漏洞 - 第160页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-44486

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain con ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-44485

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-44484

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL poin ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-44483

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-44482

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupti ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-44481

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in check_and_set_timeout in sr_unix/ztimeoutroutines.c allows attackers to attempt to r ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：32 | 回复：0
CVE漏洞

CVE-2022-27852

Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) = 1.5.5……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：40 | 回复：0
CVE漏洞

CVE-2022-27851

Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) = 6.1.7 allows an attacker to deactivate the API key.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：63 | 回复：0
CVE漏洞

CVE-2022-27850

Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) = 20220115 allows an attacker to clear the chat log or delete a chat message.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：39 | 回复：0
CVE漏洞

CVE-2022-27849

Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) = 20220115……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-42230

Seowon 130-SLC router all versions as of 2021-09-15 is vulnerable to Remote Code Execution via the queriesCnt parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-36828

Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance (WordPress plugin) = 6.0.4 affects multiple inputs.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-36205

Under certain circumstances the session token is not cleared on logout.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：25 | 回复：0
CVE漏洞

CVE-2022-29268

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：30 | 回复：0
CVE漏洞

CVE-2022-28109

Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding. The impact is: execute arbitrary code (remote). The component is: WebDriver endpoint ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：21 | 回复：0
CVE漏洞

CVE-2022-27258

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：20 | 回复：0
CVE漏洞

CVE-2022-26594

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to inject arbitrary web script or HTML via a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:15 | 阅读：20 | 回复：0
CVE漏洞

CVE-2022-23865

Nyron 1.0 is affected by a SQL injection vulnerability through Nyron/Library/Catalog/winlibsrch.aspx. To exploit this vulnerability, an attacker must inject ' on the thes1 parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：19 | 回复：0
CVE漏洞

CVE-2022-21159

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of se ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：21 | 回复：0
CVE漏洞

CVE-2022-27043

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：17 | 回复：0
CVE漏洞

CVE-2022-20761

A vulnerability in the integrated wireless access point (AP) packet processing of the Cisco 1000 Series Connected Grid Router (CGR1K) could allow an unauthenticated, adjacent attacker to cause a denia ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：18 | 回复：0
CVE漏洞

CVE-2022-20758

A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：17 | 回复：0
CVE漏洞

CVE-2022-20747

A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system. This vulnerability is d ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：16 | 回复：0
CVE漏洞

CVE-2022-20739

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：16 | 回复：0
CVE漏洞

CVE-2022-20735

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affec ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：15 | 回复：0
CVE漏洞

CVE-2022-20731

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：15 | 回复：0
CVE漏洞

CVE-2022-20727

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：15 | 回复：0
CVE漏洞

CVE-2022-20726

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：17 | 回复：0
CVE漏洞

CVE-2022-20725

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：19 | 回复：0
CVE漏洞

CVE-2022-20724

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：19 | 回复：0
CVE漏洞

CVE-2022-20723

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：20 | 回复：0
CVE漏洞

CVE-2022-20722

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：19 | 回复：0
CVE漏洞

CVE-2022-20721

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：18 | 回复：0
CVE漏洞

CVE-2022-20720

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：23 | 回复：0
CVE漏洞

CVE-2022-20719

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：30 | 回复：0
CVE漏洞

CVE-2022-20718

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：26 | 回复：0
CVE漏洞

CVE-2022-20717

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service (Do ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：37 | 回复：0
CVE漏洞

CVE-2022-20716

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：26 | 回复：0
CVE漏洞

CVE-2022-20714

A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the line card ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：21 | 回复：0
CVE漏洞

CVE-2022-20697

A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerabi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:14 | 阅读：22 | 回复：0