漏洞 - 第503页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-34399

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed registers, which may ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-23219

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access protected information, which may lead to information dis ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-23217

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to instantiate a specifically timed DMA write to corrupt code exec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-23201

NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller which may allow a user with elevated privileges to generate valid microcode. This could lead to information disclos ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-1125

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to corrupt program data.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-1105

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to inform ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-1088

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient access control, whic ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-36340

Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-36322

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arb ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-36321

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-36320

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-36319

Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can gain access to SNMP authentication failur ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-36310

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vul ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-36308

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-36307

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentia ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-36306

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-38681

A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNA ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-34358

We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-40826

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-40171

The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to block legitim ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-40170

An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to trigger arbitrary system functionality by repla ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-38701

Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68; T290 before 4.4.0.80; T008 before 2.2.0.86; T205 before 4.12.0.62; T204 before 3 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-36450

Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-26787

A cross site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 can occur (during record deletion) via the Time-off parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-41871

An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-41870

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-41844

Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-4110

mruby is vulnerable to NULL Pointer Dereference……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-43827

discourse-footnote is a library providing footnotes for posts in Discourse. ### Impact When posting an inline footnote wrapped in `a` tags (e.g. `a^/a`, the resulting rendered HTML would include a nes ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-44942

glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /public_html/admin/plugins/bad_behavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-4108

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-44948

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-44942. Reason: This candidate is a duplicate of CVE-2021-44942. Notes: All CVE users should reference CVE-2021-44942 instead of this ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-43830

OpenProject is a web-based project management software. OpenProject versions = 12.0.0 are vulnerable to a SQL injection in the budgets module. For authenticated users with the Edit budgets permission, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-43829

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.7.7 PatrowlManager unrestrictly handle upload files in the findings import feature. This vulner ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-43828

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management (IDOR) has been found in PatrowlManager. All imports findin ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-43821

Opencast is an Open Source Lecture Capture Video Management for Education. Opencast before version 9.10 or 10.6 allows references to local file URLs in ingested media packages, allowing attackers to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-43051

The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：64 | 回复：0
CVE漏洞

CVE-2021-39183

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-34426

A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the keybase git lfs-config command on the command-line. In versions prior to 5.6.0, a malicio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-34425

The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in the chat\'s link preview functionality. In ve ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：19 | 回复：0