CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-30295

Possible heap overflow due to improper validation of local variable while storing current task information locally in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：20 | 回复：0
CVE-2021-36161

Some component in Dubbo will try to print the formated string of the input arguments, which will possibly cause RCE for a maliciously customized bean with special toString method. In the latest versio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：13 | 回复：0
CVE-2021-37579

The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the configuration set by the server. But there's an exception that the attacker can ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：14 | 回复：0
CVE-2021-20117

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent h ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：18 | 回复：0
CVE-2021-20118

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent h ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：8 | 回复：0
CVE-2021-26603

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：5 | 回复：0
CVE-2021-36870

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (versions = 8.1.12). Vulnerable parameters: dataset_name, wpgmza_gdpr_retention_purpose, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：11 | 回复：0
CVE-2021-36871

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plugin (versions = 8.1.11). Vulnerable parameters: wpgmaps_marker_category_name, Va ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：10 | 回复：0
CVE-2021-38408

A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow remote code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：8 | 回复：0
CVE-2021-39458

Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate the files of a vaild file backup. This leads of leaking the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：41 | 回复：0
CVE-2021-39459

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：14 | 回复：0
CVE-2021-40222

Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. It is possible to introduce shell code to create a reverse s ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：16 | 回复：0
CVE-2021-40223

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configuration dialog, Task Configuration dialog and set logging filt ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：9 | 回复：0
CVE-2020-7873

Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to cause a arbitrary file download and execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：7 | 回复：0
CVE-2020-7874

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerabili ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：17 | 回复：0
CVE-2021-26608

An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：13 | 回复：0
CVE-2021-28493

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：10 | 回复：0
CVE-2021-28494

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the W ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：18 | 回复：0
CVE-2021-28495

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the J ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：17 | 回复：0
CVE-2021-28497

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations w ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：7 | 回复：0
CVE-2021-28498

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：18 | 回复：0
CVE-2021-28499

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：17 | 回复：0
CVE-2021-37101

There is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2(H100SP15C00). Due to improper authorization mangement, an attakcer can exploit this vulnerability by ph ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：19 | 回复：0
CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP MaxLength value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：23 | 回复：0
CVE-2020-19143

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the TIFFVGetField funtion in the component 'libtiff/tif_dir.c'.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：30 | 回复：0
CVE-2020-19144

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：38 | 回复：0
CVE-2020-19515

qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：27 | 回复：0
CVE-2021-22239

An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：16 | 回复：0
CVE-2021-38540

The variable import endpoint was not protected by authentication in Airflow =2.0.0, 2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potenti ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：30 | 回复：0
CVE-2021-38721

FUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：6 | 回复：0
CVE-2021-38723

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：11 | 回复：0
CVE-2021-38725

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：20 | 回复：0
CVE-2021-32484

In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not nee ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：11 | 回复：0
CVE-2021-30726

A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:40 | 阅读：18 | 回复：0
CVE-2021-30727

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. A malicious application may be able to modify p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:40 | 阅读：45 | 回复：0
CVE-2021-30728

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious app ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:40 | 阅读：45 | 回复：0
CVE-2021-30729

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.6 and iPadOS 14.6. A device may accept invalid activation results.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:40 | 阅读：41 | 回复：0
CVE-2021-30731

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Catalina. An unprivileged application may be able to capture USB devices.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:40 | 阅读：56 | 回复：0
CVE-2021-30733

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macO ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:40 | 阅读：57 | 回复：0
CVE-2021-30734

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing m ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:40 | 阅读：43 | 回复：0