漏洞 - 第327页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-23470

This affects the package putil-merge before 3.8.0. The merge() function does not check the values passed into the argument. An attacker can supply a malicious value by adjusting the value to include t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：47 | 回复：0
CVE漏洞

CVE-2022-24249

A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：57 | 回复：0
CVE漏洞

CVE-2021-45429

A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yr_set_configuration in yara/libyara/libyara.c, which could cause a Denial of Service.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：70 | 回复：0
CVE漏洞

CVE-2021-29398

Directory traversal in /northstar/Common/NorthFileManager/fileManagerObjects.jsp Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to browse and list the dir ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：66 | 回复：0
CVE漏洞

CVE-2021-29397

Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote local user to intercept users credentials transm ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：83 | 回复：0
CVE漏洞

CVE-2021-29396

Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to use various functionalities without authentication.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：110 | 回复：0
CVE漏洞

CVE-2021-29395

Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to download arbitrary files, including JSP sou ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：227 | 回复：0
CVE漏洞

CVE-2021-29394

Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote authenticated users to change the password of any targeted user accou ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：77 | 回复：0
CVE漏洞

CVE-2021-29393

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-43635

A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code via a crafted http code in a .json file.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：45 | 回复：0
CVE漏洞

CVE-2022-24262

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the w ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：45 | 回复：0
CVE漏洞

CVE-2022-24260

A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：45 | 回复：0
CVE漏洞

CVE-2022-24259

An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-46398

A Cross-Site Request Forgery vulnerability exists in Filebrowser 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webp ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：186 | 回复：0
CVE漏洞

CVE-2021-44978

iCMS = 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-44977

In iCMS =8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-44886

In Zammad 5.0.2, agents can configure out of office periods and substitute persons. If the substitute persons didn't have the same permissions as the original agent, they could receive ticket noti ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-43145

With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-44983

In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：20 | 回复：0
CVE漏洞

CVE-2022-23316

An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=filectrl=downloadpath=../../1.txt.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-46320

In OpenZeppelin =v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal proxies) may be reentered if they make an untrusted non-view e ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-44903

Micro-Star International (MSI) Center Pro = 2.0.16.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sy ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-44901

Micro-Star International (MSI) Dragon Center = 2.0.116.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X6 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-44900

Micro-Star International (MSI) App Player = 4.280.1.6309 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the NTIOLib_X64.sys and BstkDrv_msi2.sys drivers components. All th ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-44899

Micro-Star International (MSI) Center = 1.0.31.0 is vulnerable to multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sys, WinRing0.sy ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：8 | 回复：0
CVE漏洞

CVE-2022-24172

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-24171

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary c ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-24170

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary c ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:27 | 阅读：8 | 回复：0
CVE漏洞

CVE-2022-24169

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindAdd. This vulnerability allows attackers to cause a Denial of Service (DoS) via th ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：7 | 回复：0
CVE漏洞

CVE-2022-24168

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup. This vulnerability allows attackers to execute arbitrary comma ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：7 | 回复：0
CVE漏洞

CVE-2022-24167

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：5 | 回复：0
CVE漏洞

CVE-2022-24166

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-24165

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetQvlanList. This vulnerability allows attackers to execute arbitrary com ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-24164

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetVirtualSer. This vulnerability allows attackers to cause a Denial of Service (DoS) via t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：7 | 回复：0
CVE漏洞

CVE-2022-24163

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：7 | 回复：0
CVE漏洞

CVE-2022-24162

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time paramete ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：7 | 回复：0
CVE漏洞

CVE-2022-24161

Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mac parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：6 | 回复：0
CVE漏洞

CVE-2022-24160

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：7 | 回复：0
CVE漏洞

CVE-2022-24159

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer. This vulnerability allows attackers to cause a Denial of Service (DoS) via the startIp and endIp ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：7 | 回复：0
CVE漏洞

CVE-2022-24158

Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：7 | 回复：0