CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-20784

A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass established w ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：29 | 回复：0
CVE-2022-24822

Podium is a library for building micro frontends. @podium/layout is a module for building a Podium layout server, and @podium/proxy is a module for proxying HTTP requests from a layout server to a pod ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：27 | 回复：0
CVE-2022-26850

When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：31 | 回复：0
CVE-2022-20665

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI c ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：27 | 回复：0
CVE-2022-20675

A vulnerability in the TCP/IP stack of Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Secure Email and Web Manager, formerly Security Management Appliance, could a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：36 | 回复：0
CVE-2022-20741

A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an authenticated, remote att ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：44 | 回复：0
CVE-2022-20754

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：41 | 回复：0
CVE-2022-20755

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：57 | 回复：0
CVE-2022-20756

A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulne ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：53 | 回复：0
CVE-2022-20762

A vulnerability in the Common Execution Environment (CEE) ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure (SMI) software could allow an authenticated, local attacker to e ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：53 | 回复：0
CVE-2022-20763

A vulnerability in the login authorization components of Cisco Webex Meetings could allow an authenticated, remote attacker to inject arbitrary Java code. This vulnerability is due to improper deseria ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：41 | 回复：0
CVE-2022-20774

A vulnerability in the web-based management interface of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an unauthenticated, remote attacker to conduct a cross-site ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：40 | 回复：0
CVE-2022-20781

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scri ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：35 | 回复：0
CVE-2022-20782

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an affected device. Thi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：35 | 回复：0
CVE-2022-26591

FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：43 | 回复：0
CVE-2022-26605

eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：54 | 回复：0
CVE-2022-26607

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：51 | 回复：0
CVE-2022-26613

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：54 | 回复：0
CVE-2020-22253

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 ope ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：53 | 回复：0
CVE-2020-27373

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：57 | 回复：0
CVE-2020-27374

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to BP Monitoring.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：80 | 回复：0
CVE-2020-27375

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：166 | 回复：0
CVE-2020-27376

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：97 | 回复：0
CVE-2022-27818

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：63 | 回复：0
CVE-2022-27819

SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory exhaustion) upon an attempt to parse a large or infinite file (such ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：59 | 回复：0
CVE-2021-46416

Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：48 | 回复：0
CVE-2021-46417

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：33 | 回复：0
CVE-2022-23900

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：28 | 回复：0
CVE-2021-46418

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：25 | 回复：0
CVE-2021-46419

An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：22 | 回复：0
CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：21 | 回复：0
CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：18 | 回复：0
CVE-2022-26627

Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：18 | 回复：0
CVE-2022-27016

There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：18 | 回复：0
CVE-2022-27022

There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a stable root shell through a constructed payload.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：16 | 回复：0
CVE-2021-43421

A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via connector.minimal.php, which allows a remote malicious user to upload arbitrary files and execute PHP code.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：18 | 回复：0
CVE-2021-43429

A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempool_destroy method due to a failture to release locks pool-lock.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：18 | 回复：0
CVE-2021-43430

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via im_webserver, which could let a malicious user upload PHP Trojan files.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：14 | 回复：0
CVE-2021-43432

A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：15 | 回复：0
CVE-2022-0677

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:12 | 阅读：16 | 回复：0