CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-27548

There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-1782

Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-1795

Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-27632

Cross-site request forgery (CSRF) vulnerability in Rebooter(WATCH BOOT nino RPC-M2C all firmware versions, WATCH BOOT light RPC-M5C all firmware versions, WATCH BOOT L-zero RPC-M4L all firmware ver ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-28717

Cross-site scripting vulnerability in Rebooter(WATCH BOOT nino RPC-M2C all firmware versions, WATCH BOOT light RPC-M5C all firmware versions, WATCH BOOT L-zero RPC-M4L all firmware versions, WATCH ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-29516

The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500), IPCOM EX2 NW(1100, 3200, 3500), IPCOM EX2 DC, IPCOM EX2 DC, I ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-29518

Screen Creator Advance2, HMI GC-A2 series, and Real time remote monitoring and control tool Screen Creator Advance2 versions prior to Ver.0.1.1.3 Build01, HMI GC-A2 series(GC-A22W-CW, GC-A24W-C(W), GC ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-30065

A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-3922

A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and inte ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-3956

A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in LDAP Authentication Only ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-3969

A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-42848

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-42849

A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-42850

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-42851

A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-42852

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-1110

A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker to cause denial of service.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-1767

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.7.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-22784

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-22785

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-22786

The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-28917

Tenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in /goform/AdvSetLanIp.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-30105

In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-42700

Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-42702

Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2021-42704

Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-0883

SLM has an issue with Windows Unquoted/Trusted Service Paths Security Issue. All installations version 9.x.x prior to 9.20.1 should be patched.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-1734

A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware down ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-22776

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a low privileged attacker with network ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-22777

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow an ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-22778

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows an unauthenticated attacker with netwo ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-22787

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a m ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-25161

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsub ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-25162

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X**** or later and versions prior to 1.270, Mitsub ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-28924

An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the endpoint /api/students/me/courses/.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-29445

Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Popup Box plugin = 2.1.2 at WordPress.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-30596

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-25617

Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin = 2.14.3 at WordPress via orderby vulnerable parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-28921

A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0
CVE-2022-30111

Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:37 | 阅读：5 | 回复：0