CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-38412

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerabi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：15 | 回复：0
CVE-2021-39216

Wasmtime is an open source runtime for WebAssembly WASI. In Wasmtime from version 0.19.0 and before version 0.30.0 there was a use-after-free bug when passing `externref`s from the host to guest Wasm ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：15 | 回复：0
CVE-2021-39219

Wasmtime is an open source runtime for WebAssembly WASI. Wasmtime before version 0.30.0 is affected by a type confusion vulnerability. As a Rust library the `wasmtime` crate clearly marks which funct ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：11 | 回复：0
CVE-2021-41380

** DISPUTED ** RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB protocol data. NOTE: It is asserted that this issue requires social en ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：5 | 回复：0
CVE-2021-41383

setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：5 | 回复：0
CVE-2020-21547

Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：15 | 回复：0
CVE-2020-21548

Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：11 | 回复：0
CVE-2021-39218

Wasmtime is an open source runtime for WebAssembly WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulnerability. There was an invalid free and out ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：17 | 回复：0
CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：10 | 回复：0
CVE-2021-41390

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：6 | 回复：0
CVE-2021-41391

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：18 | 回复：0
CVE-2021-41392

static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：10 | 回复：0
CVE-2021-3806

A path traversal vulnerability on Pardus Software Center's extractArchive function could allow anyone on the same network to do a man-in-the-middle and write files on the system.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：7 | 回复：0
CVE-2021-41393

Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：10 | 回复：0
CVE-2021-41394

Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：7 | 回复：0
CVE-2021-41395

Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：6 | 回复：0
CVE-2021-23441

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：7 | 回复：0
CVE-2021-41073

loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：9 | 回复：0
CVE-2021-40690

All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the secureValidation property is not passed correctly when creating a KeyInfo from a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：27 | 回复：0
CVE-2021-38300

arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel con ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：40 | 回复：0
CVE-2021-24396

A pageid GET parameter of the GSEOR â€“ WordPress SEO Plugin WordPress plugin through 1.3 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：24 | 回复：0
CVE-2021-24397

The edit functionality in the MicroCopy WordPress plugin through 1.1.0 makes a get request to fetch the related option. The id parameter used is not sanitised, escaped or validated before inserting to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：38 | 回复：0
CVE-2021-24398

The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, lea ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：29 | 回复：0
CVE-2021-24399

The check_order function of The Sorter WordPress plugin through 1.0 uses an `area_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injecti ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：29 | 回复：0
CVE-2021-24400

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an `id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：24 | 回复：0
CVE-2021-24401

The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an `editid` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：19 | 回复：0
CVE-2021-24402

The Orders functionality in the WP iCommerce WordPress plugin through 1.1.1 has an `order_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：25 | 回复：0
CVE-2021-24403

The Orders functionality in the WordPress Page Contact plugin through 1.0 has an order_id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL inj ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：22 | 回复：0
CVE-2021-24404

The options.php file of the WP-Board WordPress plugin through 1.1 beta accepts a postid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：17 | 回复：0
CVE-2021-24511

The fetch_product_ajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a `product_id` POST parameter which is not properly sanitised, escaped or validated before ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：16 | 回复：0
CVE-2021-24525

The Shortcodes Ultimate WordPress plugin before 5.10.2 allows users with Contributor roles to perform stored XSS via shortcode attributes. Note: the plugin is inconsistent in its handling of shortcode ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：23 | 回复：0
CVE-2021-24530

The Alojapro Widget WordPress plugin through 1.1.15 doesn't properly sanitise its Custom CSS settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltere ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：23 | 回复：0
CVE-2021-24582

The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its Consumer key setting before outputting it its settings page, leading to a Stored Cross-Site Scripting issue.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：17 | 回复：0
CVE-2021-24583

The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any user with the edit_posts capability (contributor+) to delete a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：21 | 回复：0
CVE-2021-24584

The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_posts capability (contributor+) to update a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：11 | 回复：0
CVE-2021-24585

The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sensitive data) of the user related to the Even Head of the Tim ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：23 | 回复：0
CVE-2021-24587

The Splash Header WordPress plugin before 1.20.8 doesn't sanitise and escape some of its settings while outputting them in the admin dashboard, leading to an authenticated Stored Cross-Site Script ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：15 | 回复：0
CVE-2021-24596

The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users (editors and admins) to perform Cross-Site Scripting atta ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：34 | 回复：0
CVE-2021-24597

The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts and the plugins settings page depending o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：23 | 回复：0
CVE-2021-24600

The WP Dialog WordPress plugin through 1.2.5.5 does not sanitise and escape some of its settings before outputting them in pages, allowing high privilege users to perform Cross-Site Scripting attacks ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:45 | 阅读：27 | 回复：0