漏洞 - 第872页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2020-27919

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：10 | 回复：0
CVE漏洞

CVE-2020-27915

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：9 | 回复：0
CVE漏洞

CVE-2020-27914

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：22 | 回复：0
CVE漏洞

CVE-2020-27908

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：14 | 回复：0
CVE漏洞

CVE-2020-27907

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：12 | 回复：0
CVE漏洞

CVE-2020-27901

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A sandboxed ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：12 | 回复：0
CVE漏洞

CVE-2020-27899

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS 14.2. A local attacker may be able to ele ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：16 | 回复：0
CVE漏洞

CVE-2020-27897

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 1 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：16 | 回复：0
CVE漏洞

CVE-2020-27893

An issue existed in screen sharing. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A user with screen sharing access may be able to view another ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：14 | 回复：0
CVE漏洞

CVE-2020-10015

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 1 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：12 | 回复：0
CVE漏洞

CVE-2020-10008

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.0.1. A malicious application with root privileges may be able to access private information.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：13 | 回复：0
CVE漏洞

CVE-2020-10001

An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious applic ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-22203

An issue has been discovered in GitLab CE/EE affecting all versions starting with 13.7.9. A specially crafted Wiki page allowed attackers to read arbitrary files on the server.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-22202

An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-22201

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-22200

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-22198

An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-22197

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-22196

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a stored cross-site-scripting in merge request via a specifically crafted branch name ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：17 | 回复：0
CVE漏洞

CVE-2020-11925

An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Authentication to the device is based on a username and password. The root credentials are the same across all devices of th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：15 | 回复：0
CVE漏洞

CVE-2020-11922

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：18 | 回复：0
CVE漏洞

CVE-2019-20466

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A local attacker with the default account is capable of reading the /etc/passwd file, which contains a weak ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：21 | 回复：0
CVE漏洞

CVE-2019-20465

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible (using TELNET without a password) to control the camera's pan/zoom/tilt functionality. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：11 | 回复：0
CVE漏洞

CVE-2019-20464

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：14 | 回复：0
CVE漏洞

CVE-2019-20463

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A crash and reboot can be triggered by crafted IP traffic, as demonstrated by the Nikto vulnerability scann ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-28124

A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions ca ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-28123

Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the lin ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-28113

A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute OS ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-21400

wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted to enter the app-lock passphrase, the type ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-29652

Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-29651

Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-29012

DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, but is invalid (temporarily) during times when the admin is lo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-29011

DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-25894

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-25893

Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText parameter of /magnoliaAuthor/.magnolia/.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-22696

CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-30000

An issue was discovered in LATRIX 0.6.0. SQL injection in the txtaccesscode parameter of inandout.php leads to information disclosure and code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-30004

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-30003

An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add url_address.……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：10 | 回复：0
CVE漏洞

CVE-2021-30002

An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 10:28 | 阅读：14 | 回复：0