CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-2480

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows u ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：19 | 回复：0
CVE-2021-2481

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privile ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：30 | 回复：0
CVE-2021-2482

Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Invoice Approvals). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：26 | 回复：0
CVE-2021-2483

Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content Item Manager). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerabili ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：26 | 回复：0
CVE-2021-2484

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: BIS Operations Intelligence). Supported versions that are affected are 12.1.1-12.1.3. Easily exploita ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：17 | 回复：0
CVE-2021-2485

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：19 | 回复：0
CVE-2021-35536

Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：23 | 回复：0
CVE-2021-35537

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：13 | 回复：0
CVE-2021-35538

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows low pri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：14 | 回复：0
CVE-2021-35539

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker wit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：18 | 回复：0
CVE-2021-32569

** UNSUPPORTED WHEN ASSIGNED ** In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cross-Site Scripting. This problem is completely reso ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：18 | 回复：0
CVE-2021-42227

Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：28 | 回复：0
CVE-2021-42228

A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：21 | 回复：0
CVE-2021-32571

** UNSUPPORTED WHEN ASSIGNED ** In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：32 | 回复：0
CVE-2021-42369

Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject a SQL statement through the Export to CSV feature of the Contact Manager web GUI ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：20 | 回复：0
CVE-2021-36387

In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploitable through a specially crafted HTTP POST request to the page ActivityStreamAjax ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：10 | 回复：0
CVE-2021-36388

In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：15 | 回复：0
CVE-2021-36389

In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：18 | 回复：0
CVE-2021-38295

In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：18 | 回复：0
CVE-2021-42340

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics fo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：23 | 回复：0
CVE-2021-40999

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：23 | 回复：0
CVE-2021-42329

The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：10 | 回复：0
CVE-2021-42330

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：25 | 回复：0
CVE-2021-42331

The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial sche ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：10 | 回复：0
CVE-2021-42332

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message board ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：14 | 回复：0
CVE-2021-42333

The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：7 | 回复：0
CVE-2021-42334

The Easytest contains SQL injection vulnerabilities. After obtaining a user’s privilege, remote attackers can inject SQL commands into the parameters of the elective course management page to obtain ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：16 | 回复：0
CVE-2021-42335

Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stor ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：14 | 回复：0
CVE-2021-42336

The learning history page of the Easytest is vulnerable by permission bypass. After obtaining a user’s permission, remote attackers can access other users’ and administrator’s account information e ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：27 | 回复：0
CVE-2021-37736

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：15 | 回复：0
CVE-2021-37737

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：12 | 回复：0
CVE-2021-38431

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：16 | 回复：0
CVE-2021-39332

The Business Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization found throughout the plugin which allowed attackers with admini ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：16 | 回复：0
CVE-2021-39334

The Job Board Vanila WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the psjb_exp_in and the psjb_curr_in parameters found in th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：14 | 回复：0
CVE-2021-39335

The WpGenius Job Listing WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/src/admin/class/class ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：12 | 回复：0
CVE-2021-39336

The Job Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/admin-jobs.php file which allo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：11 | 回复：0
CVE-2021-39337

The job-portal WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/admin/jobs_function.php file wh ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：17 | 回复：0
CVE-2021-39338

The MyBB Cross-Poster WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/classes/MyBBXPSettings.p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：10 | 回复：0
CVE-2021-39344

The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/admin/class-kjm-admin-no ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：11 | 回复：0
CVE-2021-39345

The HAL WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/wp-hal.php file which allowed attacker ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:12 | 阅读：17 | 回复：0