漏洞 - 第150页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-24826

On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：49 | 回复：0
CVE漏洞

CVE-2022-24858

next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2 will patch this vulnerability. If you are not able ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：43 | 回复：0
CVE漏洞

CVE-2022-0071

Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or syscall filters of the target JVM process. This would allow a container to exhaust ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：40 | 回复：0
CVE漏洞

CVE-2022-0070

Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-3101

Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-3100

The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM being patched, allowing it to escalate privileges.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：37 | 回复：0
CVE漏洞

CVE-2022-28222

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php`……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：33 | 回复：0
CVE漏洞

CVE-2022-28221

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php`……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：48 | 回复：0
CVE漏洞

CVE-2022-27863

Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine PMS plugin = 1.5.3 on WordPress allows attackers to get the booking data by guessing / brute-forcing easy predictable book ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：44 | 回复：0
CVE漏洞

CVE-2022-27862

Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine PMS plugin = 1.5.3 on WordPress allows attackers to upload and execute dangerous file types (e.g. PHP shell) via the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：51 | 回复：0
CVE漏洞

CVE-2022-27527

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：50 | 回复：0
CVE漏洞

CVE-2022-25788

A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：44 | 回复：0
CVE漏洞

CVE-2022-21498

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：122 | 回复：0
CVE漏洞

CVE-2022-21497

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily expl ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：64 | 回复：0
CVE漏洞

CVE-2022-21496

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：78 | 回复：0
CVE漏洞

CVE-2022-21494

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：85 | 回复：0
CVE漏洞

CVE-2022-21493

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with lo ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：114 | 回复：0
CVE漏洞

CVE-2022-21492

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). The supported version that is affected is 5.9.0.0.0. Easily expl ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：82 | 回复：0
CVE漏洞

CVE-2022-21491

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low pri ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：70 | 回复：0
CVE漏洞

CVE-2022-21490

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：49 | 回复：0
CVE漏洞

CVE-2022-21489

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：50 | 回复：0
CVE漏洞

CVE-2022-21488

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low pri ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：41 | 回复：0
CVE漏洞

CVE-2022-21487

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low pri ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：85 | 回复：0
CVE漏洞

CVE-2022-21486

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：50 | 回复：0
CVE漏洞

CVE-2022-21485

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：52 | 回复：0
CVE漏洞

CVE-2022-21484

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：78 | 回复：0
CVE漏洞

CVE-2022-21483

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：84 | 回复：0
CVE漏洞

CVE-2022-21482

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high priv ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：54 | 回复：0
CVE漏洞

CVE-2022-21481

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Financial Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerabil ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：61 | 回复：0
CVE漏洞

CVE-2022-21480

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: User Interface). Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerabi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：56 | 回复：0
CVE漏洞

CVE-2022-21479

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privil ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：50 | 回复：0
CVE漏洞

CVE-2022-21478

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privil ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：59 | 回复：0
CVE漏洞

CVE-2022-21476

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：67 | 回复：0
CVE漏洞

CVE-2022-21475

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：66 | 回复：0
CVE漏洞

CVE-2022-21474

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vu ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：84 | 回复：0
CVE漏洞

CVE-2022-21473

Vulnerability in the Oracle Banking Treasury Management product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to expl ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：60 | 回复：0
CVE漏洞

CVE-2022-21472

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.4, 14.0-14.3 and 14.5. ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：77 | 回复：0
CVE漏洞

CVE-2022-21471

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low pri ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：66 | 回复：0
CVE漏洞

CVE-2022-21470

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerabi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：74 | 回复：0
CVE漏洞

CVE-2022-21469

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：92 | 回复：0