• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号
登陆 注册
描述文字
OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

CVE漏洞

RSS
  • CVE-2021-31611
    CVE-2021-31611
    The Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly handle an out-of-order LMP Setup procedure that is followed by a malformed LMP packet, allowing attacke ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：5 | 回复：0
  • CVE-2021-31612
    CVE-2021-31612
    The Bluetooth Classic implementation on Zhuhai Jieli AC690X devices does not properly handle the reception of an oversized LMP packet greater than 17 bytes during the LMP auto rate procedure, allowing ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：18 | 回复：0
  • CVE-2021-31785
    CVE-2021-31785
    The Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly handle the reception of multiple LMP_host_connection_req packets, allowing attackers in radio range to tr ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：14 | 回复：0
  • CVE-2021-31786
    CVE-2021-31786
    The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, al ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：11 | 回复：0
  • CVE-2021-34143
    CVE-2021-34143
    The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C_DEMO_V1.0 does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：11 | 回复：0
  • CVE-2021-34145
    CVE-2021-34145
    The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with an invalid Baseband packet type (and ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：15 | 回复：0
  • CVE-2021-34146
    CVE-2021-34146
    The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denia ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：48 | 回复：0
  • CVE-2021-34147
    CVE-2021-34147
    The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：14 | 回复：0
  • CVE-2021-34148
    CVE-2021-34148
    The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completio ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：25 | 回复：0
  • CVE-2021-34149
    CVE-2021-34149
    The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets, allowing attackers in radio range to trigger a den ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：15 | 回复：0
  • CVE-2021-36162
    CVE-2021-36162
    Apache Dubbo supports various rules to support configuration override or traffic routing (called routing in Dubbo). These rules are loaded into the configuration center (eg: Zookeeper, Nacos, ...) and ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：13 | 回复：0
  • CVE-2021-36163
    CVE-2021-36163
    In Apache Dubbo, users may choose to use the Hessian protocol. The Hessian protocol is implemented on top of HTTP and passes the body of a POST request directly to a HessianSkeleton: New HessianSkelet ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：23 | 回复：0
  • CVE-2021-36696
    CVE-2021-36696
    Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in social media links on a user profile due to lack of input validation.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：27 | 回复：0
  • CVE-2020-7877
    CVE-2020-7877
    A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' command while parsing a crafted OUTERIP value because of missing boundary che ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：19 | 回复：0
  • CVE-2021-36717
    CVE-2021-36717
    Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the Name parameter, the attacker can return to the root directory and open the host file. This might give the attac ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：19 | 回复：0
  • CVE-2021-37218
    CVE-2021-37218
    HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：20 | 回复：0
  • CVE-2021-37219
    CVE-2021-37219
    HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：33 | 回复：0
  • CVE-2021-38615
    CVE-2021-38615
    In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to view and modify information.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：16 | 回复：0
  • CVE-2021-38616
    CVE-2021-38616
    In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to increase their own permissions via a user_permissions array in ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：18 | 回复：0
  • CVE-2021-38617
    CVE-2021-38617
    In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privile ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：21 | 回复：0
  • CVE-2021-38698
    CVE-2021-38698
    HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：20 | 回复：0
  • CVE-2019-5318
    CVE-2019-5318
    A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：31 | 回复：0
  • CVE-2021-33599
    CVE-2021-33599
    A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner). The vulnerability can ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：13 | 回复：0
  • CVE-2021-37716
    CVE-2021-37716
    A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：19 | 回复：0
  • CVE-2021-37717
    CVE-2021-37717
    A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7 ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：12 | 回复：0
  • CVE-2021-37718
    CVE-2021-37718
    A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7 ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：17 | 回复：0
  • CVE-2021-37719
    CVE-2021-37719
    A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9 ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：14 | 回复：0
  • CVE-2021-37720
    CVE-2021-37720
    A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9 ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：5 | 回复：0
  • CVE-2021-37721
    CVE-2021-37721
    A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9 ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：14 | 回复：0
  • CVE-2021-37722
    CVE-2021-37722
    A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9 ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：19 | 回复：0
  • CVE-2021-37723
    CVE-2021-37723
    A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS t ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：11 | 回复：0
  • CVE-2021-37724
    CVE-2021-37724
    A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS t ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：8 | 回复：0
  • CVE-2021-37725
    CVE-2021-37725
    A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.8.0.1, 8 ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：29 | 回复：0
  • CVE-2021-37728
    CVE-2021-37728
    A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13. Aruba has released patches for ArubaOS that address t ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：34 | 回复：0
  • CVE-2021-37729
    CVE-2021-37729
    A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8 ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：13 | 回复：0
  • CVE-2021-37731
    CVE-2021-37731
    A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8. ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：14 | 回复：0
  • CVE-2021-37733
    CVE-2021-37733
    A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.11, 8 ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：17 | 回复：0
  • CVE-2021-39285
    CVE-2021-39285
    A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the administration web interface URL to create a XSS based attack.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：20 | 回复：0
  • CVE-2021-27022
    CVE-2021-27022
    A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinR ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：33 | 回复：0
  • CVE-2021-33285
    CVE-2021-33285
    In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：23 | 回复：0

关注我们

极客给你想要的成长

关注极客中国获取最新资讯

加入Q群 官方微博
热门推荐
More+
专题导读
More+
热门话题
More+
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服（服务时间 9:00～18:00）

在线QQ客服
地址：深圳市南山区西丽大学城创智工业园
电邮：jeky_zhao#qq.com
移动电话：139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap