漏洞 - 第326页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-40401

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and Gerbv forked 2.7.1. A specially-crafted gerber file can ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-38960

IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-38130

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an informati ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-36152

Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions = 0.15.0. Users should update to version 0.16.0 which addresses this issue.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-36151

In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions = 0.15.0. Users should update to version 0.16.0 which addre ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-32732

### Impact It's possible to know if a user has or not an account in a wiki related to an email address, and which username(s) is actually tied to that email by forging a request to the Forgot user ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-32036

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-29219

A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.R3507P02. HPE has made the following software update to reso ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-29218

A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-28503

The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-22288

Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-22286

Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-22285

Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of ser ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-22284

Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-21971

An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to an out-of-bounds write. An a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-21970

An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. The HandleIncomingSeaCloudMessage function uses at the json_o ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-21969

An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. The HandleIncomingSeaCloudMessage function uses at the json_o ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-21968

A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to arbitrary file overwrite. An atta ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-21965

A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. Specially-crafted network packets can lead to denial of ser ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-21964

A denial of service vulnerability exists in the Modbus configuration functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. Specially-crafted network packets can lead to denial of service. A ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-21963

An information disclosure vulnerability exists in the Web Server functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted man-in-the-middle attack can lead to a disclosure ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：59 | 回复：0
CVE漏洞

CVE-2021-21962

A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A series of specially-crafted MQTT payloads can lead to ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：77 | 回复：0
CVE漏洞

CVE-2021-21961

A stack-based buffer overflow vulnerability exists in the NBNS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted network packet can lead to remote code execution. An ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：91 | 回复：0
CVE漏洞

CVE-2021-21960

A stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted network packet can lead to remote code executi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：101 | 回复：0
CVE漏洞

CVE-2021-21959

A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. This misconfiguration significantly simplifies a man-in-the-middle attack, which directly leads ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：179 | 回复：0
CVE漏洞

CVE-2020-7534

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user i ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：112 | 回复：0
CVE漏洞

CVE-2020-12966

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：90 | 回复：0
CVE漏洞

CVE-2020-12965

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：70 | 回复：0
CVE漏洞

CVE-2020-12891

AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：72 | 回复：0
CVE漏洞

CVE-2018-25029

The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and then exploit a differ ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：61 | 回复：0
CVE漏洞

CVE-2013-20003

Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：120 | 回复：0
CVE漏洞

CVE-2022-23330

A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：43 | 回复：0
CVE漏洞

CVE-2022-23329

A vulnerability in ${freemarker.template.utility.Execute?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：45 | 回复：0
CVE漏洞

CVE-2022-24348

Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover cre ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-46671

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-24448

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. I ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：32 | 回复：0
CVE漏洞

CVE-2022-24129

The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to intera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-45408

Open Redirect vulnerability exists in SeedDMS 6.0.15 in out.Login.php, which llows remote malicious users to redirect users to malicious sites using the referuri parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-23507

The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. *Note:* This vulnerability derives f ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-23497

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. **Note:** This vulnerability derives from an incomplet ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：35 | 回复：0