CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-30172

Microsoft Office Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30159, CVE-2022-30171.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：54 | 回复：0
CVE-2022-30173

Microsoft Excel Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：67 | 回复：0
CVE-2022-30174

Microsoft Office Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：80 | 回复：0
CVE-2022-30177

Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30178, CVE-2022-30179.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：84 | 回复：0
CVE-2022-30178

Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30177, CVE-2022-30179.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：71 | 回复：0
CVE-2022-30179

Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30177, CVE-2022-30178.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：44 | 回复：0
CVE-2022-30180

Azure RTOS GUIX Studio Information Disclosure Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：52 | 回复：0
CVE-2022-30184

.NET and Visual Studio Information Disclosure Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：45 | 回复：0
CVE-2022-30188

HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22018, CVE-2022-29111, CVE-2022-29119.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：31 | 回复：0
CVE-2022-30189

Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：28 | 回复：0
CVE-2022-30193

AV1 Video Extension Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30167.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：34 | 回复：0
CVE-2022-31071

Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem was packed with files having their permiss ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：24 | 回复：0
CVE-2022-31072

Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their pe ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：24 | 回复：0
CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：23 | 回复：0
CVE-2022-30538

Out-of-bounds write vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：30 | 回复：0
CVE-2022-30546

Out-of-bounds read vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or exe ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：24 | 回复：0
CVE-2022-30549

Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by ha ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：27 | 回复：0
CVE-2022-31625

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：20 | 回复：0
CVE-2022-31626

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：20 | 回复：0
CVE-2017-20051

A vulnerability was found in InnoSetup Installer. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to uncontrolled search path. T ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：13 | 回复：0
CVE-2017-20052

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：13 | 回复：0
CVE-2021-41402

flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user execute arbitrary PHP code.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：14 | 回复：0
CVE-2021-41411

drools =7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：14 | 回复：0
CVE-2021-41458

In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：13 | 回复：0
CVE-2022-2098

Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：11 | 回复：0
CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：13 | 回复：0
CVE-2017-20053

A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-si ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：16 | 回复：0
CVE-2017-20054

A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：10 | 回复：0
CVE-2017-20055

A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is po ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：9 | 回复：0
CVE-2017-20056

A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Stored) ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：9 | 回复：0
CVE-2022-31372

Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted request to the resource handler.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：9 | 回复：0
CVE-2022-30023

Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：10 | 回复：0
CVE-2022-31277

Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：11 | 回复：0
CVE-2022-31300

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：11 | 回复：0
CVE-2022-31849

MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable via a crafted POST request.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：11 | 回复：0
CVE-2022-31906

Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：17 | 回复：0
CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：21 | 回复：0
CVE-2022-31910

Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting (XSS). via /otps/classes/Master.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：25 | 回复：0
CVE-2022-31911

Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：24 | 回复：0
CVE-2022-31912

Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=delete_team.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:06 | 阅读：16 | 回复：0