漏洞 - 第565页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-42105

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to es ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-42104

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to es ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-42103

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must fi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-42102

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow a local attacker to escalate privileges on affected installations. An attacker ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-42101

An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must fi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-42012

A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected ins ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-42011

An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Pleas ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-23139

A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-40123

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative read-only privileges to download files t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-40122

A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-40121

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site scripting (XSS) attack against a user of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-39127

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL endpoint via a Broken Access Control vulnerability (BAC) vulnerability. The affec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-39126

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery (CSRF) vulnerability, following an Information Disclosure ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-34789

A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected system. This ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-34760

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-34743

A vulnerability in the application integration feature of Cisco Webex Software could allow an unauthenticated, remote attacker to authorize an external application to integrate with and access a user ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-34738

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to conduct a cross-site scripting (XSS) attack against a user of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-34736

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interfa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-1529

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient inp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-42097

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-42096

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that passwo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-41163

Discourse is an open source platform for community discussion. In affected versions maliciously crafted requests could lead to remote code execution. This resulted from a lack of validation in subscri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-42299

Microsoft Surface Pro 3 Security Feature Bypass Vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-42766

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (long-range consensus chain reorganizations), even when this adversary has litt ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-42765

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of service (indefinite stalling of consensus decisions).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-42764

The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (delayed consensus decisions), and also increase the profits of individual vali ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-42762

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not conf ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-41167

modern-async is an open source JavaScript tooling library for asynchronous operations using async/await and promises. In affected versions a bug affecting two of the functions in this library: forEach ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-38896

IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality po ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-41135

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic met ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-21749

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-21748

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-21745

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a reques ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-21744

ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of the device, causing some security functions of the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-21743

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a specially crafted HTTP request.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-3542

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-42739. Reason: This candidate is a reservation duplicate of CVE-2021-42739. Notes: All CVE users should reference CVE-2021-42739 ins ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-21747

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-21746

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-23452

This affects all versions of package x-assign. The global proto object can be polluted using the __proto__ object.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:14 | 阅读：19 | 回复：0