漏洞 - 第944页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2020-3814

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：17 | 回复：0
CVE漏洞

CVE-2020-3813

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2020-35621

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：11 | 回复：0
CVE漏洞

CVE-2020-35620

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：18 | 回复：0
CVE漏洞

CVE-2020-35619

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：21 | 回复：0
CVE漏洞

CVE-2020-35618

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：17 | 回复：0
CVE漏洞

CVE-2020-35617

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：19 | 回复：0
CVE漏洞

CVE-2020-1974

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：28 | 回复：0
CVE漏洞

CVE-2020-1973

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：33 | 回复：0
CVE漏洞

CVE-2020-1972

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：36 | 回复：0
CVE漏洞

CVE-2020-1970

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：24 | 回复：0
CVE漏洞

CVE-2020-1969

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：26 | 回复：0
CVE漏洞

CVE-2020-1966

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-3239

E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：28 | 回复：0
CVE漏洞

CVE-2021-26822

Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unau ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-26201

The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-26200

The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2020-35734

** UNSUPPORTED WHEN ASSIGNED ** Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Users tab. To explo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：16 | 回复：0
CVE漏洞

CVE-2020-35500

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：21 | 回复：0
CVE漏洞

CVE-2020-29143

A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：28 | 回复：0
CVE漏洞

CVE-2020-29140

A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code paramete ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：20 | 回复：0
CVE漏洞

CVE-2020-29139

A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands vi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2020-29142

A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the schedule_facility pa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：31 | 回复：0
CVE漏洞

CVE-2020-28337

A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：30 | 回复：0
CVE漏洞

CVE-2021-27211

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：27 | 回复：0
CVE漏洞

CVE-2021-27201

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：36 | 回复：0
CVE漏洞

CVE-2021-3375

ActivePresenter 6.1.6 is affected by a memory corruption vulnerability that may result in a denial of service (DoS) or arbitrary code execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：26 | 回复：0
CVE漏洞

CVE-2020-24899

Nagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user can inject additional commands into normal webapp query.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：23 | 回复：0
CVE漏洞

CVE-2020-22427

** DISPUTED ** NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated nagiosadmin user can inject additional commands into a request. NOTE: the vendor disputes wh ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：27 | 回复：0
CVE漏洞

CVE-2020-22425

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：31 | 回复：0
CVE漏洞

CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-27218

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated mod ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：18 | 回复：0
CVE漏洞

CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-23338

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：24 | 回复：0
CVE漏洞

CVE-2020-29031

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：24 | 回复：0
CVE漏洞

CVE-2020-29026

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2020-4956

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cac ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2020-4955

IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validation. By creating an unspecified servlet req ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：22 | 回复：0
CVE漏洞

CVE-2020-4954

IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper session validation . By using the configuration panel to obta ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：40 | 回复：0
CVE漏洞

CVE-2020-35775

CITSmart before 9.1.2.23 allows LDAP Injection.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:43 | 阅读：40 | 回复：0