• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号
登陆 注册
描述文字
OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

CVE漏洞

RSS
  • CVE-2021-24029
    CVE-2021-24029
    A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed assertion. Per QUIC specification, this particular message shou ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：36 | 回复：0
  • CVE-2021-26987
    CVE-2021-26987
    Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Re ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：34 | 回复：0
  • CVE-2021-3418
    CVE-2021-3418
    If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：44 | 回复：0
  • CVE-2021-27230
    CVE-2021-27230
    ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save() to write to an _lang.php file under the system/user/langu ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：60 | 回复：0
  • CVE-2020-1926
    CVE-2020-1926
    Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：45 | 回复：0
  • CVE-2020-4851
    CVE-2020-4851
    IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：49 | 回复：0
  • CVE-2020-4890
    CVE-2020-4890
    IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense of rate limiting. IBM ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：44 | 回复：0
  • CVE-2020-4891
    CVE-2020-4891
    IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could allow a local user er to brute force Rest API account credentials. IBM X-Force ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：43 | 回复：0
  • CVE-2020-24263
    CVE-2020-24263
    Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical ca ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：45 | 回复：0
  • CVE-2020-24264
    CVE-2020-24264
    Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. The restriction checks for bind mounts are applied only on the client-side and no ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：53 | 回复：0
  • CVE-2021-21191
    CVE-2021-21191
    Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：53 | 回复：0
  • CVE-2021-21192
    CVE-2021-21192
    Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：49 | 回复：0
  • CVE-2021-21193
    CVE-2021-21193
    Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：47 | 回复：0
  • CVE-2021-28543
    CVE-2021-28543
    Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some configurations. This does not affect organizations that only install the Varnish Cac ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：53 | 回复：0
  • CVE-2021-22887
    CVE-2021-22887
    A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：40 | 回复：0
  • CVE-2021-25916
    CVE-2021-25916
    Prototype pollution vulnerability in 'patchmerge' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：60 | 回复：0
  • CVE-2021-27938
    CVE-2021-27938
    A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitra ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：50 | 回复：0
  • CVE-2020-28899
    CVE-2020-28899
    The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to us ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：45 | 回复：0
  • CVE-2021-28294
    CVE-2021-28294
    Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：33 | 回复：0
  • CVE-2021-28295
    CVE-2021-28295
    Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：29 | 回复：0
  • CVE-2021-28380
    CVE-2021-28380
    The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：34 | 回复：0
  • CVE-2021-28381
    CVE-2021-28381
    The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：33 | 回复：0
  • CVE-2021-3127
    CVE-2021-3127
    NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：43 | 回复：0
  • CVE-2021-20218
    CVE-2021-20218
    A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to ext ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：37 | 回复：0
  • CVE-2019-3853
    CVE-2019-3853
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：45 | 回复：0
  • CVE-2019-3897
    CVE-2019-3897
    It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, provided they know its name. Red Hat Certification 6 and 7 is vulnerable to this ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：29 | 回复：0
  • CVE-2019-3898
    CVE-2019-3898
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：40 | 回复：0
  • CVE-2019-3903
    CVE-2019-3903
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：59 | 回复：0
  • CVE-2021-3344
    CVE-2021-3344
    A privilege escalation flaw was found in OpenShift builder. During build time, credentials outside the build context are automatically mounted into the container image under construction. An OpenShift ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：38 | 回复：0
  • CVE-2017-20002
    CVE-2017-20002
    The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：42 | 回复：0
  • CVE-2020-11166
    CVE-2020-11166
    Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：29 | 回复：0
  • CVE-2020-11171
    CVE-2020-11171
    Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：29 | 回复：0
  • CVE-2020-11186
    CVE-2020-11186
    Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：40 | 回复：0
  • CVE-2020-11188
    CVE-2020-11188
    Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：41 | 回复：0
  • CVE-2020-11189
    CVE-2020-11189
    Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：46 | 回复：0
  • CVE-2020-11190
    CVE-2020-11190
    Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：37 | 回复：0
  • CVE-2020-11192
    CVE-2020-11192
    Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：42 | 回复：0
  • CVE-2020-11199
    CVE-2020-11199
    HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：47 | 回复：0
  • CVE-2020-11218
    CVE-2020-11218
    Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdr ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：38 | 回复：0
  • CVE-2020-11220
    CVE-2020-11220
    While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, S ...……
    作者：菜鸟教程小白 | 时间：2022-2-5 09:48 | 阅读：41 | 回复：0

关注我们

极客给你想要的成长

关注极客中国获取最新资讯

加入Q群 官方微博
热门推荐
More+
专题导读
More+
热门话题
More+
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服（服务时间 9:00～18:00）

在线QQ客服
地址：深圳市南山区西丽大学城创智工业园
电邮：jeky_zhao#qq.com
移动电话：139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap