漏洞 - 第149页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-29533

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a weird single checkbox page.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：24 | 回复：0
CVE漏洞

CVE-2022-29532

An issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one administrator puts a javascript: URL in the URL field, and another administrator clicks on it.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：20 | 回复：0
CVE漏洞

CVE-2022-29531

An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：21 | 回复：0
CVE漏洞

CVE-2022-29530

An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：22 | 回复：0
CVE漏洞

CVE-2022-29529

An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：24 | 回复：0
CVE漏洞

CVE-2022-29528

An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：26 | 回复：0
CVE漏洞

CVE-2022-24874

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-28820. Reason: This candidate is a reservation duplicate of CVE-2022-28820. Notes: All CVE users should reference CVE-2022-28820 ins ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：23 | 回复：0
CVE漏洞

CVE-2022-24872

Shopware is an open commerce platform based on Symfony Framework and Vue. Permissions set to sales channel context by admin-api are still usable within normal user session. Users are advised to update ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：23 | 回复：0
CVE漏洞

CVE-2022-24865

HumHub is an Open Source Enterprise Social Network. In affected versions users who are forced to change their password by an administrator may retrieve other users' data. This issue has been resol ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-43481

An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstage.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-37740

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the d ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：56 | 回复：0
CVE漏洞

CVE-2022-26133

SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：37 | 回复：0
CVE漏洞

CVE-2022-24871

Shopware is an open commerce platform based on Symfony Framework and Vue. In affected versions an attacker can abuse the Admin SDK functionality on the server to read or update internal resources. Use ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：36 | 回复：0
CVE漏洞

CVE-2022-24864

Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to `/presale/join`. User-controlled data ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：28 | 回复：0
CVE漏洞

CVE-2022-24862

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC dr ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：24 | 回复：0
CVE漏洞

CVE-2022-24861

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be prov ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：33 | 回复：0
CVE漏洞

CVE-2022-0540

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versio ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：20 | 回复：0
CVE漏洞

CVE-2022-24799

wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of injecting and exe ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：18 | 回复：0
CVE漏洞

CVE-2022-27179

A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resour ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：16 | 回复：0
CVE漏洞

CVE-2022-26519

There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to brute-force credentials.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：20 | 回复：0
CVE漏洞

CVE-2022-26516

Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：20 | 回复：0
CVE漏洞

CVE-2022-1318

Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuration pages can be viewed by a malicious actor. The size of certain communicati ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：18 | 回复：0
CVE漏洞

CVE-2022-1039

The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be acces ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：16 | 回复：0
CVE漏洞

CVE-2022-0567

A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-43990

The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-43988

The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of files to gain unauthorized access rights.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-43986

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalatio ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-43933

The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap me ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-38483

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：16 | 回复：0
CVE漏洞

CVE-2022-25344

An XSS issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application doesn't properly check parameters, sent in a /dvcset/sysset/set.cgi POST request via the arg01. ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：17 | 回复：0
CVE漏洞

CVE-2022-25343

An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Denial of Service. An unauthenticated attacker, who can send POST requests to the /downl ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：18 | 回复：0
CVE漏洞

CVE-2022-25342

An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Broken Access Control. It does not properly validate requests for access to data and fun ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：25 | 回复：0
CVE漏洞

CVE-2022-1254

A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and controlled release 11.x prior to 11.1.3 a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：31 | 回复：0
CVE漏洞

CVE-2022-29527

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situation ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：34 | 回复：0
CVE漏洞

CVE-2022-28327

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：39 | 回复：0
CVE漏洞

CVE-2022-27536

Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：41 | 回复：0
CVE漏洞

CVE-2022-24675

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：108 | 回复：0
CVE漏洞

CVE-2022-29266

In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive in ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：49 | 回复：0
CVE漏洞

CVE-2022-27629

Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：46 | 回复：0
CVE漏洞

CVE-2022-24860

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate l ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：48 | 回复：0