CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-41135

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic met ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：14 | 回复：0
CVE-2021-38896

IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality po ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：11 | 回复：0
CVE-2021-41167

modern-async is an open source JavaScript tooling library for asynchronous operations using async/await and promises. In affected versions a bug affecting two of the functions in this library: forEach ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：13 | 回复：0
CVE-2021-42762

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not conf ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：24 | 回复：0
CVE-2021-42764

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (delayed consensus decisions), and also increase the profits of individual vali ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：18 | 回复：0
CVE-2021-42765

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of service (indefinite stalling of consensus decisions).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：17 | 回复：0
CVE-2021-42766

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (long-range consensus chain reorganizations), even when this adversary has litt ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：15 | 回复：0
CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：9 | 回复：0
CVE-2021-42299

Microsoft Surface Pro 3 Security Feature Bypass Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：18 | 回复：0
CVE-2021-41163

Discourse is an open source platform for community discussion. In affected versions maliciously crafted requests could lead to remote code execution. This resulted from a lack of validation in subscri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：28 | 回复：0
CVE-2021-42096

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that passwo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：29 | 回复：0
CVE-2021-42097

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：22 | 回复：0
CVE-2021-1529

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient inp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：33 | 回复：0
CVE-2021-34736

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interfa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：37 | 回复：0
CVE-2021-34738

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site scripting (XSS) attack against a user of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：23 | 回复：0
CVE-2021-34743

A vulnerability in the application integration feature of Cisco Webex Software could allow an unauthenticated, remote attacker to authorize an external application to integrate with and access a user ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：17 | 回复：0
CVE-2021-34760

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：30 | 回复：0
CVE-2021-34789

A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected system. This ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：24 | 回复：0
CVE-2021-39126

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery (CSRF) vulnerability, following an Information Disclosure ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：40 | 回复：0
CVE-2021-39127

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL endpoint via a Broken Access Control vulnerability (BAC) vulnerability. The affec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：27 | 回复：0
CVE-2021-40121

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site scripting (XSS) attack against a user of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：18 | 回复：0
CVE-2021-40122

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：18 | 回复：0
CVE-2021-40123

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative read-only privileges to download files t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：29 | 回复：0
CVE-2021-23139

A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：24 | 回复：0
CVE-2021-42011

An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Pleas ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：20 | 回复：0
CVE-2021-42012

A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected ins ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：21 | 回复：0
CVE-2021-42101

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must fi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：17 | 回复：0
CVE-2021-42102

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow a local attacker to escalate privileges on affected installations. An attacker ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：26 | 回复：0
CVE-2021-42103

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must fi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：20 | 回复：0
CVE-2021-42104

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to es ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：13 | 回复：0
CVE-2021-42105

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to es ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：21 | 回复：0
CVE-2021-42106

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to es ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：21 | 回复：0
CVE-2021-42107

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to es ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：27 | 回复：0
CVE-2021-42108

Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：21 | 回复：0
CVE-2021-41790

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a l ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：30 | 回复：0
CVE-2021-41791

An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Int ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：10 | 回复：0
CVE-2021-41792

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted HTML file, once uploaded, could trigger an ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：14 | 回复：0
CVE-2021-35512

An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：21 | 回复：0
CVE-2021-42740

The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex designed to support Windows drive letters. If the outpu ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：15 | 回复：0
CVE-2020-27304

The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request AP ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：21 | 回复：0