漏洞 - 第23页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-20887

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：726 | 回复：0
CVE漏洞

CVE-2022-20886

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：548 | 回复：0
CVE漏洞

CVE-2022-20885

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：630 | 回复：0
CVE漏洞

CVE-2022-32556

An issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log files with certain crashes.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：1450 | 回复：0
CVE漏洞

CVE-2022-20884

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：1020 | 回复：0
CVE漏洞

CVE-2022-20883

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：814 | 回复：0
CVE漏洞

CVE-2022-20882

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：560 | 回复：0
CVE漏洞

CVE-2022-20881

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：826 | 回复：0
CVE漏洞

CVE-2022-34367

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contain(s) a Cross-Site Request Forgery Vulnerability. A(n) remote unauthenticated attacker could potentially exploit this ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：641 | 回复：0
CVE漏洞

CVE-2022-33923

Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, l ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：2076 | 回复：0
CVE漏洞

CVE-2022-32498

Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI. A local attacker can potentially exploit this vulnerability to execute arbitrary code, escalate privile ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：928 | 回复：0
CVE漏洞

CVE-2022-31234

Dell EMC PowerStore, contain(s) an Improper Restriction of Excessive Authentication Attempts Vulnerability in PowerStore Manager GUI. A remote unauthenticated attacker could potentially exploit this v ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：855 | 回复：0
CVE漏洞

CVE-2022-31171

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-31159. Reason: This candidate is a reservation duplicate of CVE-2022-31159. Notes: All CVE users should reference CVE-2022-31159 ins ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：735 | 回复：0
CVE漏洞

CVE-2022-31151

Authorization headers are cleared on cross-origin redirect. However, cookie headers which are sensitive headers and are official headers found in the spec, remain uncleared. There are active users usi ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：551 | 回复：0
CVE漏洞

CVE-2022-31146

Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be incorrectly missing metadata required for ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：495 | 回复：0
CVE漏洞

CVE-2022-22555

Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：1594 | 回复：0
CVE漏洞

CVE-2022-20880

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：585 | 回复：0
CVE漏洞

CVE-2022-20879

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：577 | 回复：0
CVE漏洞

CVE-2022-20878

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：1050 | 回复：0
CVE漏洞

CVE-2022-20877

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：562 | 回复：0
CVE漏洞

CVE-2022-20876

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：660 | 回复：0
CVE漏洞

CVE-2022-20875

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：539 | 回复：0
CVE漏洞

CVE-2022-20874

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：616 | 回复：0
CVE漏洞

CVE-2022-20873

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：705 | 回复：0
CVE漏洞

CVE-2022-20861

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request f ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：501 | 回复：0
CVE漏洞

CVE-2022-20860

A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated controllers or view sensitive information ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：555 | 回复：0
CVE漏洞

CVE-2022-20858

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request f ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：589 | 回复：0
CVE漏洞

CVE-2022-20857

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to execute arbitrary commands, read or upload container image files, or perform a cross-site request f ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：567 | 回复：0
CVE漏洞

CVE-2020-36558

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：513 | 回复：0
CVE漏洞

CVE-2020-36557

A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：572 | 回复：0
CVE漏洞

CVE-2022-34590

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/admin.php.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：639 | 回复：0
CVE漏洞

CVE-2022-34588

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetable_insert_form.php.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：887 | 回复：0
CVE漏洞

CVE-2022-34586

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/student_grade_wise.php.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：665 | 回复：0
CVE漏洞

CVE-2022-31160

jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializin ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：1305 | 回复：0
CVE漏洞

CVE-2022-29923

Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin = 1.4.1 at WordPress.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:18 | 阅读：1018 | 回复：0
CVE漏洞

CVE-2022-29454

Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin = 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:17 | 阅读：704 | 回复：0
CVE漏洞

CVE-2021-36849

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in René Hermenau's Social Media Share Buttons plugin = 3.8.1 at WordPress.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:17 | 阅读：647 | 回复：0
CVE漏洞

CVE-2020-21406

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:17 | 阅读：579 | 回复：0
CVE漏洞

CVE-2020-21405

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk……

作者：菜鸟教程小白 | 时间：2022-7-29 17:17 | 阅读：818 | 回复：0
CVE漏洞

CVE-2022-35569

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a cra ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:17 | 阅读：796 | 回复：0