漏洞 - 第594页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-41864

prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel through 5.14.9 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds writ ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-41862

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：381 | 回复：0
CVE漏洞

CVE-2021-38109

Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-38108

Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-38107

CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to acces ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-41847

An issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting physical security. Users with login credentials assigned to a specific zone can send modified HTTP GET and POS ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-38110

Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：6 | 回复：0
CVE漏洞

CVE-2021-38106

UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to acces ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-38105

IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to acces ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：6 | 回复：0
CVE漏洞

CVE-2021-38102

IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to acces ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-38101

CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-38100

Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-38098

Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-36309

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius cre ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-36298

Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to auth ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：19 | 回复：0
CVE漏洞

CVE-2020-21228

JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-41845

A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. The only affected versions are 10.9.000032 through 11.0.000006.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-38104

IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to acces ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:08 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-38103

IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-38099

CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-38096

Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitra ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：25 | 回复：0
CVE漏洞

CVE-2020-21014

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：33 | 回复：0
CVE漏洞

CVE-2020-21013

emlog v6.0.0 contains a SQL injection via /admin/comment.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：24 | 回复：0
CVE漏洞

CVE-2020-21012

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-38097

Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execut ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：6 | 回复：0
CVE漏洞

CVE-2021-41467

Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-41465

Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel para ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-41464

Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parame ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-41463

Cross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types/group_combination.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web scr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-41462

Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID param ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-41461

Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the mode param ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-40975

Cross-site scripting (XSS) vulnerability in application/modules/admin/views/ecommerce/products.php in Ecommerce-CodeIgniter-Bootstrap (Codeigniter 3.1.11, Bootstrap 3.3.7) allows remote attackers to i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-40973

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-40972

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-40971

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-40970

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-40969

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-40968

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-40928

Cross-site scripting (XSS) vulnerability in index.php in FlexTV beta development version allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-40927

Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:07 | 阅读：14 | 回复：0