CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-39885

A Stored XSS in merge request creation page in Gitlab EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf via malicious approval rule names……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：27 | 回复：0
CVE-2021-39896

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：9 | 回复：0
CVE-2021-39899

In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. There is a rate limit in place, but the at ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：20 | 回复：0
CVE-2021-39900

Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary availability via Rails logs.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：22 | 回复：0
CVE-2021-40683

In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：8 | 回复：0
CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insuffici ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：11 | 回复：0
CVE-2021-41530

Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：6 | 回复：0
CVE-2021-41591

ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：22 | 回复：0
CVE-2021-41592

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：13 | 回复：0
CVE-2021-41593

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：12 | 回复：0
CVE-2021-41595

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file_name parameter of the Step3 import functionali ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：5 | 回复：0
CVE-2021-41596

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：11 | 回复：0
CVE-2021-23855

The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：18 | 回复：0
CVE-2021-23856

The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：8 | 回复：0
CVE-2021-23857

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：34 | 回复：0
CVE-2021-23858

Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without authentication. Additionally, d ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：53 | 回复：0
CVE-2021-32626

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to inc ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：27 | 回复：0
CVE-2021-32627

Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code ex ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：27 | 回复：0
CVE-2021-32628

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and potentia ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：31 | 回复：0
CVE-2021-32672

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：28 | 回复：0
CVE-2021-32675

Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory according to user-specified values which dete ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：22 | 回复：0
CVE-2021-32687

Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap and potentially be used to leak arbitrar ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：35 | 回复：0
CVE-2021-32762

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：26 | 回复：0
CVE-2021-38392

A skilled attacker with physical access to the affected device can gain access to the hard disk drive of the device to change the telemetry region and could use this setting to interrogate or program ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：29 | 回复：0
CVE-2021-38394

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware k ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：26 | 回复：0
CVE-2021-38396

The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthoriz ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：20 | 回复：0
CVE-2021-38398

The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected device could exploit these vulnerabilities.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：33 | 回复：0
CVE-2021-38400

An attacker with physical access to Boston Scientific Zoom Latitude Model 3120 can remove the hard disk drive or create a specially crafted USB to extract the password hash for brute force reverse eng ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：30 | 回复：0
CVE-2021-38618

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone (who knows a user's credentials except the password) to get access to an ac ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：35 | 回复：0
CVE-2021-39347

The Stripe for WooCommerce WordPress plugin is missing a capability check on the save() function found in the ~/includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attac ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：39 | 回复：0
CVE-2021-41099

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and potentially result with denial of servic ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：28 | 回复：0
CVE-2021-41578

mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into importing a malicious mep file, then they gain the ability t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：25 | 回复：0
CVE-2021-41579

LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a victim to load a malicious els project file and use the play feature, then the attac ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：30 | 回复：0
CVE-2021-41093

Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing the email. This issue has been resolved in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：21 | 回复：0
CVE-2021-41094

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to en ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：25 | 回复：0
CVE-2021-41100

Wire-server is the backing server for the open source wire secure messaging application. In affected versions it is possible to trigger email address change of a user with only the short-lived session ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：44 | 回复：0
CVE-2021-41118

The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected versions unsanitised input of regular express ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：31 | 回复：0
CVE-2021-41651

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：41 | 回复：0
CVE-2020-21386

A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：29 | 回复：0
CVE-2020-21387

A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：25 | 回复：0