漏洞 - 第525页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-41309

Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export audit logs of another user's Jira Service Management proj ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-3370

DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：19 | 回复：0
CVE漏洞

CVE-2020-22421

74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=c=helpa=help_listkey.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-44420

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-43808

Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting (XSS) vulnerability in the Blade templating engine. A broken HTML ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-44148

GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-43963

An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync d ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-43810

Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vul ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-42717

ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web server being unable to service legitimate req ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-42567

Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-40578

Authenticated Blind Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive inf ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-44149

An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resu ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-42688

An Integer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attacke ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-42687

A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B allows local attackers to execute arbitrary code in kernel mode or cause a deni ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-42686

An Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attackers to execute ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-42685

An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 . The IOCTL Handler 0x22005B in the Accops HyWorks DVM Tools prior to v3.3.1.105 allow local attackers to execu ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-42683

A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a deni ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-42682

An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-42681

A Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-38759

Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-36760

In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callb ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/wri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-34544

An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-34543

The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-28680

The devise_masquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：6 | 回复：0
CVE漏洞

CVE-2020-27356

The debug-meta-data plugin 1.1.2 for WordPress allows XSS.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-43638

Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-43637

Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-43006

AmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools = v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-43003

Amzetta zPortal Windows zClient is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient = v3.2.8180.148 allow local attackers to execute arbitrary code in kernel ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-43002

Amzetta zPortal DVM Tools is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools = v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-43000

Amzetta zPortal Windows zClient is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient = v3.2.8180.148 allow local attackers to execute arbitrary code in kernel ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-42996

Donglify is affected by Integer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of ser ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-42994

Donglify is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of serv ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-42993

FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers to execute arbitrary code in kernel mode o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-42990

FlexiHub For Windows is affected by Buffer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allows local attackers to execute arbitrary code in kernel mode o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-42988

Eltima USB Network Gate is affected by Buffer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to execute arbitrary code in kernel mode or c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-42987

Eltima USB Network Gate is affected by Integer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to execute arbitrary code in kernel mode or ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-42986

NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-42983

NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in k ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:34 | 阅读：15 | 回复：0