近日，Oracle官方发布了多个安全漏洞的公告，其中Oracle产品本身漏洞75个，影响到Oracle产品的其他厂商漏洞182个。包括Oracle Fusion Middleware 安全漏洞（CNNVD-202310-1377、CVE-2023-22069）、Oracle Fusion Middleware 安全漏洞（CNNVD-202310-1381、CVE-2023-22072）等多个漏洞。成功利用上述漏洞的攻击者可以在目标系统上执行任意代码、获取用户数据，提升权限等。Oracle多个产品和系统受漏洞影响。目前，Oracle官方已经发布了漏洞修复补丁，建议用户及时确认是否受到漏洞影响，尽快采取修补措施。
2023年10月17日，Oracle发布了2023年10月份安全更新，共257个漏洞的补丁程序，CNNVD对这些漏洞进行了收录。本次更新主要涵盖了Oracle Mysql 和 Mysql 组件、Oracle Database Server、Oracle Communications、Oracle BI Publisher、Oracle Hospitality Applications、Oracle MySQL等。CNNVD对其危害等级进行了评价，其中超危漏洞27个，高危漏洞97个，中危漏洞126个，低危漏洞7个。Oracle多个产品和系统版本受漏洞影响，具体影响范围可访问Oracle官方网站查询：
序号
| 漏洞名称
| CNNVD编号
| CVE编号
| 危害等级
| 官方链接
|
1
| Oracle Fusion Middleware 安全漏洞
| CNNVD-202310-1377
| CVE-2023-22069
| 超危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
2
| Oracle Fusion Middleware 安全漏洞
| CNNVD-202310-1381
| CVE-2023-22072
| 超危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
3
| Oracle Fusion Middleware 安全漏洞
| CNNVD-202310-1398
| CVE-2023-22089
| 超危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
4
| Oracle Fusion Middleware 安全漏洞
| CNNVD-202310-1366
| CVE-2023-22019
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
5
| Oracle Hospitality Applications 安全漏洞
| CNNVD-202310-1393
| CVE-2023-22085
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
6
| Oracle Fusion Middleware 安全漏洞
| CNNVD-202310-1394
| CVE-2023-22086
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
7
| Oracle Hospitality Applications 安全漏洞
| CNNVD-202310-1395
| CVE-2023-22087
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
8
| Oracle MySQL 安全漏洞
| CNNVD-202310-1401
| CVE-2023-22094
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
9
| Oracle Virtualization 安全漏洞
| CNNVD-202310-1407
| CVE-2023-22099
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
10
| Oracle Virtualization 安全漏洞
| CNNVD-202310-1408
| CVE-2023-22098
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
11
| Oracle Virtualization 安全漏洞
| CNNVD-202310-1409
| CVE-2023-22100
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
12
| Oracle MySQL 安全漏洞
| CNNVD-202310-1410
| CVE-2023-22102
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
13
| Oracle Fusion Middleware 安全漏洞
| CNNVD-202310-1411
| CVE-2023-22101
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
14
| Oracle Fusion Middleware 安全漏洞
| CNNVD-202310-1416
| CVE-2023-22108
| 高危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
15
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1361
| CVE-2023-22015
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
16
| Oracle Commerce 安全漏洞
| CNNVD-202310-1367
| CVE-2023-22029
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
17
| Oracle MySQL 安全漏洞
| CNNVD-202310-1368
| CVE-2023-22026
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
18
| Oracle MySQL 安全漏洞
| CNNVD-202310-1369
| CVE-2023-22028
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
19
| Oracle MySQL 安全漏洞
| CNNVD-202310-1370
| CVE-2023-22059
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
20
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1371
| CVE-2023-22032
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
21
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1372
| CVE-2023-22065
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
22
| Oracle MySQL 安全漏洞
| CNNVD-202310-1373
| CVE-2023-22064
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
23
| Oracle Java SE 安全漏洞
| CNNVD-202310-1374
| CVE-2023-22067
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
24
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1375
| CVE-2023-22066
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
25
| Oracle MySQL 安全漏洞
| CNNVD-202310-1376
| CVE-2023-22068
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
26
| Oracle MySQL 安全漏洞
| CNNVD-202310-1378
| CVE-2023-22070
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
27
| Oracle Database Server 安全漏洞
| CNNVD-202310-1379
| CVE-2023-22071
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
28
| Oracle Database Server 安全漏洞
| CNNVD-202310-1380
| CVE-2023-22073
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
29
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1384
| CVE-2023-22078
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
30
| Oracle Database Server 安全漏洞
| CNNVD-202310-1385
| CVE-2023-22077
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
31
| Oracle E-Business Suite 安全漏洞
| CNNVD-202310-1386
| CVE-2023-22076
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
32
| Oracle MySQL 安全漏洞
| CNNVD-202310-1387
| CVE-2023-22079
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
33
| Oracle Java SE 安全漏洞
| CNNVD-202310-1388
| CVE-2023-22081
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
34
| Oracle PeopleSoft Enterprise PeopleTools 安全漏洞
| CNNVD-202310-1389
| CVE-2023-22080
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
35
| Oracle Business Intelligence Enterprise Edition 安全漏洞
| CNNVD-202310-1390
| CVE-2023-22082
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
36
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1391
| CVE-2023-22084
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
37
| Oracle Communications 安全漏洞
| CNNVD-202310-1392
| CVE-2023-22083
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
38
| Oracle PeopleSoft Enterprise CC Common Application Objects 安全漏洞
| CNNVD-202310-1396
| CVE-2023-22090
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
39
| Oracle Communications Applications 安全漏洞
| CNNVD-202310-1397
| CVE-2023-22088
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
40
| Oracle MySQL 安全漏洞
| CNNVD-202310-1399
| CVE-2023-22092
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
41
| Oracle Java SE 安全漏洞
| CNNVD-202310-1400
| CVE-2023-22091
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
42
| Oracle E-Business Suite 安全漏洞
| CNNVD-202310-1402
| CVE-2023-22093
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
43
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1404
| CVE-2023-22095
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
44
| Oracle MySQL 安全漏洞
| CNNVD-202310-1405
| CVE-2023-22097
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
45
| Oracle Database Server 安全漏洞
| CNNVD-202310-1406
| CVE-2023-22096
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
46
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1412
| CVE-2023-22103
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
47
| Oracle E-Business Suite 安全漏洞
| CNNVD-202310-1413
| CVE-2023-22106
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
48
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1414
| CVE-2023-22104
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
49
| Oracle BI Publisher 安全漏洞
| CNNVD-202310-1415
| CVE-2023-22105
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
50
| Oracle E-Business Suite 安全漏洞
| CNNVD-202310-1417
| CVE-2023-22107
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
51
| Oracle MySQL Server 安全漏洞
| CNNVD-202310-1418
| CVE-2023-22110
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
52
| Oracle Business Intelligence Enterprise Edition 安全漏洞
| CNNVD-202310-1419
| CVE-2023-22109
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
53
| Oracle MySQL 安全漏洞
| CNNVD-202310-1422
| CVE-2023-22111
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
54
| Oracle MySQL 安全漏洞
| CNNVD-202310-1423
| CVE-2023-22112
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
55
| Oracle Financial Services Applications 安全漏洞
| CNNVD-202310-1424
| CVE-2023-22117
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
56
| Oracle MySQL 安全漏洞
| CNNVD-202310-1425
| CVE-2023-22115
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
57
| Oracle MySQL 安全漏洞
| CNNVD-202310-1426
| CVE-2023-22114
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
58
| Oracle Financial Services Applications 安全漏洞
| CNNVD-202310-1427
| CVE-2023-22119
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
59
| Oracle Financial Services Applications 安全漏洞
| CNNVD-202310-1428
| CVE-2023-22118
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
60
| Oracle Financial Services Applications 安全漏洞
| CNNVD-202310-1429
| CVE-2023-22123
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
61
| Oracle Financial Services Applications 安全漏洞
| CNNVD-202310-1430
| CVE-2023-22122
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
62
| Oracle Fusion Middleware 安全漏洞
| CNNVD-202310-1431
| CVE-2023-22126
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
63
| Oracle Financial Services Applications 安全漏洞
| CNNVD-202310-1432
| CVE-2023-22124
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
64
| Oracle Financial Services Applications 安全漏洞
| CNNVD-202310-1433
| CVE-2023-22125
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
65
| Oracle Financial Services Applications 安全漏洞
| CNNVD-202310-1434
| CVE-2023-22121
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
66
| Oracle Fusion Middleware 安全漏洞
| CNNVD-202310-1436
| CVE-2023-22127
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
67
| Oracle Solaris 安全漏洞
| CNNVD-202310-1437
| CVE-2023-22129
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
68
| Oracle Sun ZFS Storage Appliance 安全漏洞
| CNNVD-202310-1458
| CVE-2023-22130
| 中危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
69
| Oracle Java SE 安全漏洞
| CNNVD-202310-1364
| CVE-2023-22025
| 低危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
70
| Oracle Database Server 安全漏洞
| CNNVD-202310-1382
| CVE-2023-22074
| 低危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
71
| Oracle Database Server 安全漏洞
| CNNVD-202310-1383
| CVE-2023-22075
| 低危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
72
| Oracle MySQL 安全漏洞
| CNNVD-202310-1421
| CVE-2023-22113
| 低危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
73
| Oracle Solaris 安全漏洞
| CNNVD-202310-1435
| CVE-2023-22128
| 低危
| https://www.oracle.com/security-alerts/cpuoct2023.html
|
序号
| 漏洞名称
| CNNVD编号
| CVE编号
| 危害等级
| 厂商
| 官方链接
|
1
| Apache Commons Configuration 输入验证错误漏洞
| CNNVD-202003-821
| CVE-2020-1953
| 超危
| Apache基金会
| https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600@%3Cannounce.tomcat.apache.org%3E
|
2
| Apache Hadoop 缓冲区错误漏洞
| CNNVD-202206-1079
| CVE-2021-37404
| 超危
| Apache基金会
| https://lists.apache.org/thread/2h56ztcj3ojc66qzf1nno88vjw9vd4wo
|
3
| Encode OSS httpx 输入验证错误漏洞
| CNNVD-202204-4567
| CVE-2021-41945
| 超危
| Encode OSS
| https://github.com/encode/
|
4
| Sanitize 输入验证错误漏洞
| CNNVD-202110-1259
| CVE-2021-42575
| 超危
| 个人开发者
| https://owasp.org/www-project-java-html-sanitizer/
|
5
| SnakeYAML 代码问题漏洞
| CNNVD-202212-1820
| CVE-2022-1471
| 超危
| 个人开发者
| https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
|
6
| Apache Hadoop 操作系统命令注入漏洞
| CNNVD-202208-2167
| CVE-2022-25168
| 超危
| Apache基金会
| https://lists.apache.org/thread/mxqnb39jfrwgs3j6phwvlrfq4mlox130
|
7
| Apache Hadoop 后置链接漏洞
| CNNVD-202204-2605
| CVE-2022-26612
| 超危
| Apache基金会
| https://lists.apache.org/thread/hslo7wzw2449gv1jyjk8g6ttd7935fyz
|
8
| Apache Maven 命令注入漏洞
| CNNVD-202204-4397
| CVE-2022-29599
| 超危
| Apache基金会
| http://github.com/apache/maven-shared-utils/pull/40
|
9
| Apache Commons Configuration 代码注入漏洞
| CNNVD-202207-428
| CVE-2022-33980
| 超危
| Apache基金会
| https://lists.apache.org/thread/tdf5n7j80lfxdhs2764vn0xmpfodm87s
|
10
| Scala 代码问题漏洞
| CNNVD-202209-2463
| CVE-2022-36944
| 超危
| Scala
| https://www.scala-lang.org/download/
|
11
| XKCP 输入验证错误漏洞
| CNNVD-202210-1541
| CVE-2022-37454
| 超危
| XKCP
| https://github.com/XKCP/XKCP/commit/fdc6fef075f4e81d6b1bc38364248975e08e340a
|
12
| Apache Commons BCEL 缓冲区错误漏洞
| CNNVD-202211-2199
| CVE-2022-42920
| 超危
| Apache基金会
| https://lists.apache.org/thread/lfxk7q8qmnh5bt9jm6nmjlv5hsxjhrz4
|
13
| Spring Framework 安全漏洞
| CNNVD-202304-1732
| CVE-2023-20873
| 超危
| Spring
| https://spring.io/security/cve-2023-20873
|
14
| Apache Spark 安全漏洞
| CNNVD-202304-1307
| CVE-2023-22946
| 超危
| Apache基金会
| https://lists.apache.org/thread/yllfl25xh5tbotjmg93zrq4bzwhqc0gv
|
15
| curl 安全漏洞
| CNNVD-202302-1929
| CVE-2023-23914
| 超危
| 个人开发者
| https://github.com/curl/curl/releases/tag/curl-7_88_1
|
16
| Apache HTTP Server 环境问题漏洞
| CNNVD-202303-456
| CVE-2023-25690
| 超危
| Apache基金会
| https://httpd.apache.org/security/vulnerabilities_24.html
|
17
| Google Go 代码注入漏洞
| CNNVD-202306-638
| CVE-2023-29402
| 超危
| Google
| https://pkg.go.dev/vuln/GO-2023-1839
|
18
| Google Go 代码注入漏洞
| CNNVD-202306-631
| CVE-2023-29404
| 超危
| Google
| https://pkg.go.dev/vuln/GO-2023-1841
|
19
| Google Go 注入漏洞
| CNNVD-202306-630
| CVE-2023-29405
| 超危
| Google
| https://pkg.go.dev/vuln/GO-2023-1842
|
20
| VMware Spring Security 安全漏洞
| CNNVD-202307-1680
| CVE-2023-34034
| 超危
| VMware
| https://spring.io/security/cve-2023-34034
|
21
| PHP 缓冲区错误漏洞
| CNNVD-202308-1102
| CVE-2023-3824
| 超危
| PHP
| https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv
|
22
| OpenSSH 代码问题漏洞
| CNNVD-202307-1721
| CVE-2023-38408
| 超危
| OpenBSD
| https://github.com/openbsd/src/commit/7bc29a9d5cd697290aa056e94ecee6253d3425f8
|
23
| Terracotta Quartz Scheduler 代码注入漏洞
| CNNVD-202307-2214
| CVE-2023-39017
| 超危
| 个人开发者
| https://github.com/quartz-scheduler/quartz/issues/943
|
24
| Ericsson OSCORE 代码注入漏洞
| CNNVD-202307-2216
| CVE-2023-39022
| 超危
| Ericsson
| https://gitlab.com/oscore/liboscore
|
25
| Apache Commons Beanutils 代码问题漏洞
| CNNVD-201908-1140
| CVE-2019-10086
| 高危
| debian
| https://issues.apache.org/jira/browse/BEANUTILS-520
|
26
| libssh2 输入验证错误漏洞
| CNNVD-201910-1276
| CVE-2019-17498
| 高危
| libssh2
| https://github.com/libssh2/libssh2/pull/402/commits/1c6fa92b77e34d089493fe6d3e2c6c8775858b94
|
27
| Python 输入验证错误漏洞
| CNNVD-202007-558
| CVE-2019-20907
| 高危
| Python软件基金会
| https://bugs.python.org/issue39017
|
28
| Python 路径遍历漏洞
| CNNVD-202009-303
| CVE-2019-20916
| 高危
| Python软件基金会
| https://github.com/pypa/pip/issues/6413
|
29
| Apache XmlGraphics Commons 代码问题漏洞
| CNNVD-202102-1587
| CVE-2020-11988
| 高危
| Apache基金会
| https://xmlgraphics.apache.org/security.html
|
30
| Fasterxml Jackson 代码问题漏洞
| CNNVD-202010-622
| CVE-2020-25649
| 高危
| Fasterxml
| https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59
|
31
| FasterXML jackson-databind 缓冲区错误漏洞
| CNNVD-202203-1165
| CVE-2020-36518
| 高危
| 个人开发者
| https://github.com/FasterXML/jackson-databind/issues/2816
|
32
| CodeMirror 资源管理错误漏洞
| CNNVD-202010-1679
| CVE-2020-7760
| 高危
| Codemirror
| https://github.com/codemirror/CodeMirror/commit/55d0333907117c9231ffdf555ae8824705993bbb
|
33
| Apache Hadoop 安全漏洞
| CNNVD-202101-2280
| CVE-2020-9492
| 高危
| Apache基金会
| https://lists.apache.org/thread.html/r513758942356ccd0d14538ba18a09903fc72716d74be1cb727ea91ff%40%3Cgeneral.hadoop.apache.org%3E
|
34
| Eclipse Jetty 资源管理错误漏洞
| CNNVD-202104-034
| CVE-2021-28165
| 高危
| Eclipse基金会
| https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w
|
35
| Apache Hadoop 路径遍历漏洞
| CNNVD-202206-1473
| CVE-2021-33036
| 高危
| Apache基金会
| https://lists.apache.org/thread/ctr84rmo3xd2tzqcx2b277c8z692vhl5
|
36
| Netty 资源管理错误漏洞
| CNNVD-202110-1442
| CVE-2021-37136
| 高危
| Netty社区
| https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv
|
37
| Github jsoup 安全漏洞
| CNNVD-202108-1636
| CVE-2021-37714
| 高危
| 个人开发者
| https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c
|
38
| Apache Santuario 信息泄露漏洞
| CNNVD-202109-1259
| CVE-2021-40690
| 高危
| Apache基金会
| https://santuario.apache.org/javaindex.html
|
39
| Apache Avro 资源管理错误漏洞
| CNNVD-202201-422
| CVE-2021-43045
| 高危
| Apache基金会
| https://lists.apache.org/thread/5fttw9vk6gd2p3b846nox7hcj5469xfd
|
40
| Certifi 数据伪造问题漏洞
| CNNVD-202212-2660
| CVE-2022-23491
| 高危
| Certifi
| https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8
|
41
| Expat 输入验证错误漏洞
| CNNVD-202201-2483
| CVE-2022-23990
| 高危
| 个人开发者
| https://github.com/libexpat/libexpat/pull/551
|
42
| Cyrus Sasl SQL注入漏洞
| CNNVD-202202-1766
| CVE-2022-24407
| 高危
| The Cyrus Team团队
| https://ubuntu.com/security/notices/USN-5301-1
|
43
| Redis 安全漏洞
| CNNVD-202307-1231
| CVE-2022-24834
| 高危
| Redis Labs
| https://github.com/redis/redis/security/advisories/GHSA-p8x2-9v9q-c838
|
44
| nekohtml资源管理错误漏洞
| CNNVD-202204-2918
| CVE-2022-24839
| 高危
| 个人开发者
| https://github.com/sparklemotion/nekohtml/commit/a800fce3b079def130ed42a408ff1d09f89e773d
|
45
| gson 代码问题漏洞
| CNNVD-202205-1791
| CVE-2022-25647
| 高危
| 个人开发者
| https://github.com/google/gson/pull/1991/files
|
46
| curl 安全漏洞
| CNNVD-202205-3032
| CVE-2022-27778
| 高危
| 个人开发者
| https://curl.se/docs/CVE-2022-27778.html
|
47
| curl 代码问题漏洞
| CNNVD-202205-2982
| CVE-2022-27780
| 高危
| 个人开发者
| https://curl.se/docs/CVE-2022-27780.html
|
48
| curl 安全漏洞
| CNNVD-202205-2986
| CVE-2022-27781
| 高危
| 个人开发者
| https://curl.se/docs/CVE-2022-27781.html
|
49
| curl 信任管理问题漏洞
| CNNVD-202205-2991
| CVE-2022-27782
| 高危
| 个人开发者
| https://curl.se/docs/CVE-2022-27782.html
|
50
| HtmlUnit 安全漏洞
| CNNVD-202204-4297
| CVE-2022-29546
| 高危
| 个人开发者
| https://github.com/HtmlUnit/htmlunit-neko/security/advisories/GHSA-6jmm-mp6w-4rrg
|
51
| Moment.js 资源管理错误漏洞
| CNNVD-202207-502
| CVE-2022-31129
| 高危
| 个人开发者
| https://github.com/moment/moment/pull/6015#issuecomment-1152961973
|
52
| Google protobuf 安全漏洞
| CNNVD-202210-769
| CVE-2022-3171
| 高危
| Google
| https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2
|
53
| XStream 缓冲区错误漏洞
| CNNVD-202209-1234
| CVE-2022-40151
| 高危
| XStream
| https://github.com/x-stream/xstream/issues/304
|
54
| XStream 缓冲区错误漏洞
| CNNVD-202209-1230
| CVE-2022-40152
| 高危
| XStream
| https://github.com/x-stream/xstream/issues/304
|
55
| PCRE2 输入验证错误漏洞
| CNNVD-202307-1523
| CVE-2022-41409
| 高危
| PCRE2Project
| https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35
|
56
| Apache XML Graphics Batik 代码问题漏洞
| CNNVD-202210-1712
| CVE-2022-41704
| 高危
| Apache基金会
| https://lists.apache.org/thread/hplhx0o74jb7blj39fm4kw3otcnjd6xf
|
57
| Netty 安全漏洞
| CNNVD-202212-2914
| CVE-2022-41881
| 高危
| Netty社区
| https://github.com/netty/netty/security/advisories/GHSA-fx2c-96vj-985v
|
58
| XStream 安全漏洞
| CNNVD-202212-4034
| CVE-2022-41966
| 高危
| XStream
| https://x-stream.github.io/CVE-2022-41966.html
|
59
| FasterXML jackson-databind 代码问题漏洞
| CNNVD-202210-007
| CVE-2022-42003
| 高危
| FasterXML
| https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33
|
60
| FasterXML jackson-databind 代码问题漏洞
| CNNVD-202210-006
| CVE-2022-42004
| 高危
| FasterXML
| https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88
|
61
| Apache XML Graphics Batik 代码问题漏洞
| CNNVD-202210-1707
| CVE-2022-42890
| 高危
| Apache基金会
| https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly
|
62
| MIT Kerberos 输入验证错误漏洞
| CNNVD-202211-2910
| CVE-2022-42898
| 高危
| MIT
| https://web.mit.edu/kerberos/
|
63
| curl 资源管理错误漏洞
| CNNVD-202210-2217
| CVE-2022-42915
| 高危
| curl
| https://curl.se/docs/CVE-2022-42915.html
|
64
| Python 安全漏洞
| CNNVD-202210-2513
| CVE-2022-42919
| 高危
| Python基金会
| https://github.com/python/cpython/issues/97514
|
65
| curl 安全漏洞
| CNNVD-202212-3665
| CVE-2022-43551
| 高危
| 个人开发者
| https://curl.se/docs/CVE-2022-43551.html
|
66
| libexpat 资源管理错误漏洞
| CNNVD-202210-1676
| CVE-2022-43680
| 高危
| 个人开发者
| https://github.com/libexpat/libexpat/issues/649
|
67
| Apache XML Graphics Batik 代码问题漏洞
| CNNVD-202308-1802
| CVE-2022-44729
| 高危
| Apache基金会
| https://lists.apache.org/thread/hco2nw1typoorz33qzs0fcdx0ws6d6j2
|
68
| Red Hat Undertow 安全漏洞
| CNNVD-202212-3304
| CVE-2022-4492
| 高危
| Red Hat
| https://undertow.io/
|
69
| Python 资源管理错误漏洞
| CNNVD-202211-2414
| CVE-2022-45061
| 高危
| Python基金会
| https://python-security.readthedocs.io/vuln/slow-idna-large-strings.html
|
70
| Hutool 缓冲区错误漏洞
| CNNVD-202212-3131
| CVE-2022-45688
| 高危
| Dromara社区
| https://github.com/dromara/hutool/issues/2748
|
71
| Hutool 缓冲区错误漏洞
| CNNVD-202212-3129
| CVE-2022-45690
| 高危
| Dromara社区
| https://github.com/dromara/hutool/issues/2746
|
72
| SQLite 安全漏洞
| CNNVD-202212-2843
| CVE-2022-46908
| 高危
| 个人开发者
| https://sqlite.org/src/info/cefc032473ac5ad2
|
73
| jszip 路径遍历漏洞
| CNNVD-202301-2295
| CVE-2022-48285
| 高危
| 个人开发者
| https://github.com/Stuk/jszip/releases/tag/v3.10.1
|
74
| Zstandard 资源管理错误漏洞
| CNNVD-202303-2716
| CVE-2022-4899
| 高危
| Facebook
| https://github.com/facebook/zstd/pull/3220
|
75
| GnuTLS 安全漏洞
| CNNVD-202302-884
| CVE-2023-0361
| 高危
| 个人开发者
| https://gitlab.com/gnutls/gnutls/-/issues/1050
|
76
| OpenSSL 信任管理问题漏洞
| CNNVD-202303-1681
| CVE-2023-0464
| 高危
| OpenSSL
| https://www.openssl.org/news/secadv/20230322.txt
|
77
| PHP 安全漏洞
| CNNVD-202302-1356
| CVE-2023-0568
| 高危
| PHP
| https://bugs.php.net/bug.php?id=81746
|
78
| PHP 资源管理错误漏洞
| CNNVD-202302-1353
| CVE-2023-0662
| 高危
| PHP
| https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv
|
79
| netplex json-smart 安全漏洞
| CNNVD-202303-1658
| CVE-2023-1370
| 高危
| netplex
| https://netplex.github.io/json-smart/
|
80
| Jettison 安全漏洞
| CNNVD-202303-1656
| CVE-2023-1436
| 高危
| Jettison
| https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/
|
81
| Spring Framework 安全漏洞
| CNNVD-202303-2401
| CVE-2023-20860
| 高危
| Spring
| https://spring.io/security/cve-2023-20860
|
82
| Spring Framework 资源管理错误漏洞
| CNNVD-202305-2284
| CVE-2023-20883
| 高危
| Spring
| https://spring.io/security/cve-2023-20883
|
83
| Apache Commons FileUpload 安全漏洞
| CNNVD-202302-1610
| CVE-2023-24998
| 高危
| Apache基金会
| https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy
|
84
| libcap 输入验证错误漏洞
| CNNVD-202306-415
| CVE-2023-2603
| 高危
| 个人开发者
| https://www.x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf
|
85
| systemd 安全漏洞
| CNNVD-202303-210
| CVE-2023-26604
| 高危
| 个人开发者
| https://github.com/systemd/systemd/blob/main/NEWS#L4335
|
86
| Apache HTTP Server 环境问题漏洞
| CNNVD-202303-452
| CVE-2023-27522
| 高危
| Apache基金会
| https://httpd.apache.org/security/vulnerabilities_24.html
|
87
| curl 注入漏洞
| CNNVD-202303-1551
| CVE-2023-27533
| 高危
| 个人开发者
| https://curl.se/download.html
|
88
| curl 路径遍历漏洞
| CNNVD-202303-1547
| CVE-2023-27534
| 高危
| 个人开发者
| https://curl.se/download.html
|
89
| libcurl 资源管理错误漏洞
| CNNVD-202305-1724
| CVE-2023-28319
| 高危
| 个人开发者
| https://bugzilla.redhat.com/show_bug.cgi?id=2196778
|
90
| Apache Tomcat 安全漏洞
| CNNVD-202305-1931
| CVE-2023-28709
| 高危
| Apache基金会
| https://lists.apache.org/thread/7wvxonzwb7k9hx9jt3q33cmy7j97jo3j
|
91
| Google Go 安全漏洞
| CNNVD-202306-634
| CVE-2023-29403
| 高危
| Google
| https://pkg.go.dev/vuln/GO-2023-1840
|
92
| ncurses 缓冲区错误漏洞
| CNNVD-202304-1122
| CVE-2023-29491
| 高危
| 个人开发者
| https://invisible-island.net/ncurses/NEWS.html#index-t20230408
|
93
| Google Guava 安全漏洞
| CNNVD-202306-1141
| CVE-2023-2976
| 高危
| Google
| https://github.com/google/guava
|
94
| Snowflake JDBC 命令注入漏洞
| CNNVD-202304-1210
| CVE-2023-30535
| 高危
| Snowflake
| https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-4g3j-c4wg-6j7x
|
95
| nodejs 安全漏洞
| CNNVD-202306-2131
| CVE-2023-30589
| 高危
| nodejs
| https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
|
96
| Flask 安全漏洞
| CNNVD-202305-091
| CVE-2023-30861
| 高危
| Pallets
| https://github.com/pallets/flask/releases/tag/2.3.2
|
97
| Linux kernel 缓冲区错误漏洞
| CNNVD-202306-2110
| CVE-2023-3090
| 高危
| Linux基金会
| https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=90cbed5247439a966b645b34eb0a2e037836ea8e
|
98
| Linux kernel 资源管理错误漏洞
| CNNVD-202306-2093
| CVE-2023-3390
| 高危
| Linux基金会
| https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97
|
99
| Apache Struts 安全漏洞
| CNNVD-202306-1079
| CVE-2023-34396
| 高危
| Apache基金会
| https://cwiki.apache.org/confluence/display/WW/S2-064
|
100
| Apache Tomcat 安全漏洞
| CNNVD-202306-1525
| CVE-2023-34981
| 高危
| Apache基金会
| https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz
|
101
| Linux kernel 缓冲区错误漏洞
| CNNVD-202307-201
| CVE-2023-35001
| 高危
| Linux基金会
| https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/
|
102
| Linux kernel 缓冲区错误漏洞
| CNNVD-202306-1333
| CVE-2023-35788
| 高危
| Linux基金会
| https://git.kernel.org/linus/4d56304e5827c8cc8cc18c75343d283af7c4825c
|
103
| Okio 安全漏洞
| CNNVD-202307-1161
| CVE-2023-3635
| 高危
| square
| https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b
|
104
| Redis 安全漏洞
| CNNVD-202307-786
| CVE-2023-36824
| 高危
| Redis Labs
| https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3
|
105
| Linux kernel 资源管理错误漏洞
| CNNVD-202307-1815
| CVE-2023-3776
| 高危
| Linux基金会
| https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0323bce598eea038714f941ce2b22541c46d488f
|
106
| curl 安全漏洞
| CNNVD-202309-1067
| CVE-2023-38039
| 高危
| curl
| https://github.com/curl/curl
|
107
| PHP 代码问题漏洞
| CNNVD-202308-1104
| CVE-2023-3823
| 高危
| PHP
| https://github.com/php/php-src/security/advisories/GHSA-3qrf-m4j2-pcrr
|
108
| python-cryptography 信任管理问题漏洞
| CNNVD-202307-1332
| CVE-2023-38325
| 高危
| Cryptographic团队
| https://github.com/pyca/cryptography/issues/9207
|
109
| curl 安全漏洞
| CNNVD-202310-917
| CVE-2023-38545
| 高危
| curl
| https://github.com/curl/curl/commit/fb4415d8aee6c1
|
110
| Linux kernel 资源管理错误漏洞
| CNNVD-202307-2312
| CVE-2023-4004
| 高危
| Linux基金会
| https://www.kernel.org/category/releases.html
|
111
| jQuery 跨站脚本漏洞
| CNNVD-201904-948
| CVE-2019-11358
| 中危
| debian
| https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/
|
112
| jQuery 跨站脚本漏洞
| CNNVD-202004-2429
| CVE-2020-11022
| 中危
| 个人开发者
| https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
|
113
| jQuery 跨站脚本漏洞
| CNNVD-202004-2420
| CVE-2020-11023
| 中危
| 个人开发者
| https://jquery.com/upgrade-guide/3.5/
|
114
| Apache HttpClient 安全漏洞
| CNNVD-202010-372
| CVE-2020-13956
| 中危
| Apache基金会
| https://www.apache.org/
|
115
| Jinja2 资源管理错误漏洞
| CNNVD-202102-010
| CVE-2020-28493
| 中危
| 个人开发者
| https://github.com/pallets/jinja/releases/tag/2.11.3
|
116
| JetBrains Kotlin 授权问题漏洞
| CNNVD-202102-298
| CVE-2020-29582
| 中危
| JetBrains
| https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
|
117
| Zstandard 安全漏洞
| CNNVD-202103-363
| CVE-2021-24031
| 中危
| Facebook
| https://github.com/facebook/zstd/releases/tag/v1.4.9
|
118
| Apache Ant 安全漏洞
| CNNVD-202107-983
| CVE-2021-36373
| 中危
| Apache基金会
| https://ant.apache.org/
|
119
| Apache Ant 安全漏洞
| CNNVD-202107-984
| CVE-2021-36374
| 中危
| Apache基金会
| https://ant.apache.org/
|
120
| Apache Commons Net 输入验证错误漏洞
| CNNVD-202212-2188
| CVE-2021-37533
| 中危
| Apache基金会
| https://lists.apache.org/thread/o6yn9r9x6s94v97264hmgol1sf48mvx7
|
121
| CKEditor 跨站脚本漏洞
| CNNVD-202111-1552
| CVE-2021-41164
| 中危
| 个人开发者
| https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-pvmx-g8h5-cprj
|
122
| CKEditor 跨站脚本漏洞
| CNNVD-202111-1559
| CVE-2021-41165
| 中危
| 个人开发者
| https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7h26-63m7-qhf2
|
123
| jQuery 跨站脚本漏洞
| CNNVD-202110-1843
| CVE-2021-41182
| 中危
| 个人开发者
| https://github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc
|
124
| jQuery 跨站脚本漏洞
| CNNVD-202110-1839
| CVE-2021-41183
| 中危
| 个人开发者
| https://github.com/jquery/jquery-ui/security/advisories/GHSA-j7qv-pgf6-hvh4
|
125
| Openjs Jquery Ui 跨站脚本漏洞
| CNNVD-202110-1845
| CVE-2021-41184
| 中危
| Openjs基金会
| https://github.com/jquery/jquery-ui/security/advisories/GHSA-gpqq-952q-5327
|
126
| JetBrains Kotlin 安全特征问题漏洞
| CNNVD-202202-606
| CVE-2022-24329
| 中危
| JetBrains
| http://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021
|
127
| Apache Portable Runtime 输入验证错误漏洞
| CNNVD-202301-2414
| CVE-2022-25147
| 中危
| Apache基金会
| https://lists.apache.org/thread/np5gjqlohc4f62lr09vrn61vl44cylh8
|
128
| curl 安全漏洞
| CNNVD-202205-3033
| CVE-2022-27779
| 中危
| 个人开发者
| https://curl.se/docs/CVE-2022-27779.html
|
129
| OWASP AntiSamy 跨站脚本漏洞
| CNNVD-202204-4024
| CVE-2022-29577
| 中危
| Owasp基金会
| https://github.com/nahsra/antisamy/releases/tag/v1.6.7
|
130
| curl 安全漏洞
| CNNVD-202205-3034
| CVE-2022-30115
| 中危
| 个人开发者
| https://curl.se/docs/CVE-2022-30115.html
|
131
| jQuery 跨站脚本漏洞
| CNNVD-202207-2121
| CVE-2022-31160
| 中危
| 个人开发者
| https://github.com/jquery/jquery-ui/security/advisories/GHSA-h6gj-6jjq-h8g9
|
132
| jsoup 跨站脚本漏洞
| CNNVD-202208-4329
| CVE-2022-36033
| 中危
| 个人开发者
| https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369
|
133
| Apache HTTP Server 注入漏洞
| CNNVD-202301-1298
| CVE-2022-37436
| 中危
| Apache基金会
| https://httpd.apache.org/security/vulnerabilities_24.html
|
134
| Matthäus G. Chajdas pygments 代码问题漏洞
| CNNVD-202307-1683
| CVE-2022-40896
| 中危
| Matthäus G. Chajdas
| https://pypi.org/project/Pygments/
|
135
| Python 安全漏洞
| CNNVD-202212-3796
| CVE-2022-40897
| 中危
| Python基金会
| https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be
|
136
| Intel Processors 安全漏洞
| CNNVD-202308-755
| CVE-2022-40982
| 中危
| Intel
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html
|
137
| Netty 安全漏洞
| CNNVD-202212-3060
| CVE-2022-41915
| 中危
| Netty社区
| https://github.com/netty/netty/security/advisories/GHSA-hh82-3pmq-7frp
|
138
| Apache XML Graphics Batik 代码问题漏洞
| CNNVD-202308-1801
| CVE-2022-44730
| 中危
| Apache基金会
| https://lists.apache.org/thread/58m5817jr059f4v1zogh0fngj9pwjyj0
|
139
| OpenSSL 信任管理问题漏洞
| CNNVD-202303-2432
| CVE-2023-0465
| 中危
| OpenSSL
| https://www.openssl.org/news/secadv/20230328.txt
|
140
| OpenSSL 信任管理问题漏洞
| CNNVD-202303-2431
| CVE-2023-0466
| 中危
| OpenSSL
| https://www.openssl.org/news/secadv/20230328.txt
|
141
| SUSE Linux Enterprise Server 安全漏洞
| CNNVD-202302-1900
| CVE-2023-0567
| 中危
| SUSE
| https://www.suse.com/support/update/announcement/2023/suse-su-20230476-1
|
142
| OpenSSL 缓冲区错误漏洞
| CNNVD-202304-1714
| CVE-2023-1255
| 中危
| OpenSSL
| https://www.openssl.org/news/vulnerabilities.html#CVE-2023-1255
|
143
| Linux kernel 安全漏洞
| CNNVD-202305-2317
| CVE-2023-2002
| 中危
| Linux基金会
| https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f81f5b2db869
|
144
| AMD EPYC 安全漏洞
| CNNVD-202307-1966
| CVE-2023-20593
| 中危
| AMD
| https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html
|
145
| Spring Framework 安全漏洞
| CNNVD-202303-1917
| CVE-2023-20861
| 中危
| Spring
| https://spring.io/security/cve-2023-20861
|
146
| Spring Framework 安全漏洞
| CNNVD-202304-1667
| CVE-2023-20862
| 中危
| Spring
| https://spring.io/security/cve-2023-20862
|
147
| Spring Framework 安全漏洞
| CNNVD-202304-1094
| CVE-2023-20863
| 中危
| Spring
| https://spring.io/security/cve-2023-20863
|
148
| libssh 授权问题漏洞
| CNNVD-202305-2087
| CVE-2023-2283
| 中危
| libssh
| https://www.debian.org/security/2023/
|
149
| curl 安全漏洞
| CNNVD-202302-1928
| CVE-2023-23915
| 中危
| 个人开发者
| https://github.com/curl/curl/releases/tag/curl-7_88_1
|
150
| curl 安全漏洞
| CNNVD-202302-1927
| CVE-2023-23916
| 中危
| 个人开发者
| https://github.com/curl/curl/releases/tag/curl-7_88_1
|
151
| cryptography 代码问题漏洞
| CNNVD-202302-523
| CVE-2023-23931
| 中危
| Cryptographic
| https://github.com/pyca/cryptography/security/advisories/GHSA-w7pp-m8wf-vj6r
|
152
| Eclipse Jetty 资源管理错误漏洞
| CNNVD-202304-1443
| CVE-2023-26048
| 中危
| Eclipse基金会
| https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8
|
153
| Eclipse Jetty 信息泄露漏洞
| CNNVD-202304-1442
| CVE-2023-26049
| 中危
| Eclipse基金会
| https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c
|
154
| OpenSSL 安全漏洞
| CNNVD-202305-2503
| CVE-2023-2650
| 中危
| OpenSSL
| https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a
|
155
| libcurl 资源管理错误漏洞
| CNNVD-202305-1718
| CVE-2023-28320
| 中危
| curl
| https://bugzilla.redhat.com/show_bug.cgi?id=2196783
|
156
| curl 信任管理问题漏洞
| CNNVD-202305-1719
| CVE-2023-28321
| 中危
| curl
| https://bugzilla.redhat.com/show_bug.cgi?id=2196786
|
157
| CKEditor 跨站脚本漏洞
| CNNVD-202303-1790
| CVE-2023-28439
| 中危
| CKEditor
| https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-vh5c-xwqv-cv9g
|
158
| libxml2 代码问题漏洞
| CNNVD-202304-908
| CVE-2023-28484
| 中危
| 个人开发者
| https://gitlab.gnome.org/GNOME/libxml2/-/commit/647e072ea0a2f12687fa05c172f4c4713fdb0c4f
|
159
| Apache Tomcat 安全漏洞
| CNNVD-202303-1662
| CVE-2023-28708
| 中危
| Apache基金会
| https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67
|
160
| libxml2 资源管理错误漏洞
| CNNVD-202304-907
| CVE-2023-29469
| 中危
| 个人开发者
| https://gitlab.gnome.org/GNOME/libxml2/-/commit/09a2dd453007f9c7205274623acdd73747c22d64
|
161
| OpenSSL 授权问题漏洞
| CNNVD-202307-1295
| CVE-2023-2975
| 中危
| OpenSSL团队
| https://www.openssl.org/news/secadv/20230714.txt
|
162
| nodejs 安全漏洞
| CNNVD-202306-2130
| CVE-2023-30585
| 中危
| nodejs
| https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
|
163
| nodejs 安全漏洞
| CNNVD-202306-2128
| CVE-2023-30588
| 中危
| nodejs
| https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
|
164
| nodejs 安全漏洞
| CNNVD-202306-2129
| CVE-2023-30590
| 中危
| nodejs
| https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
|
165
| PHP 安全特征问题漏洞
| CNNVD-202306-1490
| CVE-2023-3247
| 中危
| PHP
| https://security-tracker.debian.org/tracker/source-package/php7.3
|
166
| Bouncy Castle 信任管理问题漏洞
| CNNVD-202307-168
| CVE-2023-33201
| 中危
| Bouncy Castle
| https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc
|
167
| Spring Security 安全漏洞
| CNNVD-202307-1539
| CVE-2023-34035
| 中危
| Spring
| https://spring.io/security/cve-2023-34035
|
168
| Apache Struts 安全漏洞
| CNNVD-202306-1078
| CVE-2023-34149
| 中危
| Apache基金会
| https://cwiki.apache.org/confluence/display/WW/S2-063
|
169
| OpenSSL 安全漏洞
| CNNVD-202307-1681
| CVE-2023-3446
| 中危
| OpenSSL团队
| https://www.openssl.org/news/secadv/20230719.txt
|
170
| Netty 资源管理错误漏洞
| CNNVD-202306-1639
| CVE-2023-34462
| 中危
| Netty
| https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845
|
171
| FasterXML jackson-databind 代码问题漏洞
| CNNVD-202306-1121
| CVE-2023-35116
| 中危
| FasterXML
| https://github.com/FasterXML/jackson-databind/issues/3972
|
172
| Apache MINA 路径遍历漏洞
| CNNVD-202307-582
| CVE-2023-35887
| 中危
| Apache基金会
| https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2
|
173
| Eclipse Jetty 安全漏洞
| CNNVD-202309-1093
| CVE-2023-36479
| 中危
| Eclipse基金会
| https://github.com/eclipse/jetty.project/security/advisories/GHSA-3gh6-v5v9-6v9j
|
174
| OpenSSL 安全漏洞
| CNNVD-202307-2314
| CVE-2023-3817
| 中危
| OpenSSL团队
| https://www.openssl.org/news/secadv/20230731.txt
|
175
| curl 安全漏洞
| CNNVD-202310-916
| CVE-2023-38546
| 中危
| curl
| https://github.com/curl/curl/releases
|
176
| Eclipse Jetty 安全漏洞
| CNNVD-202309-1102
| CVE-2023-40167
| 中危
| Eclipse基金会
| https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6
|
177
| GCC 安全漏洞
| CNNVD-202309-937
| CVE-2023-4039
| 中危
| 个人开发者
| https://gcc.gnu.org/
|
178
| Apache Tomcat 输入验证错误漏洞
| CNNVD-202308-2096
| CVE-2023-41080
| 中危
| Apache基金会
| https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
|
179
| Eclipse Jetty 安全漏洞
| CNNVD-202309-1113
| CVE-2023-41900
| 中危
| Eclipse基金会
| https://github.com/eclipse/jetty.project/security/advisories/GHSA-pwh8-58vv-vw48
|
180
| Apache Commons Compress 资源管理错误漏洞
| CNNVD-202309-1000
| CVE-2023-42503
| 中危
| Apache基金会
| https://lists.apache.org/thread/5xwcyr600mn074vgxq92tjssrchmc93c
|
181
| MPXJ 安全漏洞
| CNNVD-202211-3516
| CVE-2022-41954
| 低危
| 个人开发者
| https://github.com/joniles/mpxj/security/advisories/GHSA-jf2p-4gqj-849g
|
182
| libcurl 安全漏洞
| CNNVD-202305-1721
| CVE-2023-28322
| 低危
| libcurl
| https://bugzilla.redhat.com/show_bug.cgi?id=2196783
|
吉公网安备 22017202000203号
