漏洞 - 第98页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-24782

Discourse is an open source discussion platform. Versions 2.8.2 and prior in the `stable` branch, 2.9.0.beta3 and prior in the `beta` branch, and 2.9.0.beta3 and prior in the `tests-passed` branch are ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：34 | 回复：0
CVE漏洞

CVE-2022-24781

Geon is a board game based on solving questions about the Pythagorean Theorem. Malicious users can obtain the uuid from other users, spoof that uuid through the browser console and become co-owners of ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-24776

Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login pag ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：37 | 回复：0
CVE漏洞

CVE-2022-24769

Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 20.10.14 where containers were incorrectly ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：33 | 回复：0
CVE漏洞

CVE-2022-22374

The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affect its ability to operate its host. IBM X-Force ID: 221442.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：35 | 回复：0
CVE漏洞

CVE-2021-43666

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：38 | 回复：0
CVE漏洞

CVE-2021-43085

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-43084

An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：44 | 回复：0
CVE漏洞

CVE-2022-25568

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：73 | 回复：0
CVE漏洞

CVE-2022-0551

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:56 | 阅读：85 | 回复：0
CVE漏洞

CVE-2022-21820

NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, esc ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：101 | 回复：0
CVE漏洞

CVE-2022-0153

SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：76 | 回复：0
CVE漏洞

CVE-2022-26629

An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker b ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：86 | 回复：0
CVE漏洞

CVE-2022-1058

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：77 | 回复：0
CVE漏洞

CVE-2022-0955

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：110 | 回复：0
CVE漏洞

CVE-2022-0550

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended comm ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：86 | 回复：0
CVE漏洞

CVE-2021-39491

A Cross Site Scripting (XSS) vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine name file in the Scan Engine deletion confirmation modal box . .……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：60 | 回复：0
CVE漏洞

CVE-2021-43659

In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：49 | 回复：0
CVE漏洞

CVE-2022-1052

Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：52 | 回复：0
CVE漏洞

CVE-2021-43700

An issue was discovered in ApiManager 1.1. there is sql injection vulnerability that can use in /index.php?act=apitag=8.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：44 | 回复：0
CVE漏洞

CVE-2022-0145

Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：46 | 回复：0
CVE漏洞

CVE-2022-1061

Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：45 | 回复：0
CVE漏洞

CVE-2022-0315

Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：62 | 回复：0
CVE漏洞

CVE-2022-27820

OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：55 | 回复：0
CVE漏洞

CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：49 | 回复：0
CVE漏洞

CVE-2022-27083

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：53 | 回复：0
CVE漏洞

CVE-2022-27082

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：40 | 回复：0
CVE漏洞

CVE-2022-27081

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：48 | 回复：0
CVE漏洞

CVE-2022-27080

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：52 | 回复：0
CVE漏洞

CVE-2022-27079

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：83 | 回复：0
CVE漏洞

CVE-2022-27078

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：42 | 回复：0
CVE漏洞

CVE-2022-27077

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：41 | 回复：0
CVE漏洞

CVE-2022-27076

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：33 | 回复：0
CVE漏洞

CVE-2022-26536

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：31 | 回复：0
CVE漏洞

CVE-2022-26290

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：43 | 回复：0
CVE漏洞

CVE-2022-26289

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-31326

D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：34 | 回复：0
CVE漏洞

CVE-2022-25269

Passwork On-Premise Edition before 4.6.13 has multiple XSS issues.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-25268

Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：37 | 回复：0
CVE漏洞

CVE-2022-25267

Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files).……

作者：菜鸟教程小白 | 时间：2022-6-23 10:55 | 阅读：32 | 回复：0