漏洞 - 第601页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-39824

Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code ex ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-39823

Adobe svg-native-viewer 8182d14dfad5d1e10f53ed830328d7d9a3cfa96d and earlier versions are affected by a heap buffer overflow vulnerability due to insecure handling of a malicious .svg file, potentiall ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-39819

Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file, potentially resulting in arbitrary code execution in the cont ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-39818

Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the con ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-36880

Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions = 2.0.3), vulnerable parameter: custom.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：47 | 回复：0
CVE漏洞

CVE-2021-36879

Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions = 2.0.5). Possible if WordPress configuration allows user registration.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-36877

Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions = 2.0.5) makes it possible for attackers to modify user roles.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-36876

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions = 2.0.5) as it lacks CSRF checks on plugin administration pages.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-36875

Authenticated Reflected Cross-Site Scripting (XSS) vulnerability in WordPress uListing plugin (versions = 2.0.5). Vulnerable parameters: filter, filter, filter, filter, filter.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-36874

Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions = 2.0.5).……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-36845

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin) versions = 1.3.8, there are 46 vulnerable parameters that were missed by the vendor ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-36841

Authenticated Stored Cross-Site Scripting (XSS) vulnerability in YITH Maintenance Mode (WordPress plugin) versions = 1.3.7, vulnerable parameter yith_maintenance_newsletter_submit_label. Possible even ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-28613

Adobe Creative Cloud Desktop Application version 5.4 (and earlier) is affected by a file handling vulnerability that could allow an attacker to arbitrarily overwrite a file. Exploitation of this issue ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-24671

The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the time_zone attribute of the mxmtzc_time_zone_clocks shortcode, allowing users with a role as low as Contributor to perform Stor ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-24670

The CoolClock WordPress plugin before 4.3.5 does not escape some shortcode attributes, allowing users with a role as low as Contributor toperform Stored Cross-Site Scripting attacks……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-24666

The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social Donations' module (not activated by default), which adds the rest route '/services/contributor/(?Pid+), take ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-24661

The PostX â€“ Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-24660

The PostX â€“ Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scriptin ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-24659

The PostX â€“ Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's block. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-24652

The PostX â€“ Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to mo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-24643

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting att ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-24634

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block (such as ingredientsLayout, iconSet, steps, ingredie ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：47 | 回复：0
CVE漏洞

CVE-2021-24633

The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the eb_write_block_css AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents di ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-24632

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-24610

The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only removes script tag with a regex, st ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-24569

The Cookie Notice Compliance for GDPR / CCPA WordPress plugin before 2.1.2 does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high privi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-37539

Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-36878

Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions = 2.0.5) makes it possible for attackers to update settings.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：59 | 回复：0
CVE漏洞

CVE-2021-26587

A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited to cause an elevation of privilege leading to part ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-37786

Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exceptional conditions. This affects COVID Certificate App IOS 2.2.0 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-36219

An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain mult ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：56 | 回复：0
CVE漏洞

CVE-2021-36218

An issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, w ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-34416

The network address administrative settings web portal for the Zoom on-premise Meeting Connector before version 4.6.360.20210325, Zoom on-premise Meeting Connector MMR before version 4.6.360.20210325, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-34415

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-34414

The network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller before version 4.6.348.20201217, Zoom on-premise Meeting Connector MMR before version 4.6.348.20201217, Zo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-34413

All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could all ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-34411

During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched wi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-34410

A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.25611.0521 allows for privilege escalation to root.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-34409

It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2.0, Zoom Client Plugin for Sharing iPhone/iPad bef ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:47 | 阅读：38 | 回复：0