漏洞 - 第63页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-3695

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：712 | 回复：0
CVE漏洞

CVE-2022-30929

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：751 | 回复：0
CVE漏洞

CVE-2022-30619

Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in legacy Work Center module. He attack is available for any authenticated user, i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1132 | 回复：0
CVE漏洞

CVE-2022-23714

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges t ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1105 | 回复：0
CVE漏洞

CVE-2022-23713

A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：999 | 回复：0
CVE漏洞

CVE-2022-23173

this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the Login menu - demo site then he can see in this menu all the functio ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：472 | 回复：0
CVE漏洞

CVE-2022-23172

An attacker can access to Forgot my password button, as soon as he puts users is valid in the system, the system would issue a message that a password reset email had been sent to user. This way you c ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：516 | 回复：0
CVE漏洞

CVE-2022-21787

In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not n ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：684 | 回复：0
CVE漏洞

CVE-2022-21786

In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed fo ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：546 | 回复：0
CVE漏洞

CVE-2022-21785

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：456 | 回复：0
CVE漏洞

CVE-2022-21784

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：679 | 回复：0
CVE漏洞

CVE-2022-21783

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：764 | 回复：0
CVE漏洞

CVE-2022-21782

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：672 | 回复：0
CVE漏洞

CVE-2022-21781

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：560 | 回复：0
CVE漏洞

CVE-2022-21780

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：516 | 回复：0
CVE漏洞

CVE-2022-21779

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：626 | 回复：0
CVE漏洞

CVE-2022-21777

In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：640 | 回复：0
CVE漏洞

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploit ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1230 | 回复：0
CVE漏洞

CVE-2022-21775

In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed fo ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1002 | 回复：0
CVE漏洞

CVE-2022-21774

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：861 | 回复：0
CVE漏洞

CVE-2022-21773

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：506 | 回复：0
CVE漏洞

CVE-2022-21772

In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：420 | 回复：0
CVE漏洞

CVE-2022-21771

In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1188 | 回复：0
CVE漏洞

CVE-2022-21770

In sound driver, there is a possible information disclosure due to symlink following. This could lead to local information disclosure with System execution privileges needed. User interaction is not n ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：507 | 回复：0
CVE漏洞

CVE-2022-21769

In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed f ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：532 | 回复：0
CVE漏洞

CVE-2022-21768

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：934 | 回复：0
CVE漏洞

CVE-2022-21767

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：681 | 回复：0
CVE漏洞

CVE-2022-21766

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1553 | 回复：0
CVE漏洞

CVE-2022-21765

In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1220 | 回复：0
CVE漏洞

CVE-2022-21764

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：441 | 回复：0
CVE漏洞

CVE-2022-21763

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User i ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：601 | 回复：0
CVE漏洞

CVE-2022-21744

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouri ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：908 | 回复：0
CVE漏洞

CVE-2022-20083

In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileg ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：713 | 回复：0
CVE漏洞

CVE-2022-20082

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1837 | 回复：0
CVE漏洞

CVE-2022-33980

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is ${prefix:name}, where prefix is use ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：458 | 回复：0
CVE漏洞

CVE-2022-28935

Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, To ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：464 | 回复：0
CVE漏洞

CVE-2022-24141

The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attacker that opened a named pipe with the same name can use it to gain the token of an ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：761 | 回复：0
CVE漏洞

CVE-2022-24140

IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in order to download a config file. After dow ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：494 | 回复：0
CVE漏洞

CVE-2022-24139

In IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can create a named pipe with the same name as one of ASCService's named pipes. ASCService first tries to ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：453 | 回复：0
CVE漏洞

CVE-2022-24138

IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has rwx permissions for unprivileged users. Low p ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：478 | 回复：0