丝袜 【缺点通报】CNNVD对于Oracle多个安全缺点的通报
近日丝袜，Oracle官方发布了多个安全缺点的公告，其中Oracle居品自己缺点75个，影响到Oracle居品的其他厂商缺点182个。包括Oracle Fusion Middleware 安全缺点（CNNVD-202310-1377、CVE-2023-22069）、Oracle Fusion Middleware 安全缺点（CNNVD-202310-1381、CVE-2023-22072）等多个缺点。奏凯诓骗上述缺点的袭击者不错在计较系统上实施大肆代码、得到用户数据，擢升权限等。Oracle多个居品和系统受缺点影响。现在，Oracle官方依然发布了缺点斥地补丁，淡薄用户实时证据是否受到缺点影响，尽快遴荐修补要领。
一、 缺点先容
2023年10月17日，Oracle发布了2023年10月份安全更新，共257个缺点的补丁才气，CNNVD对这些缺点进行了收录。本次更新主要涵盖了Oracle Mysql 和 Mysql 组件、Oracle Database Server、Oracle Communications、Oracle BI Publisher、Oracle Hospitality Applications、Oracle MySQL等。CNNVD对其危害品级进行了评价，其中超危缺点27个，高危缺点97个，中危缺点126个，低危缺点7个。Oracle多个居品和系统版块受缺点影响，具体影响限制可考核Oracle官方网站查询：
https://www.oracle.com/security-alerts/cpuoct2023.html
二、缺点确定
这次更新共包括73个新增缺点的补丁才气，其中超危缺点3个，高危缺点11个，中危缺点54个，低危缺点5个。
序号
缺点称号
CNNVD编号
CVE编号
危害品级
官方聚积
1
Oracle Fusion Middleware 安全缺点
CNNVD-202310-1377
CVE-2023-22069
超危
https://www.oracle.com/security-alerts/cpuoct2023.html
2
Oracle Fusion Middleware 安全缺点
CNNVD-202310-1381
CVE-2023-22072
超危
https://www.oracle.com/security-alerts/cpuoct2023.html
3
Oracle Fusion Middleware 安全缺点
CNNVD-202310-1398
CVE-2023-22089
超危
https://www.oracle.com/security-alerts/cpuoct2023.html
4
Oracle Fusion Middleware 安全缺点
CNNVD-202310-1366
CVE-2023-22019
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
5
Oracle Hospitality Applications 安全缺点
CNNVD-202310-1393
CVE-2023-22085
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
6
Oracle Fusion Middleware 安全缺点
CNNVD-202310-1394
CVE-2023-22086
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
7
Oracle Hospitality Applications 安全缺点
CNNVD-202310-1395
CVE-2023-22087
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
8
Oracle MySQL 安全缺点
CNNVD-202310-1401
CVE-2023-22094
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
9
Oracle Virtualization 安全缺点
CNNVD-202310-1407
CVE-2023-22099
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
10
Oracle Virtualization 安全缺点
CNNVD-202310-1408
CVE-2023-22098
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
11
Oracle Virtualization 安全缺点
CNNVD-202310-1409
CVE-2023-22100
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
12
Oracle MySQL 安全缺点
CNNVD-202310-1410
CVE-2023-22102
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
13
Oracle Fusion Middleware 安全缺点
CNNVD-202310-1411
CVE-2023-22101
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
14
Oracle Fusion Middleware 安全缺点
CNNVD-202310-1416
CVE-2023-22108
高危
https://www.oracle.com/security-alerts/cpuoct2023.html
15
Oracle MySQL Server 安全缺点
CNNVD-202310-1361
CVE-2023-22015
韩国伦理片中危
https://www.oracle.com/security-alerts/cpuoct2023.html
16
Oracle Commerce 安全缺点
CNNVD-202310-1367
CVE-2023-22029
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
17
Oracle MySQL 安全缺点
CNNVD-202310-1368
CVE-2023-22026
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
18
Oracle MySQL 安全缺点
CNNVD-202310-1369
CVE-2023-22028
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
19
Oracle MySQL 安全缺点
CNNVD-202310-1370
CVE-2023-22059
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
20
Oracle MySQL Server 安全缺点
CNNVD-202310-1371
CVE-2023-22032
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
21
Oracle MySQL Server 安全缺点
CNNVD-202310-1372
CVE-2023-22065
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
22
Oracle MySQL 安全缺点
CNNVD-202310-1373
CVE-2023-22064
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
23
Oracle Java SE 安全缺点
CNNVD-202310-1374
CVE-2023-22067
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
24
Oracle MySQL Server 安全缺点
CNNVD-202310-1375
CVE-2023-22066
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
25
Oracle MySQL 安全缺点
CNNVD-202310-1376
CVE-2023-22068
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
26
Oracle MySQL 安全缺点
CNNVD-202310-1378
CVE-2023-22070
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
27
Oracle Database Server 安全缺点
CNNVD-202310-1379
CVE-2023-22071
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
28
Oracle Database Server 安全缺点
CNNVD-202310-1380
CVE-2023-22073
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
29
Oracle MySQL Server 安全缺点
CNNVD-202310-1384
CVE-2023-22078
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
30
Oracle Database Server 安全缺点
CNNVD-202310-1385
CVE-2023-22077
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
31
Oracle E-Business Suite 安全缺点
CNNVD-202310-1386
CVE-2023-22076
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
32
Oracle MySQL 安全缺点
CNNVD-202310-1387
CVE-2023-22079
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
33
Oracle Java SE 安全缺点
CNNVD-202310-1388
CVE-2023-22081
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
34
Oracle PeopleSoft Enterprise PeopleTools 安全缺点
CNNVD-202310-1389
CVE-2023-22080
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
35
Oracle Business Intelligence Enterprise Edition 安全缺点
CNNVD-202310-1390
CVE-2023-22082
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
36
Oracle MySQL Server 安全缺点
CNNVD-202310-1391
CVE-2023-22084
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
37
Oracle Communications 安全缺点
CNNVD-202310-1392
CVE-2023-22083
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
38
Oracle PeopleSoft Enterprise CC Common Application Objects 安全缺点
CNNVD-202310-1396
CVE-2023-22090
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
39
Oracle Communications Applications 安全缺点
CNNVD-202310-1397
CVE-2023-22088
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
40
Oracle MySQL 安全缺点
CNNVD-202310-1399
CVE-2023-22092
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
41
Oracle Java SE 安全缺点
CNNVD-202310-1400
CVE-2023-22091
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
42
Oracle E-Business Suite 安全缺点
CNNVD-202310-1402
CVE-2023-22093
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
43
Oracle MySQL Server 安全缺点
CNNVD-202310-1404
CVE-2023-22095
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
44
Oracle MySQL 安全缺点
CNNVD-202310-1405
CVE-2023-22097
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
45
Oracle Database Server 安全缺点
CNNVD-202310-1406
CVE-2023-22096
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
46
Oracle MySQL Server 安全缺点
CNNVD-202310-1412
CVE-2023-22103
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
47
Oracle E-Business Suite 安全缺点
CNNVD-202310-1413
CVE-2023-22106
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
48
Oracle MySQL Server 安全缺点
CNNVD-202310-1414
CVE-2023-22104
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
49
Oracle BI Publisher 安全缺点
CNNVD-202310-1415
CVE-2023-22105
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
50
Oracle E-Business Suite 安全缺点
CNNVD-202310-1417
CVE-2023-22107
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
51
Oracle MySQL Server 安全缺点
CNNVD-202310-1418
CVE-2023-22110
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
52
Oracle Business Intelligence Enterprise Edition 安全缺点
CNNVD-202310-1419
CVE-2023-22109
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
53
Oracle MySQL 安全缺点
CNNVD-202310-1422
CVE-2023-22111
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
54
Oracle MySQL 安全缺点
CNNVD-202310-1423
CVE-2023-22112
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
55
Oracle Financial Services Applications 安全缺点
CNNVD-202310-1424
CVE-2023-22117
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
56
Oracle MySQL 安全缺点
CNNVD-202310-1425
CVE-2023-22115
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
57
Oracle MySQL 安全缺点
CNNVD-202310-1426
CVE-2023-22114
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
58
Oracle Financial Services Applications 安全缺点
CNNVD-202310-1427
CVE-2023-22119
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
59
Oracle Financial Services Applications 安全缺点
CNNVD-202310-1428
CVE-2023-22118
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
60
Oracle Financial Services Applications 安全缺点
CNNVD-202310-1429
CVE-2023-22123
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
61
Oracle Financial Services Applications 安全缺点
CNNVD-202310-1430
CVE-2023-22122
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
62
Oracle Fusion Middleware 安全缺点
CNNVD-202310-1431
CVE-2023-22126
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
63
Oracle Financial Services Applications 安全缺点
CNNVD-202310-1432
CVE-2023-22124
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
64
Oracle Financial Services Applications 安全缺点
CNNVD-202310-1433
CVE-2023-22125
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
65
Oracle Financial Services Applications 安全缺点
CNNVD-202310-1434
CVE-2023-22121
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
66
Oracle Fusion Middleware 安全缺点
CNNVD-202310-1436
CVE-2023-22127
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
67
Oracle Solaris 安全缺点
CNNVD-202310-1437
CVE-2023-22129
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
68
Oracle Sun ZFS Storage Appliance 安全缺点
CNNVD-202310-1458
CVE-2023-22130
中危
https://www.oracle.com/security-alerts/cpuoct2023.html
69
Oracle Java SE 安全缺点
CNNVD-202310-1364
CVE-2023-22025
低危
https://www.oracle.com/security-alerts/cpuoct2023.html
70
Oracle Database Server 安全缺点
CNNVD-202310-1382
CVE-2023-22074
低危
https://www.oracle.com/security-alerts/cpuoct2023.html
71
Oracle Database Server 安全缺点
CNNVD-202310-1383
CVE-2023-22075
低危
https://www.oracle.com/security-alerts/cpuoct2023.html
72
Oracle MySQL 安全缺点
CNNVD-202310-1421
CVE-2023-22113
低危
https://www.oracle.com/security-alerts/cpuoct2023.html
73
Oracle Solaris 安全缺点
CNNVD-202310-1435
CVE-2023-22128
低危
https://www.oracle.com/security-alerts/cpuoct2023.html
这次更新共包括2个更新缺点的补丁才气，其中中危缺点2个。
序号
缺点称号
CNNVD编号
CVE编号
危害品级
官方聚积
1
Oracle Database Server 安全缺点
CNNVD-202301-1354
CVE-2023-21829
中危
https://www.oracle.com/security-alerts/cpujan2028.html
2
Oracle Java SE 安全缺点
CNNVD-202307-1608
CVE-2023-22043
中危
https://www.oracle.com/security-alerts/cpujul2023.html
这次更新共包括182个影响Oracle居品的其他厂商缺点的补丁才气，其中超危缺点24个，高危缺点86个，中危缺点70个，低危缺点2个。
序号
缺点称号
CNNVD编号
CVE编号
危害品级
厂商
官方聚积
1
Apache Commons Configuration 输入考证失实缺点
CNNVD-202003-821
CVE-2020-1953
超危
Apache基金会
https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600@
2
Apache Hadoop 缓冲区失实缺点
CNNVD-202206-1079
CVE-2021-37404
超危
Apache基金会
https://lists.apache.org/thread/2h56ztcj3ojc66qzf1nno88vjw9vd4wo
3
Encode OSS httpx 输入考证失实缺点
CNNVD-202204-4567
CVE-2021-41945
超危
Encode OSS
https://github.com/encode/
4
Sanitize 输入考证失实缺点
CNNVD-202110-1259
CVE-2021-42575
超危
个东谈主开发者
https://owasp.org/www-project-java-html-sanitizer/
5
SnakeYAML 代码问题缺点
CNNVD-202212-1820
CVE-2022-1471
超危
个东谈主开发者
https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
6
Apache Hadoop 操作系统呐喊注入缺点
CNNVD-202208-2167
CVE-2022-25168
超危
Apache基金会
https://lists.apache.org/thread/mxqnb39jfrwgs3j6phwvlrfq4mlox130
7
Apache Hadoop 后置聚积缺点
CNNVD-202204-2605
CVE-2022-26612
超危
Apache基金会
https://lists.apache.org/thread/hslo7wzw2449gv1jyjk8g6ttd7935fyz
8
Apache Maven 呐喊注入缺点
CNNVD-202204-4397
CVE-2022-29599
超危
Apache基金会
-shared-utils/pull/40
9
Apache Commons Configuration 代码注入缺点
CNNVD-202207-428
CVE-2022-33980
超危
Apache基金会
https://lists.apache.org/thread/tdf5n7j80lfxdhs2764vn0xmpfodm87s
10
Scala 代码问题缺点
CNNVD-202209-2463
CVE-2022-36944
超危
Scala
https://www.scala-lang.org/download/
11
XKCP 输入考证失实缺点
CNNVD-202210-1541
CVE-2022-37454
超危
XKCP
https://github.com/XKCP/XKCP/commit/fdc6fef075f4e81d6b1bc38364248975e08e340a
12
Apache Commons BCEL 缓冲区失实缺点
CNNVD-202211-2199
CVE-2022-42920
超危
Apache基金会
https://lists.apache.org/thread/lfxk7q8qmnh5bt9jm6nmjlv5hsxjhrz4
13
Spring Framework 安全缺点
CNNVD-202304-1732
CVE-2023-20873
超危
Spring
https://spring.io/security/cve-2023-20873
14
Apache Spark 安全缺点
CNNVD-202304-1307
CVE-2023-22946
超危
Apache基金会
https://lists.apache.org/thread/yllfl25xh5tbotjmg93zrq4bzwhqc0gv
15
curl 安全缺点
CNNVD-202302-1929
CVE-2023-23914
超危
个东谈主开发者
https://github.com/curl/curl/releases/tag/curl-7_88_1
16
Apache HTTP Server 环境问题缺点
CNNVD-202303-456
CVE-2023-25690
超危
Apache基金会
https://httpd.apache.org/security/vulnerabilities_24.html
17
Google Go 代码注入缺点
CNNVD-202306-638
CVE-2023-29402
超危
https://pkg.go.dev/vuln/GO-2023-1839
18
Google Go 代码注入缺点
CNNVD-202306-631
CVE-2023-29404
超危
https://pkg.go.dev/vuln/GO-2023-1841
19
Google Go 注入缺点
CNNVD-202306-630
CVE-2023-29405
超危
https://pkg.go.dev/vuln/GO-2023-1842
20
VMware Spring Security 安全缺点
CNNVD-202307-1680
CVE-2023-34034
超危
VMware
https://spring.io/security/cve-2023-34034
21
PHP 缓冲区失实缺点
CNNVD-202308-1102
CVE-2023-3824
超危
PHP
https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv
22
OpenSSH 代码问题缺点
CNNVD-202307-1721
CVE-2023-38408
超危
OpenBSD
https://github.com/openbsd/src/commit/7bc29a9d5cd697290aa056e94ecee6253d3425f8
23
Terracotta Quartz Scheduler 代码注入缺点
CNNVD-202307-2214
CVE-2023-39017
超危
个东谈主开发者
https://github.com/quartz-scheduler/quartz/issues/943
24
Ericsson OSCORE 代码注入缺点
CNNVD-202307-2216
CVE-2023-39022
超危
Ericsson
https://gitlab.com/oscore/liboscore
25
Apache Commons Beanutils 代码问题缺点
CNNVD-201908-1140
CVE-2019-10086
高危
debian
https://issues.apache.org/jira/browse/BEANUTILS-520
26
libssh2 输入考证失实缺点
CNNVD-201910-1276
CVE-2019-17498
高危
libssh2
https://github.com/libssh2/libssh2/pull/402/commits/1c6fa92b77e34d089493fe6d3e2c6c8775858b94
27
Python 输入考证失实缺点
CNNVD-202007-558
CVE-2019-20907
高危
Python软件基金会
https://bugs.python.org/issue39017
28
Python 旅途遍历缺点
CNNVD-202009-303
CVE-2019-20916
高危
Python软件基金会
https://github.com/pypa/pip/issues/6413
29
Apache XmlGraphics Commons 代码问题缺点
CNNVD-202102-1587
CVE-2020-11988
高危
Apache基金会
https://xmlgraphics.apache.org/security.html
30
Fasterxml Jackson 代码问题缺点
CNNVD-202010-622
CVE-2020-25649
高危
Fasterxml
https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59
31
FasterXML jackson-databind 缓冲区失实缺点
CNNVD-202203-1165
CVE-2020-36518
高危
个东谈主开发者
https://github.com/FasterXML/jackson-databind/issues/2816
32
CodeMirror 资源处罚失实缺点
CNNVD-202010-1679
CVE-2020-7760
高危
Codemirror
https://github.com/codemirror/CodeMirror/commit/55d0333907117c9231ffdf555ae8824705993bbb
33
Apache Hadoop 安全缺点
CNNVD-202101-2280
CVE-2020-9492
高危
Apache基金会
https://lists.apache.org/thread.html/r513758942356ccd0d14538ba18a09903fc72716d74be1cb727ea91ff@
34
Eclipse Jetty 资源处罚失实缺点
CNNVD-202104-034
CVE-2021-28165
高危
Eclipse基金会
https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w
35
Apache Hadoop 旅途遍历缺点
CNNVD-202206-1473
CVE-2021-33036
高危
Apache基金会
https://lists.apache.org/thread/ctr84rmo3xd2tzqcx2b277c8z692vhl5
36
Netty 资源处罚失实缺点
CNNVD-202110-1442
CVE-2021-37136
高危
Netty社区
https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv
37
Github jsoup 安全缺点
CNNVD-202108-1636
CVE-2021-37714
高危
个东谈主开发者
https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c
38
Apache Santuario 信息走漏缺点
CNNVD-202109-1259
CVE-2021-40690
高危
Apache基金会
https://santuario.apache.org/javaindex.html
39
Apache Avro 资源处罚失实缺点
CNNVD-202201-422
CVE-2021-43045
高危
Apache基金会
https://lists.apache.org/thread/5fttw9vk6gd2p3b846nox7hcj5469xfd
40
Certifi 数据伪造问题缺点
CNNVD-202212-2660
CVE-2022-23491
高危
Certifi
https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8
41
Expat 输入考证失实缺点
CNNVD-202201-2483
CVE-2022-23990
高危
个东谈主开发者
https://github.com/libexpat/libexpat/pull/551
42
Cyrus Sasl SQL注入缺点
CNNVD-202202-1766
CVE-2022-24407
高危
The Cyrus Team团队
https://ubuntu.com/security/notices/USN-5301-1
43
Redis 安全缺点
CNNVD-202307-1231
CVE-2022-24834
高危
Redis Labs
https://github.com/redis/redis/security/advisories/GHSA-p8x2-9v9q-c838
44
nekohtml资源处罚失实缺点
CNNVD-202204-2918
CVE-2022-24839
高危
个东谈主开发者
https://github.com/sparklemotion/nekohtml/commit/a800fce3b079def130ed42a408ff1d09f89e773d
45
gson 代码问题缺点
CNNVD-202205-1791
CVE-2022-25647
高危
个东谈主开发者
https://github.com/google/gson/pull/1991/files
46
curl 安全缺点
CNNVD-202205-3032
CVE-2022-27778
高危
个东谈主开发者
https://curl.se/docs/CVE-2022-27778.html
47
curl 代码问题缺点
CNNVD-202205-2982
CVE-2022-27780
高危
个东谈主开发者
https://curl.se/docs/CVE-2022-27780.html
48
curl 安全缺点
CNNVD-202205-2986
CVE-2022-27781
高危
个东谈主开发者
https://curl.se/docs/CVE-2022-27781.html
49
curl 信任处罚问题缺点
CNNVD-202205-2991
CVE-2022-27782
高危
个东谈主开发者
https://curl.se/docs/CVE-2022-27782.html
50
HtmlUnit 安全缺点
CNNVD-202204-4297
CVE-2022-29546
高危
个东谈主开发者
https://github.com/HtmlUnit/htmlunit-neko/security/advisories/GHSA-6jmm-mp6w-4rrg
51
Moment.js 资源处罚失实缺点
CNNVD-202207-502
CVE-2022-31129
高危
个东谈主开发者
https://github.com/moment/moment/pull/6015#issuecomment-1152961973
52
Google protobuf 安全缺点
CNNVD-202210-769
CVE-2022-3171
高危
https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2
53
XStream 缓冲区失实缺点
CNNVD-202209-1234
CVE-2022-40151
高危
XStream
https://github.com/x-stream/xstream/issues/304
54
XStream 缓冲区失实缺点
CNNVD-202209-1230
CVE-2022-40152
高危
XStream
https://github.com/x-stream/xstream/issues/304
55
PCRE2 输入考证失实缺点
CNNVD-202307-1523
CVE-2022-41409
高危
PCRE2Project
https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35
56
Apache XML Graphics Batik 代码问题缺点
CNNVD-202210-1712
CVE-2022-41704
高危
Apache基金会
https://lists.apache.org/thread/hplhx0o74jb7blj39fm4kw3otcnjd6xf
57
Netty 安全缺点
CNNVD-202212-2914
CVE-2022-41881
高危
Netty社区
https://github.com/netty/netty/security/advisories/GHSA-fx2c-96vj-985v
58
XStream 安全缺点
CNNVD-202212-4034
CVE-2022-41966
高危
XStream
https://x-stream.github.io/CVE-2022-41966.html
59
FasterXML jackson-databind 代码问题缺点
CNNVD-202210-007
CVE-2022-42003
高危
FasterXML
https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33
60
FasterXML jackson-databind 代码问题缺点
CNNVD-202210-006
CVE-2022-42004
高危
FasterXML
https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88
61
Apache XML Graphics Batik 代码问题缺点
CNNVD-202210-1707
CVE-2022-42890
高危
Apache基金会
https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly
62
MIT Kerberos 输入考证失实缺点
CNNVD-202211-2910
CVE-2022-42898
高危
MIT
https://web.mit.edu/kerberos/
63
curl 资源处罚失实缺点
CNNVD-202210-2217
CVE-2022-42915
高危
curl
https://curl.se/docs/CVE-2022-42915.html
64
Python 安全缺点
CNNVD-202210-2513
CVE-2022-42919
高危
Python基金会
https://github.com/python/cpython/issues/97514
65
curl 安全缺点
CNNVD-202212-3665
CVE-2022-43551
高危
个东谈主开发者
https://curl.se/docs/CVE-2022-43551.html
66
libexpat 资源处罚失实缺点
CNNVD-202210-1676
CVE-2022-43680
高危
个东谈主开发者
https://github.com/libexpat/libexpat/issues/649
67
Apache XML Graphics Batik 代码问题缺点
CNNVD-202308-1802
CVE-2022-44729
高危
Apache基金会
https://lists.apache.org/thread/hco2nw1typoorz33qzs0fcdx0ws6d6j2
68
Red Hat Undertow 安全缺点
CNNVD-202212-3304
CVE-2022-4492
高危
Red Hat
https://undertow.io/
69
Python 资源处罚失实缺点
CNNVD-202211-2414
CVE-2022-45061
高危
Python基金会
https://python-security.readthedocs.io/vuln/slow-idna-large-strings.html
70
Hutool 缓冲区失实缺点
CNNVD-202212-3131
CVE-2022-45688
高危
Dromara社区
https://github.com/dromara/hutool/issues/2748
71
Hutool 缓冲区失实缺点
CNNVD-202212-3129
CVE-2022-45690
高危
Dromara社区
https://github.com/dromara/hutool/issues/2746
72
SQLite 安全缺点
CNNVD-202212-2843
CVE-2022-46908
高危
个东谈主开发者
https://sqlite.org/src/info/cefc032473ac5ad2
73
jszip 旅途遍历缺点
CNNVD-202301-2295
CVE-2022-48285
高危
个东谈主开发者
https://github.com/Stuk/jszip/releases/tag/v3.10.1
74
Zstandard 资源处罚失实缺点
CNNVD-202303-2716
CVE-2022-4899
高危
https://github.com/facebook/zstd/pull/3220
75
GnuTLS 安全缺点
CNNVD-202302-884
CVE-2023-0361
高危
个东谈主开发者
https://gitlab.com/gnutls/gnutls/-/issues/1050
76
OpenSSL 信任处罚问题缺点
CNNVD-202303-1681
CVE-2023-0464
高危
OpenSSL
https://www.openssl.org/news/secadv/20230322.txt
77
PHP 安全缺点
CNNVD-202302-1356
CVE-2023-0568
高危
PHP
https://bugs.php.net/bug.php?id=81746
78
PHP 资源处罚失实缺点
CNNVD-202302-1353
CVE-2023-0662
高危
PHP
https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv
79
netplex json-smart 安全缺点
CNNVD-202303-1658
CVE-2023-1370
高危
netplex
https://netplex.github.io/json-smart/
80
Jettison 安全缺点
CNNVD-202303-1656
CVE-2023-1436
高危
Jettison
https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/
81
Spring Framework 安全缺点
CNNVD-202303-2401
CVE-2023-20860
高危
Spring
https://spring.io/security/cve-2023-20860
82
Spring Framework 资源处罚失实缺点
CNNVD-202305-2284
CVE-2023-20883
高危
Spring
https://spring.io/security/cve-2023-20883
83
Apache Commons FileUpload 安全缺点
CNNVD-202302-1610
CVE-2023-24998
高危
Apache基金会
https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy
84
libcap 输入考证失实缺点
CNNVD-202306-415
CVE-2023-2603
高危
个东谈主开发者
https://www.x41-dsec.de/static/reports/X41-libcap-Code-Review-2023-OSTIF-Final-Report.pdf
85
systemd 安全缺点
CNNVD-202303-210
CVE-2023-26604
高危
个东谈主开发者
https://github.com/systemd/systemd/blob/main/NEWS#L4335
86
Apache HTTP Server 环境问题缺点
CNNVD-202303-452
CVE-2023-27522
高危
Apache基金会
https://httpd.apache.org/security/vulnerabilities_24.html
87
curl 注入缺点
CNNVD-202303-1551
CVE-2023-27533
高危
个东谈主开发者
https://curl.se/download.html
88
curl 旅途遍历缺点
CNNVD-202303-1547
CVE-2023-27534
高危
个东谈主开发者
https://curl.se/download.html
89
libcurl 资源处罚失实缺点
CNNVD-202305-1724
CVE-2023-28319
高危
个东谈主开发者
https://bugzilla.redhat.com/show_bug.cgi?id=2196778
90
Apache Tomcat 安全缺点
CNNVD-202305-1931
CVE-2023-28709
高危
Apache基金会
https://lists.apache.org/thread/7wvxonzwb7k9hx9jt3q33cmy7j97jo3j
91
Google Go 安全缺点
CNNVD-202306-634
CVE-2023-29403
高危
https://pkg.go.dev/vuln/GO-2023-1840
92
ncurses 缓冲区失实缺点
CNNVD-202304-1122
CVE-2023-29491
高危
个东谈主开发者
https://invisible-island.net/ncurses/NEWS.html#index-t20230408
93
Google Guava 安全缺点
CNNVD-202306-1141
CVE-2023-2976
高危
https://github.com/google/guava
94
Snowflake JDBC 呐喊注入缺点
CNNVD-202304-1210
CVE-2023-30535
高危
Snowflake
https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-4g3j-c4wg-6j7x
95
nodejs 安全缺点
CNNVD-202306-2131
CVE-2023-30589
高危
nodejs
https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
96
Flask 安全缺点
CNNVD-202305-091
CVE-2023-30861
高危
Pallets
https://github.com/pallets/flask/releases/tag/2.3.2
97
Linux kernel 缓冲区失实缺点
CNNVD-202306-2110
CVE-2023-3090
高危
Linux基金会
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=90cbed5247439a966b645b34eb0a2e037836ea8e
98
Linux kernel 资源处罚失实缺点
CNNVD-202306-2093
CVE-2023-3390
高危
Linux基金会
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97
99
Apache Struts 安全缺点
CNNVD-202306-1079
CVE-2023-34396
高危
Apache基金会
https://cwiki.apache.org/confluence/display/WW/S2-064
100
Apache Tomcat 安全缺点
CNNVD-202306-1525
CVE-2023-34981
高危
Apache基金会
https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz
101
Linux kernel 缓冲区失实缺点
CNNVD-202307-201
CVE-2023-35001
高危
Linux基金会
https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/
102
Linux kernel 缓冲区失实缺点
CNNVD-202306-1333
CVE-2023-35788
高危
Linux基金会
https://git.kernel.org/linus/4d56304e5827c8cc8cc18c75343d283af7c4825c
103
Okio 安全缺点
CNNVD-202307-1161
CVE-2023-3635
高危
square
https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b
104
Redis 安全缺点
CNNVD-202307-786
CVE-2023-36824
高危
Redis Labs
https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3
105
Linux kernel 资源处罚失实缺点
CNNVD-202307-1815
CVE-2023-3776
高危
Linux基金会
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0323bce598eea038714f941ce2b22541c46d488f
106
curl 安全缺点
CNNVD-202309-1067
CVE-2023-38039
高危
curl
https://github.com/curl/curl
107
PHP 代码问题缺点
CNNVD-202308-1104
CVE-2023-3823
高危
PHP
https://github.com/php/php-src/security/advisories/GHSA-3qrf-m4j2-pcrr
108
python-cryptography 信任处罚问题缺点
CNNVD-202307-1332
CVE-2023-38325
高危
Cryptographic团队
https://github.com/pyca/cryptography/issues/9207
109
curl 安全缺点
CNNVD-202310-917
CVE-2023-38545
高危
curl
https://github.com/curl/curl/commit/fb4415d8aee6c1
110
Linux kernel 资源处罚失实缺点
CNNVD-202307-2312
CVE-2023-4004
高危
Linux基金会
https://www.kernel.org/category/releases.html
111
jQuery 跨站剧本缺点
CNNVD-201904-948
CVE-2019-11358
中危
debian
https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/
112
jQuery 跨站剧本缺点
CNNVD-202004-2429
CVE-2020-11022
中危
个东谈主开发者
https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
113
jQuery 跨站剧本缺点
CNNVD-202004-2420
CVE-2020-11023
中危
个东谈主开发者
https://jquery.com/upgrade-guide/3.5/
114
Apache HttpClient 安全缺点
CNNVD-202010-372
CVE-2020-13956
中危
Apache基金会
https://www.apache.org/
115
Jinja2 资源处罚失实缺点
CNNVD-202102-010
CVE-2020-28493
中危
个东谈主开发者
https://github.com/pallets/jinja/releases/tag/2.11.3
116
JetBrains Kotlin 授权问题缺点
CNNVD-202102-298
CVE-2020-29582
中危
JetBrains
https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
117
Zstandard 安全缺点
CNNVD-202103-363
CVE-2021-24031
中危
https://github.com/facebook/zstd/releases/tag/v1.4.9
118
Apache Ant 安全缺点
CNNVD-202107-983
CVE-2021-36373
中危
Apache基金会
https://ant.apache.org/
119
Apache Ant 安全缺点
CNNVD-202107-984
CVE-2021-36374
中危
Apache基金会
https://ant.apache.org/
120
Apache Commons Net 输入考证失实缺点
CNNVD-202212-2188
CVE-2021-37533
中危
Apache基金会
https://lists.apache.org/thread/o6yn9r9x6s94v97264hmgol1sf48mvx7
121
CKEditor 跨站剧本缺点
CNNVD-202111-1552
CVE-2021-41164
中危
个东谈主开发者
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-pvmx-g8h5-cprj
122
CKEditor 跨站剧本缺点
CNNVD-202111-1559
CVE-2021-41165
中危
个东谈主开发者
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7h26-63m7-qhf2
123
jQuery 跨站剧本缺点
CNNVD-202110-1843
CVE-2021-41182
中危
个东谈主开发者
https://github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc
124
jQuery 跨站剧本缺点
CNNVD-202110-1839
CVE-2021-41183
中危
个东谈主开发者
https://github.com/jquery/jquery-ui/security/advisories/GHSA-j7qv-pgf6-hvh4
125
Openjs Jquery Ui 跨站剧本缺点
CNNVD-202110-1845
CVE-2021-41184
中危
Openjs基金会
https://github.com/jquery/jquery-ui/security/advisories/GHSA-gpqq-952q-5327
126
JetBrains Kotlin 安全特征问题缺点
CNNVD-202202-606
CVE-2022-24329
中危
JetBrains
-security-bulletin-q4-2021
127
Apache Portable Runtime 输入考证失实缺点
CNNVD-202301-2414
CVE-2022-25147
中危
Apache基金会
https://lists.apache.org/thread/np5gjqlohc4f62lr09vrn61vl44cylh8
128
curl 安全缺点
CNNVD-202205-3033
CVE-2022-27779
中危
个东谈主开发者
https://curl.se/docs/CVE-2022-27779.html
129
OWASP AntiSamy 跨站剧本缺点
CNNVD-202204-4024
CVE-2022-29577
中危
Owasp基金会
https://github.com/nahsra/antisamy/releases/tag/v1.6.7
130
curl 安全缺点
CNNVD-202205-3034
CVE-2022-30115
中危
个东谈主开发者
https://curl.se/docs/CVE-2022-30115.html
131
jQuery 跨站剧本缺点
CNNVD-202207-2121
CVE-2022-31160
中危
个东谈主开发者
https://github.com/jquery/jquery-ui/security/advisories/GHSA-h6gj-6jjq-h8g9
132
jsoup 跨站剧本缺点
CNNVD-202208-4329
CVE-2022-36033
中危
个东谈主开发者
https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369
133
Apache HTTP Server 注入缺点
CNNVD-202301-1298
CVE-2022-37436
中危
Apache基金会
https://httpd.apache.org/security/vulnerabilities_24.html
134
Matthäus G. Chajdas pygments 代码问题缺点
CNNVD-202307-1683
CVE-2022-40896
中危
Matthäus G. Chajdas
https://pypi.org/project/Pygments/
135
Python 安全缺点
CNNVD-202212-3796
CVE-2022-40897
中危
Python基金会
https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be
136
Intel Processors 安全缺点
CNNVD-202308-755
CVE-2022-40982
中危
Intel
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html
137
Netty 安全缺点
CNNVD-202212-3060
CVE-2022-41915
中危
Netty社区
https://github.com/netty/netty/security/advisories/GHSA-hh82-3pmq-7frp
138
Apache XML Graphics Batik 代码问题缺点
CNNVD-202308-1801
CVE-2022-44730
中危
Apache基金会
https://lists.apache.org/thread/58m5817jr059f4v1zogh0fngj9pwjyj0
139
OpenSSL 信任处罚问题缺点
CNNVD-202303-2432
CVE-2023-0465
中危
OpenSSL
https://www.openssl.org/news/secadv/20230328.txt
140
OpenSSL 信任处罚问题缺点
CNNVD-202303-2431
CVE-2023-0466
中危
OpenSSL
https://www.openssl.org/news/secadv/20230328.txt
141
SUSE Linux Enterprise Server 安全缺点
CNNVD-202302-1900
CVE-2023-0567
中危
SUSE
https://www.suse.com/support/update/announcement/2023/suse-su-20230476-1
142
OpenSSL 缓冲区失实缺点
CNNVD-202304-1714
CVE-2023-1255
中危
OpenSSL
https://www.openssl.org/news/vulnerabilities.html#CVE-2023-1255
143
Linux kernel 安全缺点
CNNVD-202305-2317
CVE-2023-2002
中危
Linux基金会
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f81f5b2db869
144
AMD EPYC 安全缺点
CNNVD-202307-1966
CVE-2023-20593
中危
AMD
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html
145
Spring Framework 安全缺点
CNNVD-202303-1917
CVE-2023-20861
中危
Spring
https://spring.io/security/cve-2023-20861
146
Spring Framework 安全缺点
CNNVD-202304-1667
CVE-2023-20862
中危
Spring
https://spring.io/security/cve-2023-20862
147
Spring Framework 安全缺点
CNNVD-202304-1094
CVE-2023-20863
中危
Spring
https://spring.io/security/cve-2023-20863
148
libssh 授权问题缺点
CNNVD-202305-2087
CVE-2023-2283
中危
libssh
https://www.debian.org/security/2023/
149
curl 安全缺点
CNNVD-202302-1928
CVE-2023-23915
中危
个东谈主开发者
https://github.com/curl/curl/releases/tag/curl-7_88_1
150
curl 安全缺点
CNNVD-202302-1927
CVE-2023-23916
中危
个东谈主开发者
https://github.com/curl/curl/releases/tag/curl-7_88_1
151
cryptography 代码问题缺点
CNNVD-202302-523
CVE-2023-23931
中危
Cryptographic
https://github.com/pyca/cryptography/security/advisories/GHSA-w7pp-m8wf-vj6r
152
Eclipse Jetty 资源处罚失实缺点
CNNVD-202304-1443
CVE-2023-26048
中危
Eclipse基金会
https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8
153
Eclipse Jetty 信息走漏缺点
CNNVD-202304-1442
CVE-2023-26049
中危
Eclipse基金会
https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c
154
OpenSSL 安全缺点
CNNVD-202305-2503
CVE-2023-2650
中危
OpenSSL
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a
155
libcurl 资源处罚失实缺点
CNNVD-202305-1718
CVE-2023-28320
中危
curl
https://bugzilla.redhat.com/show_bug.cgi?id=2196783
156
curl 信任处罚问题缺点
CNNVD-202305-1719
CVE-2023-28321
中危
curl
https://bugzilla.redhat.com/show_bug.cgi?id=2196786
157
CKEditor 跨站剧本缺点
CNNVD-202303-1790
CVE-2023-28439
中危
CKEditor
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-vh5c-xwqv-cv9g
158
libxml2 代码问题缺点
CNNVD-202304-908
CVE-2023-28484
中危
个东谈主开发者
https://gitlab.gnome.org/GNOME/libxml2/-/commit/647e072ea0a2f12687fa05c172f4c4713fdb0c4f
159
Apache Tomcat 安全缺点
CNNVD-202303-1662
CVE-2023-28708
中危
Apache基金会
https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67
160
libxml2 资源处罚失实缺点
CNNVD-202304-907
CVE-2023-29469
中危
个东谈主开发者
https://gitlab.gnome.org/GNOME/libxml2/-/commit/09a2dd453007f9c7205274623acdd73747c22d64
161
OpenSSL 授权问题缺点
CNNVD-202307-1295
CVE-2023-2975
中危
OpenSSL团队
https://www.openssl.org/news/secadv/20230714.txt
162
nodejs 安全缺点
CNNVD-202306-2130
CVE-2023-30585
中危
nodejs
https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
163
nodejs 安全缺点
CNNVD-202306-2128
CVE-2023-30588
中危
nodejs
https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
164
nodejs 安全缺点
CNNVD-202306-2129
CVE-2023-30590
中危
nodejs
https://nodejs.org/en/blog/vulnerability/june-2023-security-releases
165
PHP 安全特征问题缺点
CNNVD-202306-1490
CVE-2023-3247
中危
PHP
https://security-tracker.debian.org/tracker/source-package/php7.3
166
Bouncy Castle 信任处罚问题缺点
CNNVD-202307-168
CVE-2023-33201
中危
Bouncy Castle
https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc
167
Spring Security 安全缺点
CNNVD-202307-1539
CVE-2023-34035
中危
Spring
https://spring.io/security/cve-2023-34035
168
Apache Struts 安全缺点
CNNVD-202306-1078
CVE-2023-34149
中危
Apache基金会
https://cwiki.apache.org/confluence/display/WW/S2-063
169
OpenSSL 安全缺点
CNNVD-202307-1681
CVE-2023-3446
中危
OpenSSL团队
https://www.openssl.org/news/secadv/20230719.txt
170
Netty 资源处罚失实缺点
CNNVD-202306-1639
CVE-2023-34462
中危
Netty
https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845
171
FasterXML jackson-databind 代码问题缺点
CNNVD-202306-1121
CVE-2023-35116
中危
FasterXML
https://github.com/FasterXML/jackson-databind/issues/3972
172
Apache MINA 旅途遍历缺点
CNNVD-202307-582
CVE-2023-35887
中危
Apache基金会
https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2
173
Eclipse Jetty 安全缺点
CNNVD-202309-1093
CVE-2023-36479
中危
Eclipse基金会
https://github.com/eclipse/jetty.project/security/advisories/GHSA-3gh6-v5v9-6v9j
174
OpenSSL 安全缺点
CNNVD-202307-2314
CVE-2023-3817
中危
OpenSSL团队
https://www.openssl.org/news/secadv/20230731.txt
175
curl 安全缺点
CNNVD-202310-916
CVE-2023-38546
中危
curl
https://github.com/curl/curl/releases
176
Eclipse Jetty 安全缺点
CNNVD-202309-1102
CVE-2023-40167
中危
Eclipse基金会
https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6
177
GCC 安全缺点
CNNVD-202309-937
CVE-2023-4039
中危
个东谈主开发者
https://gcc.gnu.org/
178
Apache Tomcat 输入考证失实缺点
CNNVD-202308-2096
CVE-2023-41080
中危
Apache基金会
https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
179
Eclipse Jetty 安全缺点
CNNVD-202309-1113
CVE-2023-41900
中危
Eclipse基金会
https://github.com/eclipse/jetty.project/security/advisories/GHSA-pwh8-58vv-vw48
180
Apache Commons Compress 资源处罚失实缺点
CNNVD-202309-1000
CVE-2023-42503
中危
Apache基金会
https://lists.apache.org/thread/5xwcyr600mn074vgxq92tjssrchmc93c
181
MPXJ 安全缺点
CNNVD-202211-3516
CVE-2022-41954
低危
个东谈主开发者
https://github.com/joniles/mpxj/security/advisories/GHSA-jf2p-4gqj-849g
182
libcurl 安全缺点
CNNVD-202305-1721
CVE-2023-28322
低危
libcurl
https://bugzilla.redhat.com/show_bug.cgi?id=2196783
三、斥地淡薄
现在，Oracle官方依然发布补丁斥地了上述缺点，淡薄用户实时证据缺点影响，尽快遴荐修补要领。Oracle官方补丁下载地址：
https://www.oracle.com/security-alerts/cpuoct2023.html
CNNVD将赓续追踪上述缺点的关联情况，实时发布关联信息。如有需要，可与CNNVD探讨。探讨花式:
cnnvdvul@itsec.gov.cn丝袜