CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-34770

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unaut ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：19 | 回复：0
CVE-2021-33035

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checke ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：29 | 回复：0
CVE-2021-21993

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：23 | 回复：0
CVE-2021-22005

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：18 | 回复：0
CVE-2021-22006

The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server may exploit this issue ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：15 | 回复：0
CVE-2021-22007

The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sens ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：30 | 回复：0
CVE-2021-22008

The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by sending ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：23 | 回复：0
CVE-2021-22009

The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit these issues to cr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：18 | 回复：0
CVE-2021-22010

The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to create a denial of service ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：69 | 回复：0
CVE-2021-22011

vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：35 | 回复：0
CVE-2021-22012

The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：34 | 回复：0
CVE-2021-22013

The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor with network access to port 443 on vCenter Server m ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：23 | 回复：0
CVE-2021-22014

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：26 | 回复：0
CVE-2021-22015

The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：19 | 回复：0
CVE-2021-22016

The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim int ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：20 | 回复：0
CVE-2021-22017

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：13 | 回复：0
CVE-2021-22018

The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network access to port 9087 on vCenter Server may exploit th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：17 | 回复：0
CVE-2021-22019

The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 5480 on vCenter Server may exploit this issue by sending a sp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：25 | 回复：0
CVE-2021-22020

The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter S ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：24 | 回复：0
CVE-2021-22941

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：28 | 回复：0
CVE-2021-22945

When sending data to an MQTT server, libcurl = 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：35 | 回复：0
CVE-2021-22948

Vulnerability in the generation of session IDs in revive-adserver 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker could theoretically be ab ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：17 | 回复：0
CVE-2021-22949

A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: Solar Security CMS Research ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：13 | 回复：0
CVE-2021-22950

Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: Solar Security Research Team……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：16 | 回复：0
CVE-2021-22952

A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently control Talk device(s) assigned to said network ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：10 | 回复：0
CVE-2021-22953

A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: Solar Security Research Team……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：10 | 回复：0
CVE-2021-32959

Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：13 | 回复：0
CVE-2021-32963

Null pointer dereference in SuiteLink server while processing commands 0x03/0x10……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：16 | 回复：0
CVE-2021-32971

Null pointer dereference in SuiteLink server while processing command 0x07……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：23 | 回复：0
CVE-2021-32979

Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：24 | 回复：0
CVE-2021-32987

Null pointer dereference in SuiteLink server while processing command 0x0b……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：10 | 回复：0
CVE-2021-32999

Improper handling of exceptional conditions in SuiteLink server while processing command 0x01……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：31 | 回复：0
CVE-2021-21913

An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can conne ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：45 | 回复：0
CVE-2021-26750

DLL hijacking in Panda Agent =1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 = 8.0.17 allows attacker to escalate privileges via maliciously crafted DLL file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：21 | 回复：0
CVE-2021-36872

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions = 5.3.3). Vulnerable at widget-wpp.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：13 | 回复：0
CVE-2021-3824

OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：13 | 回复：0
CVE-2021-41381

Payara Micro Community 5.2021.6 and below allows Directory Traversal.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：17 | 回复：0
CVE-2021-41428

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：11 | 回复：0
CVE-2020-4690

IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：12 | 回复：0
CVE-2020-4803

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：18 | 回复：0