漏洞 - 第877页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-26810

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dir_setWanWifi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：46 | 回复：0
CVE漏洞

CVE-2020-15075

OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-29343

Ovidentia CMS 6.x contains a SQL injection vulnerability in the id parameter of index.php. The checkbox property into text data can be extracted and displayed in the text region or in source code.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-28935

CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：61 | 回复：0
CVE漏洞

CVE-2021-21638

A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credent ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：54 | 回复：0
CVE漏洞

CVE-2021-21637

A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-21636

A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-21635

Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by at ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：48 | 回复：0
CVE漏洞

CVE-2021-21634

Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-21633

A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in J ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-21632

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials store ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-21631

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view r ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-21630

Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers w ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-21629

A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-21628

Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/ ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-26919

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-29418

The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This (in some situations) allows attackers to bypass access ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-29376

ircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault and client crash, disconnecting the victim from an IRC server) via a crafted CTCP UTC message.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：35 | 回复：0
CVE漏洞

CVE-2020-20545

Cross-Site Scripting (XSS) vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：25 | 回复：0
CVE漏洞

CVE-2020-19643

Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the goform/formSetFtpCfg settings page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：28 | 回复：0
CVE漏洞

CVE-2020-19642

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted Go ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：37 | 回复：0
CVE漏洞

CVE-2020-19641

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the Operator Privilege can gain admin privileges via a crafted request to '/goform/ ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：36 | 回复：0
CVE漏洞

CVE-2020-19640

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/ ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：32 | 回复：0
CVE漏洞

CVE-2020-19639

Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：45 | 回复：0
CVE漏洞

CVE-2021-25162

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-25161

A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-25160

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-25159

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：52 | 回复：0
CVE漏洞

CVE-2021-25158

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and be ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-25157

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.1 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-25156

A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：47 | 回复：0
CVE漏洞

CVE-2019-5319

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 an ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：48 | 回复：0
CVE漏洞

CVE-2018-1110

A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：34 | 回复：0
CVE漏洞

CVE-2018-1109

A vulnerability was found in Braces versions prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：31 | 回复：0
CVE漏洞

CVE-2018-1107

It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-25155

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：47 | 回复：0
CVE漏洞

CVE-2021-25150

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-25146

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-25149

A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 an ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-25148

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.1 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:55 | 阅读：29 | 回复：0