漏洞 - 第302页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-43299

Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-25258

An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2021-3242

DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：4 | 回复：0
CVE漏洞

CVE-2022-25255

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23644

BookWyrm is a decentralized social network for tracking reading habits and reviewing books. The functionality to load a cover via url is vulnerable to a server-side request forgery attack. Any BookWyr ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2021-3781

A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2021-3773

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2021-3760

A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2021-3753

A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_io ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2021-3752

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2021-3578

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated struc ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2021-3560

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivilege ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-22853

A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Na ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-24665

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-24664

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-24663

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：4 | 回复：0
CVE漏洞

CVE-2022-24086

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not re ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23804

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-cr ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23803

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-cr ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23204

Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to byp ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23203

Adobe Photoshop versions 22.5.4 (and earlier) and 23.1 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23202

Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23200

Adobe After Effects versions 22.1.1 (and earlier) and 18.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23199

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：4 | 回复：0
CVE漏洞

CVE-2022-23198

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23197

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23196

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23195

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23194

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23193

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：3 | 回复：0
CVE漏洞

CVE-2022-23192

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-23191

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-23190

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-23189

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-23188

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted malicious file, potentially resulting in ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-23186

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curren ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-22945

VMware NSX Edge contains a CLI shell injection vulnerability. A malicious actor with SSH access to an NSX-Edge appliance can execute arbitrary commands on the operating system as root.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-22792

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handl ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-0617

A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use th ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-0513

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the ~/includes/class-wp-statistics-exclus ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:30 | 阅读：6 | 回复：0