漏洞 - 第66页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-26051

Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Portal.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：710 | 回复：0
CVE漏洞

CVE-2022-34151

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Mach ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1121 | 回复：0
CVE漏洞

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and ear ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：714 | 回复：0
CVE漏洞

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the produc ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1122 | 回复：0
CVE漏洞

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and ear ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：844 | 回复：0
CVE漏洞

CVE-2022-32284

Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WAC Router) AW810D, which may allow a remote attacker to caus ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：769 | 回复：0
CVE漏洞

CVE-2022-2289

Use After Free in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：576 | 回复：0
CVE漏洞

CVE-2022-2288

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：497 | 回复：0
CVE漏洞

CVE-2022-2290

Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：538 | 回复：0
CVE漏洞

CVE-2022-2287

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：813 | 回复：0
CVE漏洞

CVE-2022-34913

** DISPUTED ** md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the produc ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：611 | 回复：0
CVE漏洞

CVE-2022-34912

An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Contributions, is used as page title without escaping. Hence, in a non-default con ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1009 | 回复：0
CVE漏洞

CVE-2022-34911

An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After acco ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1528 | 回复：0
CVE漏洞

CVE-2022-2286

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：682 | 回复：0
CVE漏洞

CVE-2022-2285

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：541 | 回复：0
CVE漏洞

CVE-2022-2284

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1101 | 回复：0
CVE漏洞

CVE-2022-33016

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：762 | 回复：0
CVE漏洞

CVE-2022-33015

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：430 | 回复：0
CVE漏洞

CVE-2022-33014

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：462 | 回复：0
CVE漏洞

CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：551 | 回复：0
CVE漏洞

CVE-2022-32551

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml).……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1514 | 回复：0
CVE漏洞

CVE-2022-34903

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forge ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：941 | 回复：0
CVE漏洞

CVE-2022-32412

An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：563 | 回复：0
CVE漏洞

CVE-2022-32411

An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：550 | 回复：0
CVE漏洞

CVE-2022-32325

JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：950 | 回复：0
CVE漏洞

CVE-2022-32324

PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：498 | 回复：0
CVE漏洞

CVE-2022-32420

College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：615 | 回复：0
CVE漏洞

CVE-2022-32384

Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：898 | 回复：0
CVE漏洞

CVE-2022-32095

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：600 | 回复：0
CVE漏洞

CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1083 | 回复：0
CVE漏洞

CVE-2022-32093

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：504 | 回复：0
CVE漏洞

CVE-2022-31943

MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：784 | 回复：0
CVE漏洞

CVE-2022-32091

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1151 | 回复：0
CVE漏洞

CVE-2022-32089

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：761 | 回复：0
CVE漏洞

CVE-2022-32088

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：720 | 回复：0
CVE漏洞

CVE-2022-32087

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：554 | 回复：0
CVE漏洞

CVE-2022-32086

MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：609 | 回复：0
CVE漏洞

CVE-2022-32085

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：576 | 回复：0
CVE漏洞

CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：815 | 回复：0
CVE漏洞

CVE-2022-32083

MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：588 | 回复：0