漏洞 - 第581页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-37732

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x: 6.5.4.18 and below; A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:11 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-35214

The vulnerability in SolarWinds Pingdom can be described as a failure to invalidate user session upon password or email address change. When running multiple active sessions in separate browser window ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:11 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-40500

SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. The ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:11 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-40499

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be execu ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:11 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-40498

A vulnerability has been identified in SAP SuccessFactors Mobile Application for Android - versions older than 2108, which allows an attacker to prevent legitimate users from accessing a service, eith ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:11 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-40497

SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These endpoints are normally exposed over the n ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:11 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-40496

SAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 785, allows an attacker with logon functionality, to exploit the authentication f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:11 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-40495

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:11 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-38183

SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs, allowing an attacker to cause a potential victim to supply a malicious content to a vulnerable web app ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:11 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-38181

SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allows an attacker to prevent legitimate users from accessing a service, either by c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-38180

SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel (CSV injection) due to improper sanitation during the data export. An attacker could thereby execute ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-38179

Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include User credentials.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-38178

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-37730

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-37727

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-37726

A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that add ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-38460

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-38458

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-38456

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-38454

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-38452

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-25634

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-21941

A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to remote code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-21940

A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：11 | 回复：0
CVE漏洞

CVE-2020-28145

Arbitrary file deletion vulnerability was discovered in wuzhicms v 4.0.1 via coreframe\app\attachment\admin\index.php, which allows attackers to access sensitive information.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-41546

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions V2.14.1), RUGGEDCOM ROX RX1400 (All versions V2.14.1), RUGGEDCOM ROX RX1500 (All versions V2.14.1), RUGGEDCOM ROX RX1501 (A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-37199

A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions V4.95). Affected devices don't process correctly certain special crafted packets sent to port 10 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-33736

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted reques ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-33735

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted reques ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-33734

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted reques ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-33733

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted reques ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：47 | 回复：0
CVE漏洞

CVE-2021-33732

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted reques ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-33731

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted reques ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-33730

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted reques ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-33729

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). An authenticated attacker that is able to import firmware containers to an affected system could execute arbitrary c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-33728

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). The affected system allows to upload JSON objects that are deserialized to JAVA objects. Due to insecure deserializa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-33727

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). An authenticated attacker could download the user profile of any user. With this, the attacker could leak confidenti ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-33726

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). The affected system allows to download arbitrary files under a user controlled path and does not correctly check if ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-33725

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled path and does not correc ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-33724

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP2 Update 1). The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary fi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:10 | 阅读：25 | 回复：0