漏洞 - 第465页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-38010

Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML pa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-38009

Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-38008

Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-38007

Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-38006

Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-38005

Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：21 | 回复：0
CVE漏洞

CVE-2020-20605

Blog CMS v1.0 contains a cross-site scripting (XSS) vulnerability in the /controller/CommentAdminController.java component.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：24 | 回复：0
CVE漏洞

CVE-2020-20601

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：12 | 回复：0
CVE漏洞

CVE-2020-20600

MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=columnc=indexa=doAddColumn.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：25 | 回复：0
CVE漏洞

CVE-2020-20598

A cross-site scripting (XSS) vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：21 | 回复：0
CVE漏洞

CVE-2020-20597

A cross-site scripting (XSS) vulnerability in the potrtalItemName parameter in \web\PortalController.java of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：9 | 回复：0
CVE漏洞

CVE-2020-20595

A cross-site request forgery (CSRF) in OPMS v1.3 and below allows attackers to arbitrarily add a user account via /user/add.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：23 | 回复：0
CVE漏洞

CVE-2020-20593

A cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：7 | 回复：0
CVE漏洞

CVE-2020-20426

S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in /function/booksave.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：8 | 回复：0
CVE漏洞

CVE-2020-20425

S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in the search function.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-43853

Ajax.NET Professional (AjaxPro) is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-45461

FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 202 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：48 | 回复：0
CVE漏洞

CVE-2021-44544

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-44471

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed fro ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-40417

When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that were submitted with the job along with fields that were parsed ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-40394

An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit 71493260). A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-40393

An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit 71493260). A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-39306

A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Authentication challenge text in WEP security.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-36886

Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions = 1.2.5.9).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-36885

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions = 1.2.6.1).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-31558

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-23228

DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-21953

An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted man-in-the-middle attack can lead to incr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-21952

An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network pack ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-21937

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter’ parameter. This can be done as any aut ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-21936

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘health_alt_filter’ parameter. This can be done as any a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-21935

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter2’ parameter. This can be done as any au ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-21934

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘imei_filter’ parameter. This can be done as any authenticated user or ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-21933

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘esn_filter’ parameter. This can be done as any authenticated user or ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-21932

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘name_filter’ parameter. This can be done as any authenticated user or ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-21931

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at‘ stat_filter’ parameter to trigger this vulnerability. This can be done as any authent ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：55 | 回复：0
CVE漏洞

CVE-2021-21930

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘sn_filter’ parameter to trigger this vulnerability. This can be done as any authentic ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:44 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-21929

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘prod_filter’ parameter to trigger this vulnerability. This can be done as any authent ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:43 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-21928

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘mac_filter’ parameter to trigger this vulnerability. This can be done as any authenti ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:43 | 阅读：21 | 回复：0