漏洞 - 第505页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-39308

The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the ~/processresponse.php file which allows attackers to in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-38361

The .htaccess Redirect WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the link parameter found in the ~/htaccess-redirect.php file which allows attackers to inject arbitrary web ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-38182

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-4107

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-4007

Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-44949

glFusion CMS 1.7.9 is affected by an access control vulnerability via /public_html/users.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-42051

An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a malicious SVG document that contains an XSS payload.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-42050

An issue was discovered in AbanteCart before 1.3.2. It allows DOM Based XSS.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-45015

taocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\include\Model\file.php from line 60 to line 72.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-45014

There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cmsctrl=updateid=26……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-44538

The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-3376

An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-36721

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-44937

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php. An attacker can register with the mailbox of any user. When users want to register, they will ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-44935

glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html/comment.php. The attacker can complete the attack remotely without interaction.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-4104

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnection ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-44524

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-44523

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-44522

A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-44450

A vulnerability has been identified in JT Utilities (All versions V12.8.1.1), JTTK (All versions V10.8.1.1). JTTK library in affected products is vulnerable to an out of bounds read past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-44449

A vulnerability has been identified in JT Utilities (All versions V12.8.1.1), JTTK (All versions V10.8.1.1). JTTK library in affected products contains an out of bounds write past the end of an allo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：55 | 回复：0
CVE漏洞

CVE-2021-44448

A vulnerability has been identified in JT Utilities (All versions V13.0.3.0), JTTK (All versions V11.0.3.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-44447

A vulnerability has been identified in JT Utilities (All versions V13.0.3.0), JTTK (All versions V11.0.3.0). JTTK library in affected products contains a use-after-free vulnerability that could be t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-44446

A vulnerability has been identified in JT Utilities (All versions V13.0.3.0), JTTK (All versions V11.0.3.0). JTTK library in affected products contains an out of bounds write past the end of an allo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-44445

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products contains an out of bounds write past the fixed-length h ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-44444

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-44443

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products contains an out of bounds write past the end of an allo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-44442

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products contains an out of bounds write past the fixed-length h ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-44441

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products contains an out of bounds write past the end of an allo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-44440

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to memory corruption condition while pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-44439

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-44438

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-44437

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-44436

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-44435

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to stack based buffer overflow while pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-44434

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-44433

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products contains a use after free vulnerability that could be t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-44432

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to stack based buffer overflow while pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-44431

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-44430

A vulnerability has been identified in JT Utilities (All versions V13.1.1.0), JTTK (All versions V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:37 | 阅读：17 | 回复：0