漏洞 - 第620页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-37532

SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be rest ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-37531

SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated attacker to craft a malicious ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-36582

In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server. The files are uploaded to /Content/Te ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-36581

Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upl ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-33688

SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-33686

Under certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get access to some encrypted sensitive information, but does not have control over kind or degree.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-33685

SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the restricted directory. A successful attack allows ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-33679

The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to inject a malicious script while creating a new module document, file, or folder. When ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-33675

Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-33674

Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-33673

Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persists in them. This allows an attacker to exploit a Stored Cross-Site Scripting (X ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-33672

Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat reci ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：6 | 回复：0
CVE漏洞

CVE-2021-32202

In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the post description filed in the blog post creation page.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-21489

SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user related data, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-40357

A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions V4.3.10), Teamcenter Active Workspace V5.0 (All versions V5.0.8), Teamcenter Active Workspace V5.1 (All versions ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-40356

A vulnerability has been identified in Teamcenter V12.4 (All versions V12.4.0.8), Teamcenter V13.0 (All versions V13.0.0.7), Teamcenter V13.1 (All versions V13.1.0.5), Teamcenter V13.2 (All version ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-40355

A vulnerability has been identified in Teamcenter V12.4 (All versions V12.4.0.8), Teamcenter V13.0 (All versions V13.0.0.7), Teamcenter V13.1 (All versions V13.1.0.5), Teamcenter V13.2 (All version ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-40354

A vulnerability has been identified in Teamcenter V12.4 (All versions V12.4.0.8), Teamcenter V13.0 (All versions V13.0.0.7), Teamcenter V13.1 (All versions V13.1.0.5), Teamcenter V13.2 (All version ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-37206

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions V8.80), SIPROTEC 5 relays with CPU vari ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-37203

A vulnerability has been identified in NX 1980 Series (All versions V1984), Solid Edge SE2021 (All versions SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user sup ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-37202

A vulnerability has been identified in NX 1980 Series (All versions V1984), Solid Edge SE2021 (All versions SE2021MP8). The IFC adapter in affected application contains a use-after-free vulnerabilit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-37201

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP1). The web interface of affected devices is vulnerable to a Cross-Site Request Forgery (CSRF) attack. This could allow an attack ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-37200

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-37193

A vulnerability has been identified in SINEMA Remote Connect Server (All versions V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-37192

A vulnerability has been identified in SINEMA Remote Connect Server (All versions V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-37191

A vulnerability has been identified in SINEMA Remote Connect Server (All versions V3.0 SP2). An unauthenticated attacker in the same network of the affected system could brute force the usernames fro ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-37190

A vulnerability has been identified in SINEMA Remote Connect Server (All versions V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-37186

A vulnerability has been identified in LOGO! CMR2020 (All versions V2.2), LOGO! CMR2040 (All versions V2.2), SIMATIC RTU 3000 family (All versions). The underlying TCP/IP stack does not properly cal ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-37184

A vulnerability has been identified in Industrial Edge Management (All versions V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-37183

A vulnerability has been identified in SINEMA Remote Connect Server (All versions V3.0 SP2). The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticate ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-37181

A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS V4.2 (All versions), Cerberus DMS V5.0 (All versions v5.0 QU1), Desigo CC Compa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-37177

A vulnerability has been identified in SINEMA Remote Connect Server (All versions V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauth ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-37176

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). The femap.exe application lacks proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-37175

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions V2.14.1), RUGGEDCOM ROX RX1400 (All versions V2.14.1), RUGGEDCOM ROX RX1500 (All versions V2.14.1), RUGGEDCOM ROX RX1501 (A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-37174

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions V2.14.1), RUGGEDCOM ROX RX1400 (All versions V2.14.1), RUGGEDCOM ROX RX1500 (All versions V2.14.1), RUGGEDCOM ROX RX1501 (A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-37173

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions V2.14.1), RUGGEDCOM ROX RX1400 (All versions V2.14.1), RUGGEDCOM ROX RX1500 (All versions V2.14.1), RUGGEDCOM ROX RX1501 (A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-33737

A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 ERPC (All versions), ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions V8.80), SIPROTEC 5 relays with CPU vari ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-33719

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions V8.80), SIPROTEC 5 relays with CPU vari ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-33716

A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions V3.0), SIMATIC CP 1545-1 (All versions). An attacker with access to the subnet of the affected device co ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：19 | 回复：0