CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2020-4805

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：20 | 回复：0
CVE-2020-4809

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：16 | 回复：0
CVE-2020-4941

IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 191941.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：13 | 回复：0
CVE-2021-20377

IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：6 | 回复：0
CVE-2021-20434

IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 196346.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：11 | 回复：0
CVE-2021-20435

IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive information that could aid in further attacks against the system. IBM ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：10 | 回复：0
CVE-2021-20484

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：28 | 回复：0
CVE-2021-20485

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information cou ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：12 | 回复：0
CVE-2021-20563

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a specially crafted request, the user could disclose a valid filepa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：14 | 回复：0
CVE-2021-22276

The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：5 | 回复：0
CVE-2021-26794

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：14 | 回复：0
CVE-2021-29800

IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：16 | 回复：0
CVE-2021-36823

Authenticated Stored Cross-Site Scripting (XSS) vulnerability in WordPress Absolutely Glamorous Custom Admin plugin (versions = 6.8). Stored XSS possible via unsanitized input fields of the plugin set ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：10 | 回复：0
CVE-2021-36873

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions = 1.2.11). Vulnerable parameter: blockcountry_blockmessage.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：27 | 回复：0
CVE-2021-38863

IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：18 | 回复：0
CVE-2021-38864

IBM Security Verify Bridge 1.0.5.0 could allow a user to obtain sensitive information due to improper certificate validation. IBM X-Force ID: 208155.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：30 | 回复：0
CVE-2020-24327

Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing an email in an editor, you can upload pictures of remote websites.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：16 | 回复：0
CVE-2021-29810

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：23 | 回复：0
CVE-2021-29812

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：20 | 回复：0
CVE-2021-29813

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：18 | 回复：0
CVE-2021-29814

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：17 | 回复：0
CVE-2021-29815

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：17 | 回复：0
CVE-2021-29816

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions tran ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：26 | 回复：0
CVE-2021-31845

A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to execute arbitrary code through placing car ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：5 | 回复：0
CVE-2021-39227

ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using `merge` and `clone` helper methods in the `src/core/util.ts` module results in prototyp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：9 | 回复：0
CVE-2021-39228

Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Issue when using `patch` or `merge` on `stat ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：5 | 回复：0
CVE-2021-41315

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker (with access to the console application) to execute a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：17 | 回复：0
CVE-2021-41316

The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run by this utility) can inject an extra argum ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：15 | 回复：0
CVE-2019-9060

An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module (in the file action.setdefaulttemplate.php) with the m1_filename p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：10 | 回复：0
CVE-2021-38304

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：14 | 回复：0
CVE-2021-41317

XSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for paths.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：19 | 回复：0
CVE-2021-40825

nLight ECLYPSE (nECY) system Controllers running software prior to 1.17.21245.754 contain a default key vulnerability. The nECY does not force a change to the key upon the initial configuration of an ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：37 | 回复：0
CVE-2020-12080

A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain message protocol can be exploited to cause lmadmin to crash.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：21 | 回复：0
CVE-2020-12082

A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64).……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：17 | 回复：0
CVE-2020-12083

An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64).……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：5 | 回复：0
CVE-2021-41326

In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec call.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：8 | 回复：0
CVE-2018-20686

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：8 | 回复：0
CVE-2021-38402

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could lead to a stack-based buffer overflow while trying ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：22 | 回复：0
CVE-2021-38404

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：25 | 回复：0
CVE-2021-38406

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：33 | 回复：0