漏洞 - 第636页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTFS-3G 2021.8.22.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-39253

A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G 2021.8.22.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-39252

A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G 2021.8.22.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-39251

A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G 2021.8.22.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-35266

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory disclosure, denial of service and even co ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-33287

In NTFS-3G versions 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-33286

In NTFS-3G versions 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：19 | 回复：0
CVE漏洞

CVE-2020-7865

A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit co ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：19 | 回复：0
CVE漏洞

CVE-2020-7832

A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile funct ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：9 | 回复：0
CVE漏洞

CVE-2020-7819

A SQL-Injection vulnerability in the nTracker USB Enterprise(secure USB management solution) allows a remote unauthenticated attacker to perform SQL query to access username password and other session ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：8 | 回复：0
CVE漏洞

CVE-2020-19131

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the invertImage() function in the component tiffcrop.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-35269

NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs_attr_setup_flag, a heap buffer overflow can occur allowing for code execution and escala ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-35268

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs_inode_real_open, a heap buffer overflow can occur allowing for code execution and escalation of privi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-33289

In NTFS-3G versions 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-33285

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-27022

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinR ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-39285

A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the administration web interface URL to create a XSS based attack.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-37733

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.11, 8 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-37731

A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-37729

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-37728

A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13. Aruba has released patches for ArubaOS that address t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-37725

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.8.0.1, 8 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-37724

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-37723

A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-37722

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-37721

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-37720

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-37719

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-37718

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-37717

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-37716

A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-33599

A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner). The vulnerability can ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：13 | 回复：0
CVE漏洞

CVE-2019-5318

A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6.x.x.x: all versions, 8.x.x.x: all versions prior to 8.8.0.0. Aruba has released ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-38698

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-38617

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privile ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-38616

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to increase their own permissions via a user_permissions array in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-38615

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to view and modify information.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-37219

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-37218

HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：20 | 回复：0