漏洞 - 第605页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-22952

A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently control Talk device(s) assigned to said network ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-22950

Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: Solar Security Research Team……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-22949

A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: Solar Security CMS Research ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-22948

Vulnerability in the generation of session IDs in revive-adserver 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker could theoretically be ab ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-22945

When sending data to an MQTT server, libcurl = 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-22941

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-22020

The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter S ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-22019

The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 5480 on vCenter Server may exploit this issue by sending a sp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-22018

The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network access to port 9087 on vCenter Server may exploit th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-22017

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-22016

The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim int ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-22015

The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-22014

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-22013

The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor with network access to port 443 on vCenter Server m ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-22012

The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-22011

vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-22010

The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to create a denial of service ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：69 | 回复：0
CVE漏洞

CVE-2021-22009

The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit these issues to cr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-22008

The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by sending ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-22007

The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sens ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-22006

The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server may exploit this issue ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-22005

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-21993

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-33035

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checke ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-34770

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unaut ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-34769

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：7 | 回复：0
CVE漏洞

CVE-2021-34768

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-34767

A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-34740

A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-34729

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on an affected ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-34727

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-34726

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating syst ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-34725

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operati ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-34724

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to elevate privileges and execute arbitrary code on the underlying operating system as the root use ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-34723

A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the configuration database of an affe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-34714

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an un ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-34712

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct cypher query language injection attacks on an affected s ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-34705

A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-34703

A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-34699

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:46 | 阅读：10 | 回复：0