漏洞 - 第357页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-44838

An issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a POST request indicating the risk to access with the id parameter, it is possible for users to access ris ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-44836

An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-44840

An issue was discovered in Delta RM 1.2. Using an privileged account, it is possible to edit, create, and delete risk labels, such as Criticality and Priority Indication labels. By using the /core/tab ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：14 | 回复：0
CVE漏洞

CVE-2022-21683

Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have repl ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-46013

An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-46012

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-46005

Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehicalorcview parameter.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-34406

NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a system reboot.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-34405

NVIDIA Linux distributions contain a vulnerability in TrustZoneâ€™s TEE_Malloc function, where an unchecked return value causing a null pointer dereference may lead to denial of service.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-34404

Android images for T210 provided by NVIDIA contain a vulnerability in BROM, where failure to limit access to AHB-DMA when BROM fails may allow an unprivileged attacker with physical access to cause de ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-34403

NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free condition, leading to code privilege escalation, loss of confi ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-34402

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-34401

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control may lead to code execution, compromised integrity, or denial of ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：8 | 回复：0
CVE漏洞

CVE-2022-23083

NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting) vulnerability in ReportCenter UI due to insufficient input validation that coul ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-22691

The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbr ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：8 | 回复：0
CVE漏洞

CVE-2022-22690

Within the Umbraco CMS, a configuration element named UmbracoApplicationUrl (or just ApplicationUrl) is used whenever application code needs to build a URL pointing back to the site. For example, when ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：7 | 回复：0
CVE漏洞

CVE-2022-0244

An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due to incorrect handling of file.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-0236

The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpie_proces ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：21 | 回复：0
CVE漏洞

CVE-2022-0233

The ProfileGrid – User Profiles, Memberships, Groups and Communities WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the pm_user_avatar and pm_cover_ima ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：23 | 回复：0
CVE漏洞

CVE-2022-0232

The User Registration, Login Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loader_text parameter found in the ~/includes/templates/l ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：25 | 回复：0
CVE漏洞

CVE-2022-0215

The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the save_settings ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：33 | 回复：0
CVE漏洞

CVE-2022-0210

The Random Banner WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the category parameter found in the ~/include/models/model.php file which allowed attac ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：26 | 回复：0
CVE漏洞

CVE-2022-0172

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowi ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：39 | 回复：0
CVE漏洞

CVE-2022-0154

An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：40 | 回复：0
CVE漏洞

CVE-2022-0152

An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLa ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：34 | 回复：0
CVE漏洞

CVE-2022-0151

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLa ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：25 | 回复：0
CVE漏洞

CVE-2022-0125

An issue has been discovered in GitLab affecting all versions starting from 12.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：19 | 回复：0
CVE漏洞

CVE-2022-0124

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's Slack integration is incorrectly validating user input an ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：15 | 回复：0
CVE漏洞

CVE-2022-0093

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive info ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：21 | 回复：0
CVE漏洞

CVE-2022-0090

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab is configured in a way that it doesn't ignore replacement r ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-4083

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially tr ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-4074

The WHMCS Bridge WordPress plugin is vulnerable to Stored Cross-Site Scripting via the cc_whmcs_bridge_url parameter found in the ~/whmcs-bridge/bridge_cp.php file which allows attackers to inject arb ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-43353

The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made i ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-41809

SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-41808

In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled b ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-41807

Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forci ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-39946

Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-39942

A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-39927

Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and between 14.6.0 and 14.6.1 would fail to protect against attacks sending requests ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-39892

In all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they don't have a maintainer role on and disclose email addresses of those users. ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:06 | 阅读：10 | 回复：0