漏洞 - 第735页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-32512

QuickInstall in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has b ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-32511

QSAN Storage Manager through directory listing vulnerability in ViewBroserList allows remote authenticated attackers to list arbitrary directories via the file path parameter. The referred vulnerabili ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-32510

QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vu ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-32509

Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path paramete ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-32508

Absolute Path Traversal vulnerability in FileStreaming in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parame ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-32507

Absolute Path Traversal vulnerability in FileDownload in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-32506

Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-26274

The Agent in NinjaRMM 5.0.909 has Insecure Permissions.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-26273

The Agent in NinjaRMM 5.0.909 has Incorrect Access Control.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-22233

An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：18 | 回复：0
CVE漏洞

CVE-2020-25925

Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the p4 field.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：24 | 回复：0
CVE漏洞

CVE-2020-25868

Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can trigger a software abort (temporary loss of service).……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：23 | 回复：0
CVE漏洞

CVE-2020-24149

Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer-secondline) plugin 1.1.4 for WordPress via the podcast_feed parameter in a secondline_import_initialize action t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：19 | 回复：0
CVE漏洞

CVE-2020-24148

Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_read_xml action.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：14 | 回复：0
CVE漏洞

CVE-2020-24147

Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：25 | 回复：0
CVE漏洞

CVE-2020-24146

Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fil ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：17 | 回复：0
CVE漏洞

CVE-2020-24145

Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted de ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：13 | 回复：0
CVE漏洞

CVE-2020-24144

Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items par ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：17 | 回复：0
CVE漏洞

CVE-2020-24143

Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk- ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：23 | 回复：0
CVE漏洞

CVE-2020-24142

Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web appl ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：10 | 回复：0
CVE漏洞

CVE-2020-24141

Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the file_remote pa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：32 | 回复：0
CVE漏洞

CVE-2020-24038

myFax version 229 logs sensitive information in the export log module which allows any user to access critical information.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：25 | 回复：0
CVE漏洞

CVE-2020-20225

Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /nova/bin/user process. An authenticated remote attacker can cause a Denial of Service due to an asse ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：17 | 回复：0
CVE漏洞

CVE-2020-20216

Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/graphing process. An authenticated remote attacker can cause a Denial of Service (NULL pointer ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：14 | 回复：0
CVE漏洞

CVE-2020-20215

Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid m ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：14 | 回复：0
CVE漏洞

CVE-2020-20213

Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the /nova/bin/net process. An authenticated remote attacker can cause a Denial of Service due to overloading ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：24 | 回复：0
CVE漏洞

CVE-2020-20212

Mikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service (NULL pointer ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：13 | 回复：0
CVE漏洞

CVE-2020-20211

Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an ass ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-36212

app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-34627

A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to view custom extensions added by administrators. This is ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-34626

A vulnerability in the deleteCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to delete custom extensions added by administrators. This issue affe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-34625

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-34624

A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user re ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-34623

A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-34622

A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfilePress WordPress plugin made it possible for users to escalate their privileges to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-34621

A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an admin ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-34620

The WP Fluent Forms plugin 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to stored Cross-Site Scripting and limited Privilege Escalation due to a missing nonce check in the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-25952

Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-22555

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through ...……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-22225

Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown……

作者：菜鸟教程小白 | 时间：2022-2-5 11:22 | 阅读：8 | 回复：0