CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-21924

Workstation Service Remote Protocol Security Feature Bypass Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：8 | 回复：0
CVE-2022-21928

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21892, CVE-2022-21958, CVE-2022-21959, CVE-2022-21960, CVE-2022-21961, CVE-2022-21962, CVE ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：8 | 回复：0
CVE-2022-21929

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21930, CVE-2022-21931.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：9 | 回复：0
CVE-2022-21930

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21929, CVE-2022-21931.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：8 | 回复：0
CVE-2022-21931

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21929, CVE-2022-21930.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：9 | 回复：0
CVE-2022-21932

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：9 | 回复：0
CVE-2022-21954

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21970.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：9 | 回复：0
CVE-2022-21958

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21892, CVE-2022-21928, CVE-2022-21959, CVE-2022-21960, CVE-2022-21961, CVE-2022-21962, CVE ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：11 | 回复：0
CVE-2022-21959

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21892, CVE-2022-21928, CVE-2022-21958, CVE-2022-21960, CVE-2022-21961, CVE-2022-21962, CVE ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：11 | 回复：0
CVE-2022-21960

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21892, CVE-2022-21928, CVE-2022-21958, CVE-2022-21959, CVE-2022-21961, CVE-2022-21962, CVE ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：16 | 回复：0
CVE-2022-21961

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21892, CVE-2022-21928, CVE-2022-21958, CVE-2022-21959, CVE-2022-21960, CVE-2022-21962, CVE ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：13 | 回复：0
CVE-2022-21962

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21892, CVE-2022-21928, CVE-2022-21958, CVE-2022-21959, CVE-2022-21960, CVE-2022-21961, CVE ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：15 | 回复：0
CVE-2022-21963

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21892, CVE-2022-21928, CVE-2022-21958, CVE-2022-21959, CVE-2022-21960, CVE-2022-21961, CVE ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：14 | 回复：0
CVE-2022-21964

Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：16 | 回复：0
CVE-2022-21969

Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21846, CVE-2022-21855.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：15 | 回复：0
CVE-2022-21970

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21954.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：14 | 回复：0
CVE-2021-41767

Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：15 | 回复：0
CVE-2021-43999

Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of anothe ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：16 | 回复：0
CVE-2021-46283

nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：19 | 回复：0
CVE-2022-21646

SpiceDB is a database system for managing security-critical application permissions. Any user making use of a wildcard relationship under the right hand branch of an `exclusion` or within an `intersec ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：23 | 回复：0
CVE-2022-0087

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：22 | 回复：0
CVE-2022-0159

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：22 | 回复：0
CVE-2022-0179

snipe-it is vulnerable to Improper Access Control……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：22 | 回复：0
CVE-2021-3852

growi is vulnerable to Authorization Bypass Through User-Controlled Key……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：23 | 回复：0
CVE-2021-44648

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：29 | 回复：0
CVE-2021-44649

Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allo ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：29 | 回复：0
CVE-2021-44650

Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：34 | 回复：0
CVE-2021-4080

crater is vulnerable to Unrestricted Upload of File with Dangerous Type……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：69 | 回复：0
CVE-2021-44651

Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：36 | 回复：0
CVE-2021-44652

Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：29 | 回复：0
CVE-2021-38892

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：28 | 回复：0
CVE-2021-43436

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：23 | 回复：0
CVE-2021-45388

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-45608. Reason: This candidate is a reservation duplicate of CVE-2021-45608. Notes: All CVE users should reference CVE-2021-45608 ins ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：22 | 回复：0
CVE-2021-45411

In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote cod ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：23 | 回复：0
CVE-2021-28376

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：20 | 回复：0
CVE-2021-28377

ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：24 | 回复：0
CVE-2021-45445

Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：30 | 回复：0
CVE-2022-0012

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impac ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：30 | 回复：0
CVE-2022-0013

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：44 | 回复：0
CVE-2022-0014

An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:02 | 阅读：77 | 回复：0