漏洞 - 第763页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2020-15455

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：14 | 回复：0
CVE漏洞

CVE-2020-15454

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：14 | 回复：0
CVE漏洞

CVE-2020-15453

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：11 | 回复：0
CVE漏洞

CVE-2020-15452

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：19 | 回复：0
CVE漏洞

CVE-2020-15451

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：10 | 回复：0
CVE漏洞

CVE-2020-15450

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：10 | 回复：0
CVE漏洞

CVE-2020-15449

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：8 | 回复：0
CVE漏洞

CVE-2020-15448

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：21 | 回复：0
CVE漏洞

CVE-2020-15447

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-24358

The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an Open Redi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-24357

In the Best Image Gallery Responsive Photo Gallery â€“ FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being out ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-24356

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-24355

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-24354

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to instal ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-24353

The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-24352

The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-24351

The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-24350

The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display the user's user agent string without validatio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-24349

This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-24348

The menu delete functionality of the Side Menu â€“ add fixed side buttons WordPress plugin before 3.1.5, available to Administrator users takes the did GET parameter and uses it into an SQL stateme ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-24347

The SP Project Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server fro ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-24346

The Stock in out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-24345

The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator users does not sanitise, validate or escape the id_lista POST parameter before ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-24341

When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being used ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-21439

DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-23394

The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-34682

Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-31812

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-31811

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-32557

It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-32556

It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg(1) call.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-32555

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-32554

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-32553

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-32552

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-32551

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-32550

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-32549

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package apport hooks, it could expose private data to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-32548

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-8 package apport hooks, it could expose private data to o ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-32547

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:48 | 阅读：24 | 回复：0