CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the vlanid parameter in the SetIPTVCfg function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：87 | 回复：0
CVE-2022-25445

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：136 | 回复：0
CVE-2022-25446

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：78 | 回复：0
CVE-2022-25447

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：63 | 回复：0
CVE-2022-25448

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：66 | 回复：0
CVE-2022-25449

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：49 | 回复：0
CVE-2022-25450

Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：50 | 回复：0
CVE-2022-25451

Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：43 | 回复：0
CVE-2022-25452

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：42 | 回复：0
CVE-2022-25453

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the saveParentControlInfo function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：34 | 回复：0
CVE-2022-25454

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：32 | 回复：0
CVE-2022-25455

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：31 | 回复：0
CVE-2022-25456

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：37 | 回复：0
CVE-2022-25457

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：34 | 回复：0
CVE-2022-25458

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：47 | 回复：0
CVE-2022-25459

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：31 | 回复：0
CVE-2022-25460

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：40 | 回复：0
CVE-2022-25461

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：61 | 回复：0
CVE-2022-27250

The UNISOC chipset through 2022-03-15 allows attackers to obtain remote control of a mobile phone, e.g., to obtain sensitive information from text messages or the device's screen, record video of ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：48 | 回复：0
CVE-2022-25389

DCN Firewall DCME-520 was discovered to contain an arbitrary file download vulnerability via the path parameter in the file /audit/log/log_management.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：60 | 回复：0
CVE-2022-25390

DCN Firewall DCME-520 was discovered to contain a remote command execution (RCE) vulnerability via the host parameter in the file /system/tool/ping.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：77 | 回复：0
CVE-2022-25578

taocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：95 | 回复：0
CVE-2022-25581

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：83 | 回复：0
CVE-2022-26265

Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：73 | 回复：0
CVE-2022-26266

Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：65 | 回复：0
CVE-2022-26267

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenance_actions.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：122 | 回复：0
CVE-2022-27226

A CSRF issue in /api/crontab on iRZ Mobile Routers through 2022-03-16 allows a threat actor to create a crontab entry in the router administration panel. The cronjob will consequently execute the entr ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：64 | 回复：0
CVE-2022-0991

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：57 | 回复：0
CVE-2022-24126

A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via matchmaking servers, a differ ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：58 | 回复：0
CVE-2022-24125

The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allow remote attackers to send arbitrary push requests to clients via a RequestSendMessageToPlayers request. For ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：53 | 回复：0
CVE-2021-44345

Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Injection.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：41 | 回复：0
CVE-2022-25464

A stored cross-site scripting (XSS) vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：52 | 回复：0
CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /TMS/admin/setting/mail/createorupdate.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：45 | 回复：0
CVE-2022-26247

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：50 | 回复：0
CVE-2022-25462

Yafu v2.0 contains a segmentation fault via the component /factor/avx-ecm/vecarith52.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：41 | 回复：0
CVE-2020-26007

An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：60 | 回复：0
CVE-2020-26008

The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via uploadin ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：69 | 回复：0
CVE-2021-39383

DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysPropertyAction.java.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：117 | 回复：0
CVE-2021-39384

DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：87 | 回复：0
CVE-2021-42194

The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml_ load_ String function, which itself does not prohibit external e ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:54 | 阅读：86 | 回复：0