• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号
登陆 注册
描述文字
OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

CVE漏洞

RSS
  • CVE-2022-27941
    CVE-2022-27941
    tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：27 | 回复：0
  • CVE-2022-27942
    CVE-2022-27942
    tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：26 | 回复：0
  • CVE-2022-27943
    CVE-2022-27943
    libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：34 | 回复：0
  • CVE-2022-27945
    CVE-2022-27945
    NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to passwor ...……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：35 | 回复：0
  • CVE-2022-27946
    CVE-2022-27946
    NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_a ...……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：30 | 回复：0
  • CVE-2022-27947
    CVE-2022-27947
    NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan ...……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：30 | 回复：0
  • CVE-2022-26198
    CVE-2022-26198
    Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：28 | 回复：0
  • CVE-2022-26200
    CVE-2022-26200
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：36 | 回复：0
  • CVE-2022-26620
    CVE-2022-26620
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：30 | 回复：0
  • CVE-2022-26205
    CVE-2022-26205
    Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields. This vulnerability allows attackers to execute arbitrary code via inje ...……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：34 | 回复：0
  • CVE-2022-27948
    CVE-2022-27948
    ** DISPUTED ** Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. NOTE: the v ...……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：44 | 回复：0
  • CVE-2022-1106
    CVE-2022-1106
    use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：47 | 回复：0
  • CVE-2022-26245
    CVE-2022-26245
    Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：39 | 回复：0
  • CVE-2022-26252
    CVE-2022-26252
    aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain the root user private SSH key(id_rsa).……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：47 | 回复：0
  • CVE-2022-26254
    CVE-2022-26254
    WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：38 | 回复：0
  • CVE-2021-44127
    CVE-2021-44127
    In DLink DAP-1360 F1 firmware version =v6.10 in the webupg binary, an attacker can use the file parameter to execute arbitrary system commands when the parameter is name=deleteFile after being authori ...……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：39 | 回复：0
  • CVE-2022-26255
    CVE-2022-26255
    Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：34 | 回复：0
  • CVE-2022-26258
    CVE-2022-26258
    D-Link DIR-820L 1.05B03 was discovered to contain a remote command execution (RCE) vulnerability via the Device Name parameter in /lan.asp.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：40 | 回复：0
  • CVE-2021-26598
    CVE-2021-26598
    ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have a security token).……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：52 | 回复：0
  • CVE-2021-26599
    CVE-2021-26599
    ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：64 | 回复：0
  • CVE-2021-26600
    CVE-2021-26600
    ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：57 | 回复：0
  • CVE-2021-26601
    CVE-2021-26601
    ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：47 | 回复：0
  • CVE-2021-44208
    CVE-2021-44208
    OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：36 | 回复：0
  • CVE-2021-44209
    CVE-2021-44209
    OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：48 | 回复：0
  • CVE-2021-44210
    CVE-2021-44210
    OX App Suite through 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：51 | 回复：0
  • CVE-2021-44211
    CVE-2021-44211
    OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：35 | 回复：0
  • CVE-2022-26259
    CVE-2022-26259
    A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allo ...……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：56 | 回复：0
  • CVE-2022-26268
    CVE-2022-26268
    Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：54 | 回复：0
  • CVE-2022-26271
    CVE-2022-26271
    74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：51 | 回复：0
  • CVE-2021-44212
    CVE-2021-44212
    OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：49 | 回复：0
  • CVE-2021-44213
    CVE-2021-44213
    OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：53 | 回复：0
  • CVE-2021-44617
    CVE-2021-44617
    A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：47 | 回复：0
  • CVE-2021-45490
    CVE-2021-45490
    The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：51 | 回复：0
  • CVE-2021-45491
    CVE-2021-45491
    3CX System through 2022-03-17 stores cleartext passwords in a database.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：55 | 回复：0
  • CVE-2022-24303
    CVE-2022-24303
    Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：67 | 回复：0
  • CVE-2022-26273
    CVE-2022-26273
    EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：85 | 回复：0
  • CVE-2022-27950
    CVE-2022-27950
    In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：84 | 回复：0
  • CVE-2022-25757
    CVE-2022-25757
    In Apache APISIX before 2.13.0, when decoding JSON with duplicate keys, lua-cjson will choose the last occurred value as the result. By passing a JSON with a duplicate key, the attacker can bypass the ...……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：77 | 回复：0
  • CVE-2021-46433
    CVE-2021-46433
    In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCode()to bypass sandbox to execute arbitrary PHP code when disable_native_funcs is true.……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：76 | 回复：0
  • CVE-2021-46434
    CVE-2021-46434
    ** UNSUPPORTED WHEN ASSIGNED ** EMQ X Dashboard V3.0.0 is affected by username enumeration in the /api /v3/auth interface. When a user login, the application returns different results depending on whe ...……
    作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：68 | 回复：0

关注我们

极客给你想要的成长

关注极客中国获取最新资讯

加入Q群 官方微博
热门推荐
More+
专题导读
More+
热门话题
More+
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服（服务时间 9:00～18:00）

在线QQ客服
地址：深圳市南山区西丽大学城创智工业园
电邮：jeky_zhao#qq.com
移动电话：139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap