CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-31146

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：18 | 回复：0
CVE-2021-31147

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：9 | 回复：0
CVE-2021-31148

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：10 | 回复：0
CVE-2021-31149

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：8 | 回复：0
CVE-2021-31150

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：9 | 回复：0
CVE-2021-39157

detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The pr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：8 | 回复：0
CVE-2021-39509

An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the u ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：5 | 回复：0
CVE-2021-39510

An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：13 | 回复：0
CVE-2020-18913

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array parameter. This vulnerability allows attackers to access sensitive ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：9 | 回复：0
CVE-2020-18917

The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's contr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：11 | 回复：0
CVE-2021-31151

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：11 | 回复：0
CVE-2021-32777

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions when ext-authz extension is sending request headers to the externa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：22 | 回复：0
CVE-2021-32778

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy’s procedure for resetting a HTTP/2 stream has O(N^2) comple ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：9 | 回复：0
CVE-2021-32779

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy incorrectly handled a URI '#fragment' element as par ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：47 | 回复：0
CVE-2021-32780

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it rec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：12 | 回复：0
CVE-2021-32781

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions after Envoy sends a locally generated response it must stop furthe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：9 | 回复：0
CVE-2021-39155

Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. According to (https:// ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：14 | 回复：0
CVE-2021-39156

Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio 1.11.0, 1.10.3 a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：14 | 回复：0
CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case (NSEC3 with too many iterations used for a positive wildcard proof).……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：8 | 回复：0
CVE-2021-40084

opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. For example, it allows command execution via a crafted GECOS field whereas systemd-sysus ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：20 | 回复：0
CVE-2021-40086

An issue was discovered in PrimeKey EJBCA before 7.6.0. As part of the configuration of the aliases for SCEP, CMP, EST, and Auto-enrollment, the enrollment secret was reflected on a page (that can onl ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：18 | 回复：0
CVE-2021-40087

An issue was discovered in PrimeKey EJBCA before 7.6.0. When audit logging changes to the alias configurations of various protocols that use an enrollment secret, any modifications to the secret were ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：18 | 回复：0
CVE-2021-40088

An issue was discovered in PrimeKey EJBCA before 7.6.0. CMP RA Mode can be configured to use a known client certificate to authenticate enrolling clients. The same RA client certificate is used for re ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：32 | 回复：0
CVE-2021-40089

An issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher, which is normally run to invoke a local script upon a publishing operation, was still able to run if the S ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：12 | 回复：0
CVE-2021-39112

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. The affe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：12 | 回复：0
CVE-2021-33882

A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to reconfigure the device from an unknown source because of lack of auth ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：12 | 回复：0
CVE-2021-33883

A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. T ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：18 | 回复：0
CVE-2021-33884

An Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows remote attackers to upload any files to the /tmp directory of the device through the w ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：30 | 回复：0
CVE-2021-33885

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data that will be used i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：28 | 回复：0
CVE-2021-33886

An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to gain user-level command-line access by passing a raw external stri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：19 | 回复：0
CVE-2021-33605

Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to 14.0.0), 2.0.0 prior to 3.0.0 (Vaadin 14.0.0 prior to 14.5.0), 3.0.0 through 4. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：14 | 回复：0
CVE-2018-10790

The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service (application crash), related to a memory allocation failure, as demonstrated by mp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：12 | 回复：0
CVE-2020-18971

Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：19 | 回复：0
CVE-2020-18972

Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp&#3 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：15 | 回复：0
CVE-2020-18974

Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019- ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：27 | 回复：0
CVE-2020-18976

Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：24 | 回复：0
CVE-2021-39136

baserCMS is an open source content management system with a focus on Japanese language support. In affected versions there is a cross-site scripting vulnerability in the file upload function of the ma ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：15 | 回复：0
CVE-2021-39160

nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：12 | 回复：0
CVE-2021-1523

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote attacker to cause a queue wedge on a leaf switch, whi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：15 | 回复：0
CVE-2021-21778

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：21 | 回复：0