CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-2047

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly det ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：630 | 回复：0
CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：633 | 回复：0
CVE-2022-2191

In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code paths.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：625 | 回复：0
CVE-2022-31029

AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `scriptalert(XSS)/script` in the field marked with Domain to look for and hitting kbdenter/kbd (or ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：553 | 回复：0
CVE-2022-32481

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker command ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：769 | 回复：0
CVE-2022-33936

Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：712 | 回复：0
CVE-2022-32060

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：507 | 回复：0
CVE-2022-32061

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：549 | 回复：0
CVE-2022-32035

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：201 | 回复：0
CVE-2022-32036

Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：202 | 回复：0
CVE-2022-32037

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：202 | 回复：0
CVE-2022-32039

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：209 | 回复：0
CVE-2022-32040

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：193 | 回复：0
CVE-2022-32041

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：204 | 回复：0
CVE-2022-32043

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：184 | 回复：0
CVE-2022-32044

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：196 | 回复：0
CVE-2022-32045

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：213 | 回复：0
CVE-2022-32046

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：204 | 回复：0
CVE-2022-32047

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：189 | 回复：0
CVE-2022-32048

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：228 | 回复：0
CVE-2022-32049

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：210 | 回复：0
CVE-2022-32050

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：235 | 回复：0
CVE-2022-32051

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：193 | 回复：0
CVE-2022-32052

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：207 | 回复：0
CVE-2022-32053

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：211 | 回复：0
CVE-2022-25758

All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：237 | 回复：0
CVE-2022-25876

The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read the response. This is due ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：205 | 回复：0
CVE-2022-25896

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：258 | 回复：0
CVE-2022-25898

The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped chara ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：220 | 回复：0
CVE-2022-25900

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：204 | 回复：0
CVE-2022-32081

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：186 | 回复：0
CVE-2022-32082

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-get_ref_count() == 0 in dict0dict.cc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：212 | 回复：0
CVE-2022-32083

MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：196 | 回复：0
CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：198 | 回复：0
CVE-2022-32085

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：193 | 回复：0
CVE-2022-32086

MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：208 | 回复：0
CVE-2022-32087

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：217 | 回复：0
CVE-2022-32088

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：191 | 回复：0
CVE-2022-32089

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：189 | 回复：0
CVE-2022-32091

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：234 | 回复：0