CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-41077

The activation process in Travis CI, for certain 2021-09-03 through 2021-09-10 builds, causes secret data to have unexpected sharing that is not specified by the customer-controlled .travis.yml file. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：32 | 回复：0
CVE-2021-23045

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple paths is configured on ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：28 | 回复：0
CVE-2021-23032

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：20 | 回复：0
CVE-2021-23033

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is confi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：22 | 回复：0
CVE-2021-23034

On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the Traffic Management ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：28 | 回复：0
CVE-2021-23035

On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management Microkernel (TMM) to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：37 | 回复：0
CVE-2021-23037

On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：30 | 回复：0
CVE-2021-23038

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a stored cross-site scripting (XSS) vulnerability exists in an un ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：10 | 回复：0
CVE-2021-23039

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed requests from an author ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：24 | 回复：0
CVE-2021-35493

The WebFOCUS Reporting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, and TIBCO WebFOCUS Reporting Server contain easily exploitabl ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：30 | 回复：0
CVE-2021-39391

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the Request Statistics page.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：17 | 回复：0
CVE-2021-23031

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, an authenticated user may perform a privilege e ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：12 | 回复：0
CVE-2021-23036

On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：30 | 回复：0
CVE-2021-23025

On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote command execution vulnerability exists in the BIG-IP C ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：8 | 回复：0
CVE-2021-23028

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configured for URLs as part of an F5 Advanced Web Applicatio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：21 | 回复：0
CVE-2021-23030

On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is co ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：16 | 回复：0
CVE-2021-23026

BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x, 7.x, and 6.x are vuln ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：27 | 回复：0
CVE-2021-23027

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration ut ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：11 | 回复：0
CVE-2021-23029

On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to perform Server-Side Request Forgery (SSRF) attacks through F5 Advanced Web Appl ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：10 | 回复：0
CVE-2021-3706

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：5 | 回复：0
CVE-2021-3751

libmobi is vulnerable to Out-of-bounds Write……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：17 | 回复：0
CVE-2021-3777

nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：5 | 回复：0
CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：7 | 回复：0
CVE-2020-35340

A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：15 | 回复：0
CVE-2021-22147

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：14 | 回复：0
CVE-2021-22148

Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user gai ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：11 | 回复：0
CVE-2021-22149

Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated atta ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：9 | 回复：0
CVE-2021-26434

Visual Studio Elevation of Privilege Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：9 | 回复：0
CVE-2021-26435

Windows Scripting Engine Memory Corruption Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：8 | 回复：0
CVE-2021-26437

Visual Studio Code Spoofing Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：16 | 回复：0
CVE-2021-36952

Visual Studio Remote Code Execution Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：8 | 回复：0
CVE-2021-36954

Windows Bind Filter Driver Elevation of Privilege Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：19 | 回复：0
CVE-2021-36955

Windows Common Log File System Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-36963, CVE-2021-38633.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：23 | 回复：0
CVE-2021-36956

Azure Sphere Information Disclosure Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：22 | 回复：0
CVE-2021-36959

Windows Authenticode Spoofing Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：12 | 回复：0
CVE-2021-36960

Windows SMB Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36972.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：23 | 回复：0
CVE-2021-36961

Windows Installer Denial of Service Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：28 | 回复：0
CVE-2021-36962

Windows Installer Information Disclosure Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：22 | 回复：0
CVE-2021-36963

Windows Common Log File System Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-36955, CVE-2021-38633.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：24 | 回复：0
CVE-2021-36964

Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38630.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：7 | 回复：0