasticsearch: memory disclosure in error reporting

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22145

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-07-21 15:15 修改: 2026-06-17 03:36

org.apache.commons:commons-compress CVE-2018-11771 中危 1.8.1 1.18 apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11771

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2018-08-16 15:29 修改: 2026-06-17 01:36

org.elasticsearch:elasticsearch CVE-2021-22144 中危 7.12.1 6.8.17, 7.13.3 elasticsearch: uncontrolled recursion in Grok parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22144

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-07-26 12:15 修改: 2026-06-17 03:36

org.elasticsearch:elasticsearch CVE-2021-22147 中危 7.12.1 7.14.0 elasticsearch: document and field level security was not applied to searchable snapshots

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22147

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-09-15 12:15 修改: 2026-06-17 03:36

org.elasticsearch:elasticsearch CVE-2023-31417 中危 7.12.1 7.17.13, 8.9.2 elasticsearch: Sensitive information in audit logs

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31417

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-26 18:15 修改: 2026-06-17 05:56

org.elasticsearch:elasticsearch CVE-2023-31419 中危 7.12.1 7.17.13, 8.9.1 elasticsearch: StackOverflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31419

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-26 18:15 修改: 2026-06-17 05:56

org.elasticsearch:elasticsearch CVE-2023-46673 中危 7.12.1 7.17.14, 8.10.3 elasticsearch: Improper Handling of Exceptional Conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46673

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-11-22 10:15 修改: 2026-06-17 06:31

org.elasticsearch:elasticsearch CVE-2023-49921 中危 7.12.1 7.17.16, 8.11.2 elasticsearch: Insertion of Sensitive Information into Log File

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-49921

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-07-26 05:15 修改: 2026-06-17 06:36

org.elasticsearch:elasticsearch CVE-2024-23444 中危 7.12.1 8.13.0, 7.17.23 Elasticsearch stores private key on disk unencrypted

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23444

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-07-31 18:15 修改: 2026-06-17 07:12

org.elasticsearch:elasticsearch CVE-2024-23450 中危 7.12.1 7.17.19, 8.13.0 elasticsearch: Possible denial of service when processing documents in a deeply nested pipeline

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23450

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-03-27 17:15 修改: 2026-06-17 07:12

org.elasticsearch:elasticsearch CVE-2024-43709 中危 7.12.1 7.17.21, 8.13.3 elasticsearch: Elasticsearch allocation of resources without limits or throttling leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43709

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-01-21 11:15 修改: 2026-06-17 07:51

org.elasticsearch:elasticsearch CVE-2024-52979 中危 7.12.1 7.17.25, 8.16.0 elasticsearch: Elasticsearch Uncontrolled Resource Consumption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52979

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-05-01 14:15 修改: 2026-06-17 08:07

org.elasticsearch:elasticsearch CVE-2025-37727 中危 7.12.1 8.18.8, 8.19.5, 9.0.8, 9.1.5 org.elasticsearch/elasticsearch-core: Elasticsearch Insertion of sensitive information in log file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37727

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-10-10 10:15 修改: 2026-06-17 09:15

org.elasticsearch:elasticsearch CVE-2025-37731 中危 7.12.1 8.19.8, 9.1.8, 9.2.2 elasticsearch: Elasticsearch: User impersonation due to improper authentication in Public Key Infrastructure (PKI) realm

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37731

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-12-15 11:15 修改: 2026-06-17 09:15

org.hibernate.validator:hibernate-validator CVE-2019-10219 中危 6.0.7.Final 6.1.0.Alpha6, 6.0.18.Final hibernate-validator: safeHTML validator allows XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10219

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-11-08 15:15 修改: 2026-08-21 14:32

org.hibernate.validator:hibernate-validator CVE-2020-10693 中危 6.0.7.Final 6.1.5.Final, 6.0.20.Final hibernate-validator: Improper input validation in the interpolation of constraint error messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10693

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-05-06 14:15 修改: 2026-06-17 02:48

org.hibernate.validator:hibernate-validator CVE-2023-1932 中危 6.0.7.Final 6.2.0.Final hibernate-validator: rendering of invalid html with SafeHTML leads to HTML injection and XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1932

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-11-07 10:15 修改: 2026-06-17 05:29

org.hibernate.validator:hibernate-validator CVE-2025-35036 中危 6.0.7.Final 6.2.0.CR1, 7.0.0.CR1 hibernate-validator: Hibernate Validator Expression Language Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-35036

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-03 20:15 修改: 2026-06-17 09:14

org.apache.commons:commons-compress CVE-2024-25710 中危 1.8.1 1.26.0 commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:16

org.hibernate:hibernate-validator CVE-2020-10693 中危 5.2.4.Final 6.1.5.Final, 6.0.20.Final hibernate-validator: Improper input validation in the interpolation of constraint error messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10693

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-05-06 14:15 修改: 2026-06-17 02:48

org.hibernate:hibernate-validator CVE-2023-1932 中危 5.2.4.Final 6.2.0.Final hibernate-validator: rendering of invalid html with SafeHTML leads to HTML injection and XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1932

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-11-07 10:15 修改: 2026-06-17 05:29

org.hibernate:hibernate-validator CVE-2025-35036 中危 5.2.4.Final 6.2.0.CR1, 7.0.0.CR1 hibernate-validator: Hibernate Validator Expression Language Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-35036

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-03 20:15 修改: 2026-06-17 09:14

org.jetbrains.kotlin:kotlin-stdlib CVE-2020-29582 中危 1.4.0 1.4.21 kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29582

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-02-03 16:15 修改: 2026-06-17 03:11

org.jetbrains.kotlin:kotlin-stdlib CVE-2022-24329 中危 1.4.0 1.6.0 kotlin: Not possible to lock dependencies for Multiplatform Gradle Projects

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24329

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-02-25 15:15 修改: 2026-06-17 04:31

org.jetbrains.kotlin:kotlin-stdlib CVE-2022-24329 中危 1.5.20 1.6.0 kotlin: Not possible to lock dependencies for Multiplatform Gradle Projects

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24329

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-02-25 15:15 修改: 2026-06-17 04:31

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.12.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.12.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.9 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

com.fasterxml.woodstox:woodstox-core CVE-2022-40152 中危 6.0.1 6.4.0, 5.4.0 woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01

com.fasterxml.woodstox:woodstox-core CVE-2022-40152 中危 6.2.7 6.4.0, 5.4.0 woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01

org.apache.httpcomponents:httpclient CVE-2020-13956 中危 4.5.5 4.5.13, 5.0.3 apache-httpclient: incorrect handling of malformed authority component in request URIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53

org.apache.httpcomponents:httpclient CVE-2020-13956 中危 4.5.5 4.5.13, 5.0.3 apache-httpclient: incorrect handling of malformed authority component in request URIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53

org.jsoup:jsoup CVE-2022-36033 中危 1.10.3 1.15.3 jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if SafeList.preserveRelativeLinks is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36033

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-08-29 17:15 修改: 2026-06-17 04:52

org.apache.kafka:kafka-clients CVE-2021-38153 中危 2.3.1 2.6.3, 2.7.2, 2.8.1 Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38153

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-09-22 09:15 修改: 2026-06-17 04:01

org.apache.kafka:kafka-clients CVE-2024-31141 中危 2.3.1 3.7.1 kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-31141

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-11-19 09:15 修改: 2026-06-17 07:27

org.lz4:lz4-java CVE-2026-59949 中危 1.6.0 yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JN ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-08-18 15:16 修改: 2026-08-18 18:18

org.apache.kafka:kafka-clients CVE-2026-33558 中危 2.3.1 3.9.2, 4.0.1 Apache Kafka exposes sensitive information in its DEBUG logs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33558

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-20 14:16 修改: 2026-06-17 10:37

com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.12.3 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.12.3 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

org.apache.kafka:kafka_2.12 CVE-2021-38153 中危 2.3.1 2.6.3, 2.7.2, 2.8.1 Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38153

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-09-22 09:15 修改: 2026-06-17 04:01

org.apache.logging.log4j:log4j-1.2-api CVE-2026-34479 中危 2.17.1 2.25.4 org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34479

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39

org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.14.1 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03

org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.17.1 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03

org.springframework.boot:spring-boot-actuator CVE-2023-34055 中危 2.5.2 2.7.18, 3.0.13, 3.1.6 spring-boot: org.springframework.boot: spring-boot-actuator class vulnerable to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34055

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-11-28 09:15 修改: 2026-06-17 06:02

org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.17.1 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03

org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.17.1 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58

org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.17.1 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58

org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.17.1 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39

org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.17.1 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39

org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.17.1 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39

org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.17.1 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39

org.apache.poi:poi-ooxml CVE-2025-31672 中危 5.2.2 5.4.0 org.apache.poi/poi-ooxml: Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31672

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-04-09 12:15 修改: 2026-06-17 09:10

commons-lang:commons-lang CVE-2025-48924 中危 2.4 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30

commons-net:commons-net CVE-2021-37533 中危 3.6 3.9.0 apache-commons-net: FTP client trusts the host from PASV response by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00

commons-net:commons-net CVE-2021-37533 中危 3.6 3.9.0 apache-commons-net: FTP client trusts the host from PASV response by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00

commons-net:commons-net CVE-2021-37533 中危 3.6 3.9.0 apache-commons-net: FTP client trusts the host from PASV response by default

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00

org.springframework.data:spring-data-commons CVE-2026-41711 中危 2.0.5.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-commons CVE-2026-41711 中危 2.0.5.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-commons CVE-2026-41721 中危 2.0.5.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-commons CVE-2026-41721 中危 2.0.5.RELEASE 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

com.google.guava:guava CVE-2023-2976 中危 30.1.1-android 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53

org.springframework.data:spring-data-commons CVE-2026-41711 中危 2.5.2 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-commons CVE-2026-41721 中危 2.5.2 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

com.google.guava:guava CVE-2023-2976 中危 31.0.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53

io.github.classgraph:classgraph CVE-2021-47621 中危 4.8.69 4.8.112 ClassGraph XML External Entity Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-47621

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-06-21 06:15 修改: 2026-06-17 04:18

io.kubernetes:client-java CVE-2021-25738 中危 9.0.3 11.0.1 kubernetes-client: Loading specially-crafted yaml can lead to code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25738

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-10-11 19:15 修改: 2026-06-17 03:42

com.google.guava:guava CVE-2023-2976 中危 31.0.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53

org.springframework.data:spring-data-mongodb CVE-2026-41696 中危 2.0.5.RELEASE 5.0.6, 4.5.12 org.springframework.data/spring-data-mongodb: Spring Data MongoDB: Information disclosure via insufficient regex parameter validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41696

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.data:spring-data-mongodb CVE-2026-41696 中危 2.0.5.RELEASE 5.0.6, 4.5.12 org.springframework.data/spring-data-mongodb: Spring Data MongoDB: Information disclosure via insufficient regex parameter validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41696

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

com.google.guava:guava CVE-2023-2976 中危 31.0.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.12.3 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

org.springframework.data:spring-data-mongodb CVE-2026-41696 中危 3.2.2 5.0.6, 4.5.12 org.springframework.data/spring-data-mongodb: Spring Data MongoDB: Information disclosure via insufficient regex parameter validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41696

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.12.6 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30

com.google.protobuf:protobuf-java CVE-2022-3171 中危 2.6.1 3.21.7, 3.20.3, 3.19.6, 3.16.3 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58

org.springframework.security:spring-security-core CVE-2022-22976 中危 5.5.1 5.5.7, 5.6.4 springframework: BCrypt skips salt rounds for work factor of 31

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22976

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-05-19 15:15 修改: 2026-06-17 04:29

org.springframework.security:spring-security-core CVE-2024-38827 中危 5.5.1 5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 spring-security: authorization bypass for case sensitive comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-12-02 15:15 修改: 2026-06-17 07:41

cn.hutool:hutool-json CVE-2022-45690 中危 5.5.2 5.8.11 hutool-json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45690

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

io.netty:netty-codec CVE-2025-58057 中危 4.1.65.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43

cn.hutool:hutool-json CVE-2022-45690 中危 5.5.2 5.8.11 hutool-json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45690

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.3 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00

org.springframework.security:spring-security-web CVE-2026-41706 中危 5.5.1 7.0.6, 6.5.11 Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41706

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

org.springframework.security:spring-security-web CVE-2026-47838 中危 5.5.1 6.5.11 Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47838

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10

com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.12.6.1 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05

com.google.protobuf:protobuf-java CVE-2022-3171 中危 3.19.1 3.21.7, 3.20.3, 3.19.6, 3.16.3 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.12.6.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.12.6.1 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

io.netty:netty-codec-http CVE-2021-43797 中危 4.1.65.Final 4.1.71.Final netty: control chars in header names may lead to HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11

org.springframework:spring-context CVE-2024-38820 中危 5.0.4.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

io.netty:netty-codec-http CVE-2022-24823 中危 4.1.65.Final 4.1.77.Final netty: world readable temporary file containing sensitive data

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32

org.springframework:spring-context CVE-2024-38820 中危 5.3.8 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

io.netty:netty-codec-http CVE-2024-29025 中危 4.1.65.Final 4.1.108.Final netty-codec-http: Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22

io.netty:netty-codec-http CVE-2025-67735 中危 4.1.65.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58

org.springframework:spring-core CVE-2018-11040 中危 5.0.4.RELEASE 5.0.7.RELEASE, 4.3.18.RELEASE springframework: cross-domain requests via JSONP through AbstractJsonpResponseBodyAdvice

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11040

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-06-25 15:29 修改: 2026-06-17 01:35

org.springframework:spring-core CVE-2018-1257 中危 5.0.4.RELEASE 5.0.6, 4.3.17 spring-framework: ReDoS Attack with spring-messaging

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1257

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-05-11 20:29 修改: 2026-06-17 01:50

org.springframework:spring-core CVE-2018-1271 中危 5.0.4.RELEASE 5.0.5, 4.3.15 spring-framework: Directory traversal vulnerability with static resources on Windows filesystems

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1271

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-04-06 13:29 修改: 2026-06-17 01:50

io.netty:netty-codec-http CVE-2026-41417 中危 4.1.65.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46

org.springframework:spring-core CVE-2021-22060 中危 5.3.8 5.3.14, 5.2.19 springframework: Additional Log Injection in Spring Framework (follow-up to CVE-2021-22096)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22060

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:36

org.springframework:spring-core CVE-2021-22096 中危 5.3.8 5.3.11, 5.2.18 springframework: malicious input leads to insertion of additional log entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22096

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-10-28 16:15 修改: 2026-06-17 03:36

io.netty:netty-codec-http CVE-2026-42580 中危 4.1.65.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

io.netty:netty-codec-http CVE-2026-42581 中危 4.1.65.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-13 19:17 修改: 2026-08-21 13:17

io.netty:netty-codec-http CVE-2026-42585 中危 4.1.65.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48

org.springframework:spring-expression CVE-2022-22950 中危 5.0.4.RELEASE 5.3.17, 5.2.20.RELEASE spring-expression: Denial of service via specially crafted SpEL expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-expression CVE-2023-20861 中危 5.0.4.RELEASE 6.0.7, 5.3.26, 5.2.23.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2024-38808 中危 5.0.4.RELEASE 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41

org.springframework:spring-expression CVE-2026-41851 中危 5.0.4.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2018-11784 中危 8.5.28 8.5.34, 7.0.91, 9.0.12 tomcat: Open redirect in default servlet

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11784

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-10-04 13:29 修改: 2026-06-17 01:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2018-8037 中危 8.5.28 9.0.10, 8.5.32 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8037

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-08-02 14:29 修改: 2026-06-17 02:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2019-0221 中危 8.5.28 9.0.17, 8.5.40, 7.0.94 tomcat: XSS in SSI printenv

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0221

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2019-05-28 22:29 修改: 2026-06-17 02:08

org.springframework:spring-expression CVE-2022-22950 中危 5.3.8 5.3.17, 5.2.20.RELEASE spring-expression: Denial of service via specially crafted SpEL expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-expression CVE-2023-20861 中危 5.3.8 6.0.7, 5.3.26, 5.2.23.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2024-38808 中危 5.3.8 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41

org.springframework:spring-expression CVE-2026-41851 中危 5.3.8 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-1935 中危 8.5.28 7.0.100, 8.5.51, 9.0.31 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1935

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-02-24 22:15 修改: 2026-06-17 03:02

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-24122 中危 8.5.28 10.0.0-M10, 9.0.40, 8.5.60, 7.0.107 tomcat: Information disclosure when using NTFS file system

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24122

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-01-14 15:15 修改: 2026-06-17 03:39

org.springframework:spring-messaging CVE-2022-22971 中危 5.0.4.RELEASE 5.3.20, 5.2.22.RELEASE springframework: DoS with STOMP over WebSocket

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22971

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29

org.springframework:spring-messaging CVE-2022-22971 中危 5.3.8 5.3.20, 5.2.22.RELEASE springframework: DoS with STOMP over WebSocket

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22971

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-41080 中危 8.5.28 8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 tomcat: Open Redirect vulnerability in FORM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-42795 中危 8.5.28 10.1.14, 9.0.81, 8.5.94, 11.0.0-M12 tomcat: improper cleaning of recycled objects could lead to information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-44487 中危 8.5.28 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-10 14:15 修改: 2026-08-11 19:37

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-45648 中危 8.5.28 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 tomcat: incorrectly parsed http trailer headers can cause request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28

org.springframework:spring-web CVE-2018-11039 中危 5.0.4.RELEASE 5.0.7, 4.3.18 springframework: Cross Site Tracing (XST) if vulnerable to XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11039

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2018-06-25 15:29 修改: 2026-06-17 01:35

org.springframework:spring-web CVE-2024-38809 中危 5.0.4.RELEASE 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41

org.springframework:spring-web CVE-2024-38820 中危 5.0.4.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-21733 中危 8.5.28 8.5.64, 9.0.44 tomcat: Leaking of unrelated request bodies in default error page

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21733

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-01-19 11:15 修改: 2026-06-17 07:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-24549 中危 8.5.28 8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 Tomcat: HTTP/2 header handling DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-31650 中危 8.5.28 9.0.104, 10.1.40, 11.0.6 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31650

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49125 中危 8.5.28 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.springframework:spring-web CVE-2024-38809 中危 5.3.8 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41

org.springframework:spring-web CVE-2024-38820 中危 5.3.8 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52434 中危 8.5.28 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-66614 中危 8.5.28 11.0.15, 10.1.50, 9.0.113 tomcat: Client certificate verification bypass due to virtual host mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57

io.netty:netty-codec-http CVE-2026-50020 中危 4.1.65.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57

io.netty:netty-codec-http CVE-2026-56746 中危 4.1.65.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47

io.netty:netty-codec-http CVE-2026-59898 中危 4.1.65.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35

org.springframework:spring-webmvc CVE-2026-22745 中危 5.0.4.RELEASE 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

org.springframework:spring-webmvc CVE-2026-41841 中危 5.0.4.RELEASE 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41843 中危 5.0.4.RELEASE 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41844 中危 5.0.4.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41846 中危 5.0.4.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41853 中危 5.0.4.RELEASE 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

io.netty:netty-codec-http CVE-2026-59899 中危 4.1.65.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25

io.netty:netty-codec-http CVE-2026-59903 中危 4.1.65.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16

io.netty:netty-codec-http CVE-2026-59921 中危 4.1.65.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05

io.netty:netty-common CVE-2024-47535 中危 4.1.65.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57

io.netty:netty-common CVE-2025-25193 中危 4.1.65.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00

ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.3 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

org.springframework:spring-webmvc CVE-2024-38828 中危 5.3.8 5.3.42 org.springframework:spring-webmvc: DoS via Spring MVC controller method with byte[] parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38828

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-11-18 04:15 修改: 2026-06-17 07:41

org.springframework:spring-webmvc CVE-2025-41242 中危 5.3.8 6.2.10 org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41242

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-08-18 09:15 修改: 2026-06-17 09:22

org.springframework:spring-webmvc CVE-2026-22737 中危 5.3.8 7.0.6, 6.2.17 Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20

org.springframework:spring-webmvc CVE-2026-22745 中危 5.3.8 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

org.springframework:spring-webmvc CVE-2026-41841 中危 5.3.8 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41843 中危 5.3.8 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41844 中危 5.3.8 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41846 中危 5.3.8 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-webmvc CVE-2026-41853 中危 5.3.8 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-websocket CVE-2025-41254 中危 5.0.4.RELEASE 6.2.12 org.springframework/spring-core: Spring Framework STOMP CSRF Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41254

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-10-16 15:15 修改: 2026-06-17 09:22

org.springframework:spring-websocket CVE-2026-41838 中危 5.0.4.RELEASE 7.0.8, 6.2.19 IDs for WebSocket sessions in the spring-websocket module are not cryp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41838

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.springframework:spring-websocket CVE-2025-41254 中危 5.3.8 6.2.12 org.springframework/spring-core: Spring Framework STOMP CSRF Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41254

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-10-16 15:15 修改: 2026-06-17 09:22

org.springframework:spring-websocket CVE-2026-41838 中危 5.3.8 7.0.8, 6.2.19 IDs for WebSocket sessions in the spring-websocket module are not cryp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41838

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.9.4 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30

ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.3 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

io.netty:netty-handler CVE-2023-34462 中危 4.1.65.Final 4.1.94.Final netty: SniHandler 16MB allocation leads to OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03

ch.qos.logback:logback-core CVE-2021-42550 中危 1.2.3 1.2.9 logback: remote code execution through JNDI call from within its configuration file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2021-12-16 19:15 修改: 2026-06-17 04:09

ch.qos.logback:logback-core CVE-2021-42550 中危 1.2.3 1.2.9 logback: remote code execution through JNDI call from within its configuration file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2021-12-16 19:15 修改: 2026-06-17 04:09

com.hazelcast:hazelcast CVE-2023-33264 中危 5.2.1 5.0.5, 5.1.6, 5.2.4, 5.3.0 hazelcast: Improper password mask

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33264

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-05-22 01:15 修改: 2026-06-17 06:01

com.hazelcast:hazelcast CVE-2023-33264 中危 5.2.1 5.0.5, 5.1.6, 5.2.4, 5.3.0 hazelcast: Improper password mask

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33264

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2023-05-22 01:15 修改: 2026-06-17 06:01

org.webjars:swagger-ui CVE-2018-25031 中危 3.32.5 4.1.3 Spoofing attack in swagger-ui

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25031

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-03-11 07:15 修改: 2026-06-17 01:54

com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.12.3 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30

cn.hutool:hutool-json CVE-2022-45690 中危 5.5.1 5.8.11 hutool-json stack overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45690

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

org.xerial.snappy:snappy-java CVE-2023-34453 中危 1.1.7.3 1.1.10.1 snappy-java: Integer overflow in shuffle leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03

org.xerial.snappy:snappy-java CVE-2023-34454 中危 1.1.7.3 1.1.10.1 snappy-java: Integer overflow in compress leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03

ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.3 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00

com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 9.10 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39

com.fasterxml.jackson.core:jackson-databind CVE-2019-12384 中危 2.9.4 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-06-24 16:15 修改: 2026-06-17 02:14

org.yaml:snakeyaml CVE-2022-38749 中危 1.18 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38750 中危 1.18 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38751 中危 1.18 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38752 中危 1.18 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-41854 中危 1.18 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03

com.fasterxml.jackson.core:jackson-databind CVE-2019-12814 中危 2.9.4 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2019-06-19 14:15 修改: 2026-06-17 02:15

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.9.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-41080 中危 9.0.48 8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 tomcat: Open Redirect vulnerability in FORM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20

org.yaml:snakeyaml CVE-2022-38749 中危 1.19 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38750 中危 1.19 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38751 中危 1.19 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38752 中危 1.19 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-41854 中危 1.19 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-42795 中危 9.0.48 10.1.14, 9.0.81, 8.5.94, 11.0.0-M12 tomcat: improper cleaning of recycled objects could lead to information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-44487 中危 9.0.48 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2023-10-10 14:15 修改: 2026-08-11 19:37

org.yaml:snakeyaml CVE-2022-38749 中危 1.28 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38750 中危 1.28 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38751 中危 1.28 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38752 中危 1.28 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-41854 中危 1.28 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-31651 低危 8.5.28 9.0.104, 10.1.40, 11.0.6 tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31651

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-46701 低危 8.5.28 9.0.105, 10.1.41, 11.0.7 tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-61795 低危 8.5.28 11.0.12, 10.1.47, 9.0.110 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43514 低危 8.5.28 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

cn.hutool:hutool-json CVE-2022-45689 低危 5.5.2 hutool-json vulnerable to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45689

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

org.springframework:spring-expression CVE-2026-41852 低危 5.0.4.RELEASE 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

ch.qos.logback:logback-core CVE-2026-9828 低危 1.2.3 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

io.netty:netty-codec-http CVE-2025-58056 低危 4.1.65.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43

ch.qos.logback:logback-core CVE-2026-9828 低危 1.2.3 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

com.google.guava:guava CVE-2020-8908 低危 30.1.1-android 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27

ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.3 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00

org.springframework:spring-webmvc CVE-2026-22741 低危 5.0.4.RELEASE 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.3 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00

ch.qos.logback:logback-core CVE-2026-10532 低危 1.2.3 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10

org.springframework:spring-expression CVE-2026-41852 低危 5.3.8 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

com.google.guava:guava CVE-2020-8908 低危 31.0.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27

org.springframework:spring-context CVE-2025-22233 低危 5.0.4.RELEASE 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45

com.google.guava:guava CVE-2020-8908 低危 31.0.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27

com.google.guava:guava CVE-2020-8908 低危 31.0.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27

org.springframework:spring-context CVE-2025-22233 低危 5.3.8 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45

ch.qos.logback:logback-core CVE-2026-10532 低危 1.2.3 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10

org.apache.kafka:kafka_2.12 CVE-2024-56128 低危 2.3.1 3.7.2, 3.8.1 kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56128

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2024-12-18 14:15 修改: 2026-06-17 08:11

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-46701 低危 9.0.48 9.0.105, 10.1.41, 11.0.7 tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55754 低危 9.0.48 11.0.11, 10.1.45, 9.0.109 org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55754

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-61795 低危 9.0.48 11.0.12, 10.1.47, 9.0.110 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50

org.springframework:spring-core CVE-2026-41848 低危 5.0.4.RELEASE 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43514 低危 9.0.48 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.springframework:spring-webmvc CVE-2026-22735 低危 5.3.8 7.0.6, 6.2.17 org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20

org.springframework:spring-webmvc CVE-2026-22741 低危 5.3.8 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.3 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

cn.hutool:hutool-json CVE-2022-45689 低危 5.5.1 hutool-json vulnerable to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45689

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

org.springframework:spring-core CVE-2026-41848 低危 5.3.8 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10

ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.3 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:5614981a895b6285dc3ce19fcdf7efceb60e4a6088688ab46680d85d258972eb

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

cn.hutool:hutool-json CVE-2022-45689 低危 5.5.2 hutool-json vulnerable to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45689

镜像层: sha256:cfafcd29e5e58d8c65e0280206f68bb751d02524bd86b092d7ea44415bed5f1d

发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×