漏洞 - 第118页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-26966

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：204 | 回复：0
CVE漏洞

CVE-2022-0930

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：87 | 回复：0
CVE漏洞

CVE-2022-0929

XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：50 | 回复：0
CVE漏洞

CVE-2022-0926

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：42 | 回复：0
CVE漏洞

CVE-2022-0880

Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：47 | 回复：0
CVE漏洞

CVE-2022-26533

Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：25 | 回复：0
CVE漏洞

CVE-2022-26276

An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-24760

Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution (RCE) vulnerability in Parse Server. This vulnerability affects Parse Server in the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-42577

An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-42262

An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-41850

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-41849

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following Personally Identifiable Information (PII) in plaintext using HTTP to servers located in China: user's list ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-41848

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-party apps can provide a spoofed software update file that contains an arbitrary ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-24421

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during S ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：29 | 回复：0
CVE漏洞

CVE-2022-24420

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during S ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：30 | 回复：0
CVE漏洞

CVE-2022-24419

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during S ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：24 | 回复：0
CVE漏洞

CVE-2022-24416

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during S ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：24 | 回复：0
CVE漏洞

CVE-2022-24415

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during S ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：23 | 回复：0
CVE漏洞

CVE-2022-25839

The package url-js before 2.1.0 are vulnerable to Improper Input Validation due to improper parsing, which makes it is possible for the hostname to be spoofed. http://\\\\\\\\localhost and http://loca ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：24 | 回复：0
CVE漏洞

CVE-2022-24754

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-44667

A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：21 | 回复：0
CVE漏洞

CVE-2022-25621

UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：20 | 回复：0
CVE漏洞

CVE-2022-25601

Reflected Cross-Site Scripting (XSS) vulnerability affecting parameter tab discovered in Contact Form X WordPress plugin (versions = 2.4).……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：18 | 回复：0
CVE漏洞

CVE-2022-25600

Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions = 4.2.3).……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：19 | 回复：0
CVE漏洞

CVE-2022-25216

An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has r ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：19 | 回复：0
CVE漏洞

CVE-2022-24097

Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curren ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：25 | 回复：0
CVE漏洞

CVE-2022-24096

Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：29 | 回复：0
CVE漏洞

CVE-2022-24095

Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：49 | 回复：0
CVE漏洞

CVE-2022-24094

Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-24090

Adobe Photoshop versions 23.1.1 (and earlier) and 22.5.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：43 | 回复：0
CVE漏洞

CVE-2022-23934

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：37 | 回复：0
CVE漏洞

CVE-2022-23933

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：31 | 回复：0
CVE漏洞

CVE-2022-23932

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：30 | 回复：0
CVE漏洞

CVE-2022-23931

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：36 | 回复：0
CVE漏洞

CVE-2022-23930

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：51 | 回复：0
CVE漏洞

CVE-2022-23929

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：40 | 回复：0
CVE漏洞

CVE-2022-23928

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：57 | 回复：0
CVE漏洞

CVE-2022-23927

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：40 | 回复：0
CVE漏洞

CVE-2022-23926

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：53 | 回复：0
CVE漏洞

CVE-2022-23925

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:52 | 阅读：38 | 回复：0