漏洞 - 第571页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-31362

A Protection Mechanism Failure vulnerability in RPD (routing protocol daemon) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause established IS-IS a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-31361

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Conditions in Juniper Networks Junos OS on QFX Series and PTX Series allows an unau ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-31360

An improper privilege management vulnerability in the Juniper Networks Junos OS and Junos OS Evolved command-line interpreter (CLI) allows a low-privileged user to overwrite local files as root, possi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-31359

A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to cause the Juniper DHCP daemon (jdhcpd) process to crash, resulting i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-31358

A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-31357

A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-31356

A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to exec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-31355

A persistent cross-site scripting (XSS) vulnerability in the captive portal graphical user interface of Juniper Networks Junos OS may allow a remote authenticated user to inject web script or HTML and ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-31354

An Out Of Bounds (OOB) access vulnerability in the handling of responses by a Juniper Agile License (JAL) Client in Juniper Networks Junos OS and Junos OS Evolved, configured in Network Mode (to use J ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-31353

An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject a specific BGP update, causing the routing protocol daemon ( ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-31352

An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which could allow a remote attacker to obtain sens ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-31351

An Improper Check for Unusual or Exceptional Conditions in packet processing on the MS-MPC/MS-MIC utilized by Juniper Networks Junos OS allows a malicious attacker to send a specific packet, triggerin ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-31350

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit (JET) API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-pri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-31349

The usage of an internal HTTP header created an authentication bypass vulnerability (CWE-287), allowing an attacker to view internal files, change settings, manipulate services and execute arbitrary c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-0299

An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Junos OS results in a kernel crash, causing t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-0298

A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the FPC, if the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-0297

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-0296

The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response header which allows servers to indicate that content from the requested domain ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-41149

Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The tough library, prior to 0.12.0, does not properly sanitize target names when cach ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-41140

Discourse-reactions is a plugin for the Discourse platform that allows user to add their reactions to the post. In affected versions reactions given by user to secure topics and private messages are v ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-41131

python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ngclient`), there is a path traversal vulnerability that in the worst case can ove ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-35323

Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-32664

Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability on run query page when logged as administrator. This has been resolved in version ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-32663

iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup without authentication. Given specific parameters this can lead to SSRF. This is ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-33988

Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-38911

IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user. IBM X-Force ID: 209940.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-29912

IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionali ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：15 | 回复：0
CVE漏洞

CVE-2020-12141

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclose information via crafted SNMP packets to snmp_ber_decode_s ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-39355

The Indeed Job Importer WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/indeed-job-importer/tr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-39343

The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-39329

The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/includes/admin/class-metabox.ph ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was rec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-37136

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2De ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-36832

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions = 2.0.2) vulnerable at Headline (message_data) input.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-27001

Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-26589

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting (XSS) because the Session Cookie is mi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：24 | 回复：0
CVE漏洞

CVE-2011-1075

FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new version in. In particular, it uses the MD5File() function ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-30850

An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6, tvOS 15. A user may gain access to protected parts of the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-30849

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for W ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:13 | 阅读：28 | 回复：0