• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号
登陆 注册
描述文字
OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

CVE漏洞

RSS
  • CVE-2021-38303
    CVE-2021-38303
    A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：68 | 回复：0
  • CVE-2021-21522
    CVE-2021-21522
    Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetti ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：58 | 回复：0
  • CVE-2021-21569
    CVE-2021-21569
    Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and gain acces ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：58 | 回复：0
  • CVE-2021-21570
    CVE-2021-21570
    Dell NetWorker, versions 18.x and 19.x contain an Information disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and g ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：45 | 回复：0
  • CVE-2021-36283
    CVE-2021-36283
    Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：47 | 回复：0
  • CVE-2021-36284
    CVE-2021-36284
    Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：45 | 回复：0
  • CVE-2021-36285
    CVE-2021-36285
    Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe p ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：33 | 回复：0
  • CVE-2021-36286
    CVE-2021-36286
    Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be exploited by using the Windows feature of NTFS call ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：27 | 回复：0
  • CVE-2021-36297
    CVE-2021-36297
    SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administra ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：39 | 回复：0
  • CVE-2021-41106
    CVE-2021-41106
    JWT is a library to work with JSON Web Token and JSON Web Signature. Prior to versions 3.4.6, 4.0.4, and 4.1.5, users of HMAC-based algorithms (HS256, HS384, and HS512) combined with `Lcobucci\JWT\Sig ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：42 | 回复：0
  • CVE-2020-20120
    CVE-2020-20120
    ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the where and query methods.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：40 | 回复：0
  • CVE-2020-20122
    CVE-2020-20122
    Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/content.php.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：51 | 回复：0
  • CVE-2020-20124
    CVE-2020-20124
    Wuzhi CMS v4.1.0 contains a remote code execution (RCE) vulnerability in \attachment\admin\index.php.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：41 | 回复：0
  • CVE-2020-20125
    CVE-2020-20125
    EARCLINK ESPCMS-P8 contains a cross-site scripting (XSS) vulnerability in espcms_web\espcms_load.php.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：48 | 回复：0
  • CVE-2021-33923
    CVE-2021-33923
    Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database).……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：44 | 回复：0
  • CVE-2021-33924
    CVE-2021-33924
    Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：43 | 回复：0
  • CVE-2021-32466
    CVE-2021-32466
    An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：36 | 回复：0
  • CVE-2021-35027
    CVE-2021-35027
    A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：42 | 回复：0
  • CVE-2021-35028
    CVE-2021-35028
    A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：34 | 回复：0
  • CVE-2021-36745
    CVE-2021-36745
    A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netwar ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：37 | 回复：0
  • CVE-2021-40651
    CVE-2021-40651
    OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's filesystem as long as the ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：41 | 回复：0
  • CVE-2021-25959
    CVE-2021-25959
    In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：68 | 回复：0
  • CVE-2021-25960
    CVE-2021-25960
    In “SuiteCRM” application, v7.11.18 through v7.11.19 and v7.10.29 through v7.10.31 are affected by “CSV Injection” vulnerability (Formula Injection). A low privileged attacker can use accounts mod ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：41 | 回复：0
  • CVE-2021-25961
    CVE-2021-25961
    In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：52 | 回复：0
  • CVE-2021-25962
    CVE-2021-25962
    “Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vulnerability. A customer can inject payloads in the name input field in the billing address while buying a p ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：44 | 回复：0
  • CVE-2021-28547
    CVE-2021-28547
    Adobe Creative Cloud Desktop Application for macOS version 5.3 (and earlier) is affected by a privilege escalation vulnerability that could allow a normal user to delete the OOBE directory and get per ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：54 | 回复：0
  • CVE-2021-29834
    CVE-2021-29834
    IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to stored cross-s ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：42 | 回复：0
  • CVE-2021-35982
    CVE-2021-35982
    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Uncontrolled Search Path Element vulnerability. A local attack ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：41 | 回复：0
  • CVE-2021-39821
    CVE-2021-39821
    Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current use ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：39 | 回复：0
  • CVE-2021-39829
    CVE-2021-39829
    Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：26 | 回复：0
  • CVE-2021-39830
    CVE-2021-39830
    Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potent ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：34 | 回复：0
  • CVE-2021-39831
    CVE-2021-39831
    Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：31 | 回复：0
  • CVE-2021-39832
    CVE-2021-39832
    Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potent ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：46 | 回复：0
  • CVE-2021-39833
    CVE-2021-39833
    Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：59 | 回复：0
  • CVE-2021-39834
    CVE-2021-39834
    Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：42 | 回复：0
  • CVE-2021-39835
    CVE-2021-39835
    Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a use-after-free vulnerability in the processing of a malformed PDF file that could result ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：33 | 回复：0
  • CVE-2021-39836
    CVE-2021-39836
    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：37 | 回复：0
  • CVE-2021-39837
    CVE-2021-39837
    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：33 | 回复：0
  • CVE-2021-39838
    CVE-2021-39838
    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：34 | 回复：0
  • CVE-2021-39839
    CVE-2021-39839
    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：35 | 回复：0

关注我们

极客给你想要的成长

关注极客中国获取最新资讯

加入Q群 官方微博
热门推荐
More+
专题导读
More+
热门话题
More+
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服（服务时间 9:00～18:00）

在线QQ客服
地址：深圳市南山区西丽大学城创智工业园
电邮：jeky_zhao#qq.com
移动电话：139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap