漏洞 - 第597页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2020-18684

Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：35 | 回复：0
CVE漏洞

CVE-2020-18683

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-41826

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessions_controller.rb open redirect.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-41824

Craft CMS before 3.7.14 allows CSV injection.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-41821

Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service. A crafted message must be sent from an authenticated agent to the man ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：42 | 回复：0
CVE漏洞

CVE-2020-20781

A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：55 | 回复：0
CVE漏洞

CVE-2021-41034

The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such stacks are vulnerable to MITM attacks tha ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：43 | 回复：0
CVE漏洞

CVE-2020-20131

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：43 | 回复：0
CVE漏洞

CVE-2020-20129

LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：46 | 回复：0
CVE漏洞

CVE-2020-20128

LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-41795

The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass. By targeting a vulnerable component of this extension, a malicious web p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-41764

A cross-site request forgery (CSRF) vulnerability exists in Streama up to and including v1.10.3. The application does not have CSRF checks in place when performing actions such as uploading local file ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-3653

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-39342

The Credova_Financial WordPress plugin discloses a site's associated Credova API account username and password in plaintext via an AJAX action whenever a site user goes to checkout on a page that ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：45 | 回复：0
CVE漏洞

CVE-2021-35945

Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-35944

Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：45 | 回复：0
CVE漏洞

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-22947

When curl = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-22946

A user can tell curl = 7.20.0 and = 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_ ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：37 | 回复：0
CVE漏洞

CVE-2020-12030

There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. If a user enables the VLAN setting, the internal gateway firewall becomes di ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-41732

** DISPUTED ** An issue was discovered in zeek version 4.1.0. There is a HTTP request splitting vulnerability that will invalidate any ZEEK HTTP based security analysis. NOTE: the vendor's positio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-41573

Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure. If authenticated user creates a link to a file or folder while the system was running version 4.3.x or earlier ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-23446

The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in Handsontable.helper.isNumeric function.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-40716

XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to b ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-40715

Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：57 | 回复：0
CVE漏洞

CVE-2021-40710

Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-40708

Adobe Genuine Service versions 7.3 (and earlier) are affected by a privilege escalation vulnerability in the AGSService installer. An authenticated attacker could leverage this vulnerability to achiev ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-40697

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-39865

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-39863

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-39862

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-39861

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-39860

Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacke ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-39858

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-39857

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vuln ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-39856

Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unaut ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-39855

Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unaut ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-39854

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated atta ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-39853

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated atta ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-39852

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated atta ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:48 | 阅读：36 | 回复：0