漏洞 - 第642页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-40378

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-34435

In Eclipse Theia 0.3.9 to 1.8.1, the mini-browser extension allows a user to preview HTML files in an iframe inside the IDE. But with the way it is made it is possible for a previewed HTML file to tri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-30354

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruptio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-23436

This affects the package immer before 9.0.6. A type confusion vulnerability can lead to a bypass of CVE-2020-28477 when the user-provided keys used in the path parameter are arrays. In particular, thi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-29853

IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some methods or functions. IBM X-Force ID: 205529.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-29852

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-29851

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-40350

webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be ac ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-39847

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitati ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-39817

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-39816

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-39320

The underConstruction plugin = 1.18 for WordPress echoes out the raw value of `$GLOBALS` in the ucOptions.php file. On certain configurations including Apache+modPHP, this makes it possible to use it ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-36079

Adobe Bridge version 11.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .SGI file, which could result in a read past the end of an allocated memory structure. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-36078

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-36077

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in local application denial of service ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-36076

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-36075

Adobe Bridge version 11.1 (and earlier) is affected by a Buffer Overflow vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the con ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-36074

Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-36073

Adobe Bridge version 11.1 (and earlier) is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage this vulnerability to execute code in the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-36072

Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-36071

Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-36070

Adobe Media Encoder version 15.1 (and earlier) is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-36069

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-36068

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-36067

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-36066

Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-36065

Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by a heap-based buffer overflow vulnerability that could result in arbitrary code execution in the context of the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-36064

XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue r ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-36063

Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Ma ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-36062

Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-36061

Adobe Connect version 11.2.2 (and earlier) is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-36059

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：4 | 回复：0
CVE漏洞

CVE-2021-36058

XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in the context of the current user. Exploitat ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:38 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-35212

An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion data ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:37 | 阅读：57 | 回复：0
CVE漏洞

CVE-2021-22944

A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privileges as the owner of the UniFi Protect a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:37 | 阅读：54 | 回复：0
CVE漏洞

CVE-2021-22943

A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect camera(s) assigned to sa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:37 | 阅读：60 | 回复：0
CVE漏洞

CVE-2021-22929

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:37 | 阅读：62 | 回复：0
CVE漏洞

CVE-2021-22684

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected b ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:37 | 阅读：57 | 回复：0
CVE漏洞

CVE-2021-21811

A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of ATT Labs’ Xmill 0.7. A specially crafted XML file can lead to a heap buffer overflow. An attacker can ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:37 | 阅读：63 | 回复：0
CVE漏洞

CVE-2021-39163

Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the name, avatar, topic and number of members of a room if th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:37 | 阅读：23 | 回复：0