漏洞 - 第836页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2020-22428

SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-26804

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to .gif, then uploading it in the Administratio ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-29478

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-29477

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-21551

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user acce ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：19 | 回复：0
CVE漏洞

CVE-2020-4987

The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and prior. This vulnerability allows users to embed arbitrary Ja ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：15 | 回复：0
CVE漏洞

CVE-2020-21999

iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-3154

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：8 | 回复：0
CVE漏洞

CVE-2020-27518

All versions of Windscribe VPN for Mac and Windows = v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-22547

In IoT Devices SDK, there is an implementation of calloc() that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-29240

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-23383

The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-23343

All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-31164

Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-32020

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:38 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-2299

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privil ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-2298

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows low privile ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：7 | 回复：0
CVE漏洞

CVE-2021-2297

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-2296

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-2295

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily e ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-2294

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-2293

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-2292

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Document Management). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-2291

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows low p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-2290

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-2289

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Template, GTIN search). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：44 | 回复：0
CVE漏洞

CVE-2021-2288

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-2287

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-2286

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：7 | 回复：0
CVE漏洞

CVE-2021-2285

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-2284

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-2283

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-2282

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-2281

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-2280

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-2279

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows unaut ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-2278

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privil ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-2276

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-2275

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vu ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:37 | 阅读：18 | 回复：0