漏洞 - 第482页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-43747

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：64 | 回复：0
CVE漏洞

CVE-2021-43746

Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：64 | 回复：0
CVE漏洞

CVE-2021-43030

Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User intera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-43029

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：58 | 回复：0
CVE漏洞

CVE-2021-43028

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：73 | 回复：0
CVE漏洞

CVE-2021-43026

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：58 | 回复：0
CVE漏洞

CVE-2021-43025

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：54 | 回复：0
CVE漏洞

CVE-2021-43024

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：54 | 回复：0
CVE漏洞

CVE-2021-43023

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EPS/TIFF file, potentially resulting in arbitrary code executi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：60 | 回复：0
CVE漏洞

CVE-2021-43022

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PNG file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：52 | 回复：0
CVE漏洞

CVE-2021-43021

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EXR file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：55 | 回复：0
CVE漏洞

CVE-2021-42809

Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：55 | 回复：0
CVE漏洞

CVE-2021-42808

Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：56 | 回复：0
CVE漏洞

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：55 | 回复：0
CVE漏洞

CVE-2021-40784

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-40783

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：52 | 回复：0
CVE漏洞

CVE-2021-38421

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds read, which may allow an attacker to read sensitive information from other memory locations ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-38419

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a system crash, or code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-38415

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to exec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：56 | 回复：0
CVE漏洞

CVE-2021-38413

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：65 | 回复：0
CVE漏洞

CVE-2021-38409

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to unexpected memory loca ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：67 | 回复：0
CVE漏洞

CVE-2021-38401

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the applic ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：71 | 回复：0
CVE漏洞

CVE-2021-36889

Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js – Cookies legislation GDPR WordPress plugin (versions = 1.6).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-36887

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation GDPR WordPress plugin (versions = 1.5.4), vulnerable parame ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：60 | 回复：0
CVE漏洞

CVE-2021-35248

It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：45 | 回复：0
CVE漏洞

CVE-2021-35244

The Log alert to a file action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could us ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-35234

Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and passw ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：65 | 回复：0
CVE漏洞

CVE-2021-22057

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious actor, who has successfully provided first-factor authentication, may be able to obt ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：57 | 回复：0
CVE漏洞

CVE-2021-22056

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP reque ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-43441

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：66 | 回复：0
CVE漏洞

CVE-2021-43440

Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：59 | 回复：0
CVE漏洞

CVE-2021-43439

RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：60 | 回复：0
CVE漏洞

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：56 | 回复：0
CVE漏洞

CVE-2021-43437

In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：61 | 回复：0
CVE漏洞

CVE-2020-19316

OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：67 | 回复：0
CVE漏洞

CVE-2021-44525

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-44676

Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects of the application state.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：76 | 回复：0
CVE漏洞

CVE-2021-44675

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：56 | 回复：0
CVE漏洞

CVE-2020-8105

OS Command Injection vulnerability in the wirelessConnect handler of Abode iota All-In-One Security Kit allows an attacker to inject commands and gain root access. This issue affects: Abode iota All-I ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：58 | 回复：0
CVE漏洞

CVE-2021-44916

Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be exec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:40 | 阅读：51 | 回复：0