• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号
登陆 注册
描述文字
OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

CVE漏洞

RSS
  • CVE-2021-21834
    CVE-2021-21834
    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：7 | 回复：0
  • CVE-2021-21835
    CVE-2021-21835
    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：13 | 回复：0
  • CVE-2021-21836
    CVE-2021-21836
    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：12 | 回复：0
  • CVE-2021-21840
    CVE-2021-21840
    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input used to process a ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：8 | 回复：0
  • CVE-2021-21841
    CVE-2021-21841
    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when reading an a ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：17 | 回复：0
  • CVE-2021-21842
    CVE-2021-21842
    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an inte ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：17 | 回复：0
  • CVE-2021-21848
    CVE-2021-21848
    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The library will actually reuse the parser for ato ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：8 | 回复：0
  • CVE-2021-21849
    CVE-2021-21849
    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an inte ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：23 | 回复：0
  • CVE-2021-21850
    CVE-2021-21850
    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an inte ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：64 | 回复：0
  • CVE-2021-21869
    CVE-2021-21869
    An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：13 | 回复：0
  • CVE-2021-22236
    CVE-2021-22236
    Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client application. This vulnerability is present in GitLab CE/EE since version 14.1.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：6 | 回复：0
  • CVE-2021-22237
    CVE-2021-22237
    Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulnerability is present in GitLab CE/EE versions befor ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：27 | 回复：0
  • CVE-2021-22242
    CVE-2021-22242
    Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：27 | 回复：0
  • CVE-2021-22243
    CVE-2021-22243
    Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain access into a group.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：6 | 回复：0
  • CVE-2021-22244
    CVE-2021-22244
    Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：9 | 回复：0
  • CVE-2021-22245
    CVE-2021-22245
    Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：6 | 回复：0
  • CVE-2021-22247
    CVE-2021-22247
    Improper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private projects to view CI/CD analytics……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：16 | 回复：0
  • CVE-2021-22250
    CVE-2021-22250
    Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators created for their account……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：8 | 回复：0
  • CVE-2021-22256
    CVE-2021-22256
    Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry errors and track their status……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：14 | 回复：0
  • CVE-2021-31989
    CVE-2021-31989
    A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memo ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：15 | 回复：0
  • CVE-2021-32975
    CVE-2021-32975
    Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerabilit ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：8 | 回复：0
  • CVE-2021-32995
    CVE-2021-32995
    Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerabili ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：6 | 回复：0
  • CVE-2021-33015
    CVE-2021-33015
    Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker co ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：17 | 回复：0
  • CVE-2021-39159
    CVE-2021-39159
    BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments from code repositories. In affected versions a remote code execution vulnerabil ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：17 | 回复：0
  • CVE-2021-3605
    CVE-2021-3605
    There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：10 | 回复：0
  • CVE-2021-3713
    CVE-2021-3713
    An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：16 | 回复：0
  • CVE-2020-18065
    CVE-2020-18065
    Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：13 | 回复：0
  • CVE-2020-19547
    CVE-2020-19547
    Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php.……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：12 | 回复：0
  • CVE-2021-1577
    CVE-2021-1577
    A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：31 | 回复：0
  • CVE-2021-1578
    CVE-2021-1578
    A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：20 | 回复：0
  • CVE-2021-1579
    CVE-2021-1579
    A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：19 | 回复：0
  • CVE-2021-1580
    CVE-2021-1580
    Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection o ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：15 | 回复：0
  • CVE-2021-1581
    CVE-2021-1581
    Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection o ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：16 | 回复：0
  • CVE-2021-1582
    CVE-2021-1582
    A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow an authenticated, remote attacker to perform a stored cross-site scripting at ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：14 | 回复：0
  • CVE-2021-1583
    CVE-2021-1583
    A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：19 | 回复：0
  • CVE-2021-1584
    CVE-2021-1584
    A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to elevate privileges on an affected device. Th ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：9 | 回复：0
  • CVE-2021-1586
    CVE-2021-1586
    A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remot ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：14 | 回复：0
  • CVE-2021-1587
    CVE-2021-1587
    A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of serv ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：6 | 回复：0
  • CVE-2021-1588
    CVE-2021-1588
    A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：6 | 回复：0
  • CVE-2021-1590
    CVE-2021-1590
    A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to unexpectedly restart, c ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 11:36 | 阅读：6 | 回复：0

关注我们

极客给你想要的成长

关注极客中国获取最新资讯

加入Q群 官方微博
热门推荐
More+
专题导读
More+
热门话题
More+
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服（服务时间 9:00～18:00）

在线QQ客服
地址：深圳市南山区西丽大学城创智工业园
电邮：jeky_zhao#qq.com
移动电话：139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap