漏洞 - 第707页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2020-21357

A stored cross site scripting (XSS) vulnerability in /admin.php?mod=useract=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:27 | 阅读：46 | 回复：0
CVE漏洞

CVE-2020-21356

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = file is deleted during file uploads.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:27 | 阅读：62 | 回复：0
CVE漏洞

CVE-2020-21353

A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets modu ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:27 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-38157

** UNSUPPORTED WHEN ASSIGNED ** LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This vulnerability only affects products th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:27 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-38155

OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). B ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:27 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-35312

A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable RemoteBackup.Service.exe has incorrect permissions, allowing a local unprivileged user to repl ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:27 | 阅读：37 | 回复：0
CVE漏洞

CVE-2020-18694

Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component /admin/profile/save_profile.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:27 | 阅读：42 | 回复：0
CVE漏洞

CVE-2020-18693

Cross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attackers to execute arbitrary code by injecting malicious code into the 'Title' field of the component '/admin/news'. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:27 | 阅读：57 | 回复：0
CVE漏洞

CVE-2021-36795

A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.0a to 6.6.0b-hotfix1. An underprivileged linux user, if certain environment crit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:27 | 阅读：48 | 回复：0
CVE漏洞

CVE-2021-0282

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon (RPD) crash and restart, causing a Denial of Serv ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-0281

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI) receipt of a specific packet from the RPKI cache server may cause routing pro ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：64 | 回复：0
CVE漏洞

CVE-2021-0280

Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise (PE) chipset-based line cards, ddos-protection configuration changes made ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-0279

Juniper Networks Contrail Cloud (CC) releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operati ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-0278

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 ju ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-0277

An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved may allow an att ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：60 | 回复：0
CVE漏洞

CVE-2021-0276

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, allows an attacker sending specific packets causing ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：45 | 回复：0
CVE漏洞

CVE-2020-11634

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：41 | 回复：0
CVE漏洞

CVE-2020-11632

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-35056

Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. An unintended executable might run.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-32770

Gatsby is a framework for building websites. The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks .htaccess HTTP Basic Authentication variables into the app.js bundle during buil ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：56 | 回复：0
CVE漏洞

CVE-2021-34830

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-34829

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-34828

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：62 | 回复：0
CVE漏洞

CVE-2021-34827

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：55 | 回复：0
CVE漏洞

CVE-2021-29742

IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. IBM X-Force ID: 201483.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：55 | 回复：0
CVE漏洞

CVE-2021-29699

IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an user. IBM X-Force ID: 200600.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-20537

IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：57 | 回复：0
CVE漏洞

CVE-2021-20534

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remot ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-20533

IBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 198813……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-20524

IBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionalit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-20523

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be use ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-20511

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-20510

IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 198299……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-20500

IBM Security Verify Access Docker 10.0.0 could reveal highly sensitive information to a local privileged user. IBM X-Force ID: 197980.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-20499

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be use ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-20498

IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requets that could be used in further attacks against the system. IBM X-Force ID: 197972.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-20497

IBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 197969……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-20496

IBM Security Verify Access Docker 10.0.0 could allow an authenticated user to bypass input due to improper input validation. IBM X-Force ID: 197966.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：26 | 回复：0
CVE漏洞

CVE-2020-11633

The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-3043

A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:26 | 阅读：38 | 回复：0