CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-24738

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. In versions of evmos prior to 2.0.1 attackers are able to drain unclaimed funds from user addresses. To do this an attacker must ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：77 | 回复：0
CVE-2022-24737

HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming response ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：58 | 回复：0
CVE-2021-36809

A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a denial of service and data loss, in all versions of Sophos ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：58 | 回复：0
CVE-2021-43944

This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been implemented. Affected versions of Atlassian Jira Server and Data Center all ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：79 | 回复：0
CVE-2021-37208

A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions), RUGGEDCOM ROS M2200 (All versions), RUGGEDCOM ROS M969 (All versions), RUGGEDCOM ROS RMC (All versions), RUGGEDCOM ROS RMC20 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：55 | 回复：0
CVE-2021-37209

A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions), RUGGEDCOM ROS M2200 (All versions), RUGGEDCOM ROS M969 (All versions), RUGGEDCOM ROS RMC (All versions), RUGGEDCOM ROS RMC20 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：58 | 回复：0
CVE-2021-41541

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions V11.44), Climatix POL909 (AWM module) (All versions V11.36). The Group Management page of affected devices is vulner ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：66 | 回复：0
CVE-2021-41542

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions V11.44), Climatix POL909 (AWM module) (All versions V11.36). The User Management page of affected devices is vulnera ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：65 | 回复：0
CVE-2021-41543

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions V11.44), Climatix POL909 (AWM module) (All versions V11.36). The handling of log files in the web application of aff ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：66 | 回复：0
CVE-2021-42016

A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions), RUGGEDCOM ROS M2200 (All versions), RUGGEDCOM ROS M969 (All versions), RUGGEDCOM ROS RMC (All versions), RUGGEDCOM ROS RMC20 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：66 | 回复：0
CVE-2021-42017

A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions), RUGGEDCOM ROS M2200 (All versions), RUGGEDCOM ROS M969 (All versions), RUGGEDCOM ROS RMC (All versions), RUGGEDCOM ROS RMC20 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：75 | 回复：0
CVE-2021-42018

A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions), RUGGEDCOM ROS M2200 (All versions), RUGGEDCOM ROS M969 (All versions), RUGGEDCOM ROS RMC (All versions), RUGGEDCOM ROS RMC20 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：69 | 回复：0
CVE-2021-42019

A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions), RUGGEDCOM ROS M2200 (All versions), RUGGEDCOM ROS M969 (All versions), RUGGEDCOM ROS RMC (All versions), RUGGEDCOM ROS RMC20 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：66 | 回复：0
CVE-2021-42020

A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions), RUGGEDCOM ROS M2200 (All versions), RUGGEDCOM ROS M969 (All versions), RUGGEDCOM ROS RMC (All versions), RUGGEDCOM ROS RMC20 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：64 | 回复：0
CVE-2021-44478

A vulnerability has been identified in Polarion ALM (All versions V21 R2 P2), Polarion WebClient for SVN (All versions). A cross-site scripting is present due to improper neutralization of data sent ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：69 | 回复：0
CVE-2022-24281

A vulnerability has been identified in SINEC NMS (All versions). A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：79 | 回复：0
CVE-2022-24282

A vulnerability has been identified in SINEC NMS (All versions). The affected system allows to upload JSON objects that are deserialized to Java objects. Due to insecure deserialization of user-suppli ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：86 | 回复：0
CVE-2022-24309

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions V7.23.29), Mendix Applications using Mendix 8 (All versions V8.18.16), Mendix Applications using Mendix 9 (All ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：95 | 回复：0
CVE-2022-24408

A vulnerability has been identified in SINUMERIK MC (All versions V1.15 SP1), SINUMERIK ONE (All versions V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：101 | 回复：0
CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions V2022.1). The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：124 | 回复：0
CVE-2022-25311

A vulnerability has been identified in SINEC NMS (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：110 | 回复：0
CVE-2022-26313

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions = V3.3.0 V3.5.1). In certain configurations of the affected product, a threat actor could use the sign up f ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：145 | 回复：0
CVE-2022-26314

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions = V3.3.0 V3.5.1), Mendix Forgot Password Appstore module (Mendix 7 compatible) (All versions V3.2.2). Init ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：145 | 回复：0
CVE-2022-26317

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions V7.23.29). When returning the result of a completed Microflow execution call the affected framework does not co ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：197 | 回复：0
CVE-2022-0877

Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：126 | 回复：0
CVE-2021-41180

Nextcloud talk is a self hosting messaging service. In versions prior 12.1.2 an attacker is able to control the link of a geolocation preview in the Nextcloud Talk application due to a lack of validat ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：623 | 回复：0
CVE-2021-41181

Nextcloud talk is a self hosting messaging service. In versions prior to 12.3.0 the Nextcloud Android Talk application did not properly detect the lockscreen state when a call was incoming. If an atta ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：120 | 回复：0
CVE-2021-41239

Nextcloud server is a self hosted system designed to provide cloud style services. In affected versions the User Status API did not consider the user enumeration settings by the administrator. This al ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：90 | 回复：0
CVE-2021-41241

Nextcloud server is a self hosted system designed to provide cloud style services. The groupfolders application for Nextcloud allows sharing a folder with a group of people. In addition, it allows set ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：120 | 回复：0
CVE-2022-24713

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted in ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：82 | 回复：0
CVE-2022-24714

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2 with the IDO writer enabled are affected. If you use service custom variables i ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：92 | 回复：0
CVE-2022-24715

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended direct ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：98 | 回复：0
CVE-2022-24716

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server use ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：139 | 回复：0
CVE-2022-24739

alltube is an html front end for youtube-dl. On releases prior to 3.0.3, an attacker could craft a special HTML page to trigger either an open redirect attack or a Server-Side Request Forgery attack ( ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：255 | 回复：0
CVE-2022-26319

An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a local attacker to place an arbitrarily generated DLL file in an installer folder to ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：149 | 回复：0
CVE-2022-26337

Trend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafte ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：136 | 回复：0
CVE-2022-25943

The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：135 | 回复：0
CVE-2022-0881

Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：130 | 回复：0
CVE-2022-0482

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：162 | 回复：0
CVE-2022-0896

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:50 | 阅读：114 | 回复：0