漏洞 - 第626页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-32485

In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not nee ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:42 | 阅读：7 | 回复：0
CVE漏洞

CVE-2021-32484

In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not nee ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-38725

Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-38723

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-38721

FUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerability……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：6 | 回复：0
CVE漏洞

CVE-2021-38540

The variable import endpoint was not protected by authentication in Airflow =2.0.0, 2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potenti ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-22239

An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：16 | 回复：0
CVE漏洞

CVE-2020-19515

qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：27 | 回复：0
CVE漏洞

CVE-2020-19144

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：38 | 回复：0
CVE漏洞

CVE-2020-19143

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the TIFFVGetField funtion in the component 'libtiff/tif_dir.c'.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP MaxLength value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-37101

There is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2(H100SP15C00). Due to improper authorization mangement, an attakcer can exploit this vulnerability by ph ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-28499

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-28498

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-28497

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations w ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：7 | 回复：0
CVE漏洞

CVE-2021-28495

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the J ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-28494

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the W ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-28493

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-26608

An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：13 | 回复：0
CVE漏洞

CVE-2020-7874

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerabili ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：17 | 回复：0
CVE漏洞

CVE-2020-7873

Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to cause a arbitrary file download and execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：7 | 回复：0
CVE漏洞

CVE-2021-40223

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configuration dialog, Task Configuration dialog and set logging filt ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-40222

Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. It is possible to introduce shell code to create a reverse s ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-39459

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-39458

Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate the files of a vaild file backup. This leads of leaking the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-38408

A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow remote code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-36871

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plugin (versions = 8.1.11). Vulnerable parameters: wpgmaps_marker_category_name, Va ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-36870

Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (versions = 8.1.12). Vulnerable parameters: dataset_name, wpgmza_gdpr_retention_purpose, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-26603

A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-20118

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent h ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-20117

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent h ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-37579

The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the configuration set by the server. But there's an exception that the attacker can ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-36161

Some component in Dubbo will try to print the formated string of the input arguments, which will possibly cause RCE for a maliciously customized bean with special toString method. In the latest versio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-30295

Possible heap overflow due to improper validation of local variable while storing current task information locally in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-30294

Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-30290

Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mob ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-1974

Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-1971

Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial I ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-1963

Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-1962

Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto, Snapdragon Consumer IO ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:41 | 阅读：23 | 回复：0