• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号

CVE漏洞

RSS
  • CVE-2022-25342
    CVE-2022-25342
    An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Broken Access Control. It does not properly validate requests for access to data and fun ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:25 | 回复:0
  • CVE-2022-25343
    CVE-2022-25343
    An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Denial of Service. An unauthenticated attacker, who can send POST requests to the /downl ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:18 | 回复:0
  • CVE-2022-25344
    CVE-2022-25344
    An XSS issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application doesn't properly check parameters, sent in a /dvcset/sysset/set.cgi POST request via the arg01. ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:17 | 回复:0
  • CVE-2021-38483
    CVE-2021-38483
    The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:16 | 回复:0
  • CVE-2021-43933
    CVE-2021-43933
    The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap me ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:18 | 回复:0
  • CVE-2021-43986
    CVE-2021-43986
    The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalatio ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:17 | 回复:0
  • CVE-2021-43988
    CVE-2021-43988
    The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of files to gain unauthorized access rights.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:14 | 回复:0
  • CVE-2021-43990
    CVE-2021-43990
    The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:13 | 回复:0
  • CVE-2022-0567
    CVE-2022-0567
    A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:17 | 回复:0
  • CVE-2022-1039
    CVE-2022-1039
    The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be acces ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:16 | 回复:0
  • CVE-2022-1318
    CVE-2022-1318
    Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuration pages can be viewed by a malicious actor. The size of certain communicati ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:18 | 回复:0
  • CVE-2022-26516
    CVE-2022-26516
    Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:20 | 回复:0
  • CVE-2022-26519
    CVE-2022-26519
    There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to brute-force credentials.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:20 | 回复:0
  • CVE-2022-27179
    CVE-2022-27179
    A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resour ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:16 | 回复:0
  • CVE-2022-24799
    CVE-2022-24799
    wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of injecting and exe ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:18 | 回复:0
  • CVE-2022-0540
    CVE-2022-0540
    A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versio ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:20 | 回复:0
  • CVE-2022-24861
    CVE-2022-24861
    Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be prov ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:33 | 回复:0
  • CVE-2022-24862
    CVE-2022-24862
    Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC dr ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:24 | 回复:0
  • CVE-2022-24864
    CVE-2022-24864
    Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to `/presale/join`. User-controlled data ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:28 | 回复:0
  • CVE-2022-24871
    CVE-2022-24871
    Shopware is an open commerce platform based on Symfony Framework and Vue. In affected versions an attacker can abuse the Admin SDK functionality on the server to read or update internal resources. Use ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:36 | 回复:0
  • CVE-2022-26133
    CVE-2022-26133
    SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior t ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:37 | 回复:0
  • CVE-2021-37740
    CVE-2021-37740
    A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the d ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:56 | 回复:0
  • CVE-2021-43481
    CVE-2021-43481
    An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstage.php.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:41 | 回复:0
  • CVE-2022-24865
    CVE-2022-24865
    HumHub is an Open Source Enterprise Social Network. In affected versions users who are forced to change their password by an administrator may retrieve other users' data. This issue has been resol ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:21 | 回复:0
  • CVE-2022-24872
    CVE-2022-24872
    Shopware is an open commerce platform based on Symfony Framework and Vue. Permissions set to sales channel context by admin-api are still usable within normal user session. Users are advised to update ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:23 | 回复:0
  • CVE-2022-24874
    CVE-2022-24874
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-28820. Reason: This candidate is a reservation duplicate of CVE-2022-28820. Notes: All CVE users should reference CVE-2022-28820 ins ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:23 | 回复:0
  • CVE-2022-29528
    CVE-2022-29528
    An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:26 | 回复:0
  • CVE-2022-29529
    CVE-2022-29529
    An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:24 | 回复:0
  • CVE-2022-29530
    CVE-2022-29530
    An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:22 | 回复:0
  • CVE-2022-29531
    CVE-2022-29531
    An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:21 | 回复:0
  • CVE-2022-29532
    CVE-2022-29532
    An issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one administrator puts a javascript: URL in the URL field, and another administrator clicks on it.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:20 | 回复:0
  • CVE-2022-29533
    CVE-2022-29533
    An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a weird single checkbox page.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:24 | 回复:0
  • CVE-2022-29534
    CVE-2022-29534
    An issue was discovered in MISP before 2.4.158. In UsersController.php, password confirmation can be bypassed via vectors involving an Accept: application/json header.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:24 | 回复:0
  • CVE-2022-29536
    CVE-2022-29536
    In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:23 | 回复:0
  • CVE-2022-29537
    CVE-2022-29537
    gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box.……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:24 | 回复:0
  • CVE-2022-27924
    CVE-2022-27924
    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an o ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:27 | 回复:0
  • CVE-2022-27925
    CVE-2022-27925
    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to up ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:36 | 回复:0
  • CVE-2022-27926
    CVE-2022-27926
    A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:26 | 回复:0
  • CVE-2022-29547
    CVE-2022-29547
    The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This could lead to an unauthorised (or blocked) user bein ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:26 | 回复:0
  • CVE-2022-29548
    CVE-2022-29548
    A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2 ...……
    作者:菜鸟教程小白 | 时间:2022-6-23 10:16 | 阅读:40 | 回复:0

关注我们

极客给你想要的成长

关注极客中国获取最新资讯

热门推荐
专题导读
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服(服务时间 9:00~18:00)

在线QQ客服
地址:深圳市南山区西丽大学城创智工业园
电邮:jeky_zhao#qq.com
移动电话:139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap