CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-21478

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privil ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：62 | 回复：0
CVE-2022-21479

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privil ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：53 | 回复：0
CVE-2022-21480

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: User Interface). Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerabi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：59 | 回复：0
CVE-2022-21481

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Financial Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerabil ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：64 | 回复：0
CVE-2022-21482

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high priv ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：57 | 回复：0
CVE-2022-21483

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：88 | 回复：0
CVE-2022-21484

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：82 | 回复：0
CVE-2022-21485

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：56 | 回复：0
CVE-2022-21486

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：54 | 回复：0
CVE-2022-21487

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low pri ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：89 | 回复：0
CVE-2022-21488

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low pri ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：44 | 回复：0
CVE-2022-21489

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：53 | 回复：0
CVE-2022-21490

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：52 | 回复：0
CVE-2022-21491

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low pri ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：73 | 回复：0
CVE-2022-21492

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). The supported version that is affected is 5.9.0.0.0. Easily expl ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：85 | 回复：0
CVE-2022-21493

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with lo ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：117 | 回复：0
CVE-2022-21494

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：88 | 回复：0
CVE-2022-21496

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：81 | 回复：0
CVE-2022-21497

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily expl ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：69 | 回复：0
CVE-2022-21498

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：125 | 回复：0
CVE-2022-25788

A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：47 | 回复：0
CVE-2022-27527

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：53 | 回复：0
CVE-2022-27862

Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine PMS plugin = 1.5.3 on WordPress allows attackers to upload and execute dangerous file types (e.g. PHP shell) via the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：54 | 回复：0
CVE-2022-27863

Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine PMS plugin = 1.5.3 on WordPress allows attackers to get the booking data by guessing / brute-forcing easy predictable book ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：47 | 回复：0
CVE-2022-28221

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php`……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：51 | 回复：0
CVE-2022-28222

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php`……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：36 | 回复：0
CVE-2021-3100

The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM being patched, allowing it to escalate privileges.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：40 | 回复：0
CVE-2021-3101

Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：37 | 回复：0
CVE-2022-0070

Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：39 | 回复：0
CVE-2022-0071

Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or syscall filters of the target JVM process. This would allow a container to exhaust ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：44 | 回复：0
CVE-2022-24858

next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2 will patch this vulnerability. If you are not able ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：48 | 回复：0
CVE-2022-24826

On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：54 | 回复：0
CVE-2022-24860

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate l ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：51 | 回复：0
CVE-2022-27629

Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：51 | 回复：0
CVE-2022-29266

In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive in ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：53 | 回复：0
CVE-2022-24675

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：113 | 回复：0
CVE-2022-27536

Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：45 | 回复：0
CVE-2022-28327

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：44 | 回复：0
CVE-2022-29527

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situation ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：37 | 回复：0
CVE-2022-1254

A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and controlled release 11.x prior to 11.1.3 a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：34 | 回复：0