漏洞 - 第621页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-31891

A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with OI ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-27391

A vulnerability has been identified in APOGEE MBC (PPC) (P2 Ethernet) (All versions = V2.6.3), APOGEE MEC (PPC) (P2 Ethernet) (All versions = V2.6.3), APOGEE PXC Compact (BACnet) (All versions V3.5.3 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-25665

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions V2021.2.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：16 | 回复：0
CVE漏洞

CVE-2019-10941

A vulnerability has been identified in SINEMA Server (All versions V14 SP3). Missing authentication for functionality that requires administrative user identity could allow an attacker to obtain enco ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-39125

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to discover the usernames of users via an enumeration vulnerability in the password reset page. The affected ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-39124

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-39123

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the /rest/ ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-39118

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an enumeration vulnerability in the /rest/api/1.0/render endpoin ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：15 | 回复：0
CVE漏洞

CVE-2019-20101

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulnerability in the /rest/whitelist/version/check endpo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-41072

squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：20 | 回复：0
CVE漏洞

CVE-2020-20672

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2020-20671

A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：27 | 回复：0
CVE漏洞

CVE-2020-20670

An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-41054

tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-41033

In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021), installation can be vulnerable to man-in-the-middle attack if using p2 repos that are HTTP; that can then be ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-33365

Memory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-33363

Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-33361

Memory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-32139

The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:43 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-32138

The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-40824

A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix homeserver present in an ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-40823

A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in an encrypted room to steal room encryptio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-38833

SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute arbitrary SQL statements and to gain RCE.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-33366

Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-33364

Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-33362

Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-3666

body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected ver ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-33554

Multiple camera devices by UDP Technology, GeutebrÃ¼ck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-33553

Multiple camera devices by UDP Technology, GeutebrÃ¼ck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-33552

Multiple camera devices by UDP Technology, GeutebrÃ¼ck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-33551

Multiple camera devices by UDP Technology, GeutebrÃ¼ck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-33550

Multiple camera devices by UDP Technology, GeutebrÃ¼ck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-33549

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely exec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-33548

Multiple camera devices by UDP Technology, GeutebrÃ¼ck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-33547

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely exec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-33546

Multiple camera devices by UDP Technology, GeutebrÃ¼ck and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely exec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-33545

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely exec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-33544

Multiple camera devices by UDP Technology, GeutebrÃ¼ck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-33543

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：22 | 回复：0