CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-21744

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouri ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：111 | 回复：0
CVE-2022-21763

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：123 | 回复：0
CVE-2022-21764

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：117 | 回复：0
CVE-2022-21765

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：118 | 回复：0
CVE-2022-21766

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：126 | 回复：0
CVE-2022-21767

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：122 | 回复：0
CVE-2022-21768

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：122 | 回复：0
CVE-2022-21769

In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed f ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：138 | 回复：0
CVE-2022-21770

In sound driver, there is a possible information disclosure due to symlink following. This could lead to local information disclosure with System execution privileges needed. User interaction is not n ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：134 | 回复：0
CVE-2022-21771

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：198 | 回复：0
CVE-2022-21772

In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：145 | 回复：0
CVE-2022-21773

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：175 | 回复：0
CVE-2022-21774

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：183 | 回复：0
CVE-2022-21775

In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed fo ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：168 | 回复：0
CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploit ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：153 | 回复：0
CVE-2022-21777

In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：189 | 回复：0
CVE-2022-21779

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：199 | 回复：0
CVE-2022-21780

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：185 | 回复：0
CVE-2022-21781

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：175 | 回复：0
CVE-2022-21782

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：195 | 回复：0
CVE-2022-21783

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：248 | 回复：0
CVE-2022-21784

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：346 | 回复：0
CVE-2022-21785

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：269 | 回复：0
CVE-2022-21786

In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed fo ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：201 | 回复：0
CVE-2022-21787

In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not n ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：194 | 回复：0
CVE-2022-23172

An attacker can access to Forgot my password button, as soon as he puts users is valid in the system, the system would issue a message that a password reset email had been sent to user. This way you c ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：195 | 回复：0
CVE-2022-23173

this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the Login menu - demo site then he can see in this menu all the functio ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：196 | 回复：0
CVE-2022-23713

A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：183 | 回复：0
CVE-2022-23714

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges t ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：186 | 回复：0
CVE-2022-30619

Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in legacy Work Center module. He attack is available for any authenticated user, i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：184 | 回复：0
CVE-2022-30929

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：165 | 回复：0
CVE-2021-3695

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：156 | 回复：0
CVE-2021-3696

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：153 | 回复：0
CVE-2021-3697

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some tri ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：150 | 回复：0
CVE-2022-33737

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：180 | 回复：0
CVE-2022-33738

OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：192 | 回复：0
CVE-2022-26078

Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher Gallagher Controller 6000 vCR8.60 versions ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：236 | 回复：0
CVE-2022-26348

Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an attacker using the Visitor Management Kiosk, an ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：245 | 回复：0
CVE-2022-34595

Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：180 | 回复：0
CVE-2022-34596

Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSetting.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：176 | 回复：0