漏洞 - 第638页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-36095

Malicious attacker is able to find out valid user logins by using the lost password feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-36094

It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTR ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-36093

It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later v ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-3768

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-3767

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-3766

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')……

作者：菜鸟教程小白 | 时间：2022-2-5 11:39 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-40353

A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the index.php USERNAME para ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：76 | 回复：0
CVE漏洞

CVE-2021-36235

An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by leveraging an unspecified attack vector. A ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：90 | 回复：0
CVE漏洞

CVE-2020-20495

bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the `deleteBackup' parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：86 | 回复：0
CVE漏洞

CVE-2020-20490

A heap buffer-overflow in the client_example1.c component of libiec_iccp_mod v1.5 leads to a denial of service (DOS).……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：56 | 回复：0
CVE漏洞

CVE-2020-20486

IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10x_Sta_Addr.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：76 | 回复：0
CVE漏洞

CVE-2021-22003

VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：65 | 回复：0
CVE漏洞

CVE-2021-22002

VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：71 | 回复：0
CVE漏洞

CVE-2021-22029

VMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor with access to /API/system/admins/session could cause an API denial of service due to improper rate limi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：66 | 回复：0
CVE漏洞

CVE-2021-40085

An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-39180

OpenOLAT is a web-based learning management system (LMS). A path traversal vulnerability exists in versions prior to 15.3.18, 15.5.3, and 16.0.0. Using a specially prepared ZIP file, it is possible to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-39176

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in de ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-37794

A stored cross-site scripting (XSS) vulnerability exists in FileBrowser v2.16.0 that allows an authenticated user authorized to upload a malicious .svg file which acts as a stored XSS payload. If thi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：64 | 回复：0
CVE漏洞

CVE-2021-36234

Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-36233

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-36232

Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：65 | 回复：0
CVE漏洞

CVE-2021-36231

Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-27668

HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-3634

A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other sessi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-39164

Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership (list of members, with their display names) of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-39135

`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts w ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-39134

`@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-37713

The npm package tar (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any fi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-37712

The npm package tar (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any fi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-37701

The npm package tar (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any fil ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-36744

Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of ser ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-32568

mrdoc is vulnerable to Deserialization of Untrusted Data……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-25737

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or l ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-25735

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-24611

The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in the page after they are saved, allowing for Cross-Site Scripting issues. Furthermo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-24603

The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the u ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-24601

The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-24599

The Email Encoder â€“ Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escapi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：7 | 回复：0
CVE漏洞

CVE-2021-24591

The Highlight WordPress plugin before 0.9.3 does not sanitise its CustomCSS setting, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is d ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：9 | 回复：0