漏洞 - 第333页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-46666

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：271 | 回复：0
CVE漏洞

CVE-2021-46665

MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：267 | 回复：0
CVE漏洞

CVE-2021-46664

MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：281 | 回复：0
CVE漏洞

CVE-2021-46663

MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：259 | 回复：0
CVE漏洞

CVE-2021-46662

MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：285 | 回复：0
CVE漏洞

CVE-2021-46661

MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：227 | 回复：0
CVE漏洞

CVE-2022-24266

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the order_by parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：247 | 回复：0
CVE漏洞

CVE-2022-24265

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/menu_filter=3 parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：234 | 回复：0
CVE漏洞

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the search_word parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：226 | 回复：0
CVE漏洞

CVE-2022-24263

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：574 | 回复：0
CVE漏洞

CVE-2022-23872

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /admin/configure.php via the parameter footer_info.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：257 | 回复：0
CVE漏洞

CVE-2022-21659

Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions there exists a user enumeration vulnerability. This vulnerability allows for a n ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：261 | 回复：0
CVE漏洞

CVE-2021-46459

Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilities can be exploited through a crafted POST request ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：222 | 回复：0
CVE漏洞

CVE-2021-44114

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：245 | 回复：0
CVE漏洞

CVE-2021-42635

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code execution.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：243 | 回复：0
CVE漏洞

CVE-2021-42631

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：230 | 回复：0
CVE漏洞

CVE-2022-0286

A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：243 | 回复：0
CVE漏洞

CVE-2021-46458

Victor CMS v1.0 was discovered to contain a SQL injection vulnerability in the component admin/posts.php?source=add_post. This vulnerability can be exploited through a crafted POST request via the pos ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：228 | 回复：0
CVE漏洞

CVE-2021-40042

There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R01 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：218 | 回复：0
CVE漏洞

CVE-2021-40033

There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause i ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：254 | 回复：0
CVE漏洞

CVE-2021-31617

In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：235 | 回复：0
CVE漏洞

CVE-2021-28962

Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：224 | 回复：0
CVE漏洞

CVE-2021-46101

In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：251 | 回复：0
CVE漏洞

CVE-2020-36064

Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：237 | 回复：0
CVE漏洞

CVE-2020-36056

Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.09_55 was discovered to contain a cross-site scripting (XSS) vulnerability via the Ping diagnostic option.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：239 | 回复：0
CVE漏洞

CVE-2021-44255

Authenticated remote code execution in MotionEye = 0.42.1 and MotioneEyeOS = 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which wil ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：245 | 回复：0
CVE漏洞

CVE-2022-0414

Business Logic Errors in Packagist dolibarr/dolibarr prior to 16.0.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：226 | 回复：0
CVE漏洞

CVE-2021-23521

This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic li ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：176 | 回复：0
CVE漏洞

CVE-2021-23520

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：222 | 回复：0
CVE漏洞

CVE-2022-23409

The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：159 | 回复：0
CVE漏洞

CVE-2021-45079

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EA ...……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：168 | 回复：0
CVE漏洞

CVE-2021-34805

An issue was discovered in FAUST iServer before 9.0.019.019.7. For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：177 | 回复：0
CVE漏洞

CVE-2021-27971

Alps Alpine Touchpad Driver 10.3201.101.215 is vulnerable to DLL Injection.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：164 | 回复：0
CVE漏洞

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：128 | 回复：0
CVE漏洞

CVE-2022-0413

Use After Free in GitHub repository vim/vim prior to 8.2.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：126 | 回复：0
CVE漏洞

CVE-2022-0408

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：134 | 回复：0
CVE漏洞

CVE-2022-0407

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：129 | 回复：0
CVE漏洞

CVE-2022-0339

Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：132 | 回复：0
CVE漏洞

CVE-2022-0273

Improper Access Control in Pypi calibreweb prior to 0.6.16.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：115 | 回复：0
CVE漏洞

CVE-2022-22919

Adenza AxiomSL ControllerView through 10.8.1 allows redirection for SSO login URLs.……

作者：菜鸟教程小白 | 时间：2022-6-23 07:53 | 阅读：116 | 回复：0