漏洞 - 第600页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-41536

A vulnerability has been identified in Solid Edge SE2021 (All versions SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：45 | 回复：0
CVE漏洞

CVE-2021-41535

A vulnerability has been identified in NX 1953 Series (All versions V1973.3700), NX 1980 Series (All versions V1988), Solid Edge SE2021 (All versions SE2021MP8). The affected application contains a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：48 | 回复：0
CVE漏洞

CVE-2021-41534

A vulnerability has been identified in NX 1980 Series (All versions V1984), Solid Edge SE2021 (All versions SE2021MP8). The affected application is vulnerable to an out of bounds read past the end o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-41533

A vulnerability has been identified in NX 1980 Series (All versions V1984), Solid Edge SE2021 (All versions SE2021MP8). The affected application is vulnerable to an out of bounds read past the end o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：57 | 回复：0
CVE漏洞

CVE-2021-36165

RICON Industrial Cellular Router S9922L 16.10.3(3794) is affected by cleartext storage of sensitive information and sends username and password as base64.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-33601

A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-33600

A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HT ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：46 | 回复：0
CVE漏洞

CVE-2020-20696

A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：41 | 回复：0
CVE漏洞

CVE-2020-20695

A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：36 | 回复：0
CVE漏洞

CVE-2020-20693

A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：39 | 回复：0
CVE漏洞

CVE-2020-20692

GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：57 | 回复：0
CVE漏洞

CVE-2020-20691

An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：56 | 回复：0
CVE漏洞

CVE-2021-37270

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without loggi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：119 | 回复：0
CVE漏洞

CVE-2020-24930

Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management system. The five fingers CMS backend in***.php file has arbitrary file deletion vulnerability. Attacker ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：52 | 回复：0
CVE漏洞

CVE-2021-41098

Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri v1.12.4 and earlier, on JRuby only, the SAX parser resolves external entities by def ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：47 | 回复：0
CVE漏洞

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm (R ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-41095

Discourse is an open source discussion platform. There is a cross-site scripting (XSS) vulnerability in versions 2.7.7 and earlier of the `stable` branch, versions 2.8.0.beta6 and earlier of the `beta ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-41097

aurelia-path is part of the Aurelia platform and contains utilities for path manipulation. There is a prototype pollution vulnerability in aurelia-path before version 1.1.7. The vulnerability exposes ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：52 | 回复：0
CVE漏洞

CVE-2021-20035

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：64 | 回复：0
CVE漏洞

CVE-2021-20034

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factor ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-41753

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-41558

The set_user extension module before 3.0.0 for PostgreSQL allows ProcessUtility_hook bypass via set_config.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-40329

The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：54 | 回复：0
CVE漏洞

CVE-2021-37761

Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-36134

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-23445

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-40714

Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the accesskey parameter. If an attacker is able to convince a victim to v ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-40713

Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper certificate validation vulnerability in the cold storage component. If an attacker can achieve a man in the middle when ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：65 | 回复：0
CVE漏洞

CVE-2021-40712

Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper input validation vulnerability via the path parameter. An authenticated attacker can send a malformed POST request to a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-40711

Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a stored XSS vulnerability when creating Content Fragments. An authenticated attacker can send a malformed POST request to achieve ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-40709

Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could lever ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-40703

Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code ex ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-40702

Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code ex ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-40701

Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code ex ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-40700

Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code e ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-39828

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by a privilege escalation vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-39827

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-39826

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary comman ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-39825

Photoshop Elements versions 2021 build 19.0 (20210304.m.156367) (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：55 | 回复：0