漏洞 - 第360页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-23178

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are va ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2022-23095

Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerabi ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-44049

CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-33963

China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2022-23094

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-24044

By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yi ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-46171

Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-46169

Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-46168

Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2022-22531

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2022-22530

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2022-22529

SAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled inputs which may lead to an unauthorized attacker possibly exploit XSS vulnerability. The UIs in ETD a ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2022-22290

Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2022-21137

Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project files, which may allow an attacker to execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2022-0130

Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could allow a remote, unauthenticated attacker to execute code under special circumstances. ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-46195

GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-46022

An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-46021

An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-46020

An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-46019

An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-45782

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-45781

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-45780

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：6 | 回复：0
CVE漏洞

CVE-2021-45779

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-45778

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-45775

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-45774

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-45773

A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-45769

A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-45767

GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id(). This vulnerability can lead to a Denial of Service (DoS).……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-45764

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra().……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-45406

In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query while generating a report. Upon successfully discovering the login admi ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-45068

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-45067

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that coul ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-45064

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-45063

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-45062

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-45061

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-45060

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:05 | 阅读：22 | 回复：0