CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-0088

Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：58 | 回复：0
CVE-2022-1210

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The att ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：61 | 回复：0
CVE-2022-1211

A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：65 | 回复：0
CVE-2022-28378

Craft CMS before 3.7.29 allows XSS.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：67 | 回复：0
CVE-2022-28379

jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：103 | 回复：0
CVE-2022-28380

The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-static is used.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：147 | 回复：0
CVE-2022-0405

Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：143 | 回复：0
CVE-2022-0406

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：298 | 回复：0
CVE-2022-28381

Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：179 | 回复：0
CVE-2022-28388

usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：136 | 回复：0
CVE-2022-28389

mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：104 | 回复：0
CVE-2022-28390

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：76 | 回复：0
CVE-2022-28391

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：53 | 回复：0
CVE-2021-30061

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, physically proximate attackers can execute code via a crafte ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：58 | 回复：0
CVE-2021-30062

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：53 | 回复：0
CVE-2021-30063

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：48 | 回复：0
CVE-2021-30064

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：50 | 回复：0
CVE-2021-30065

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：52 | 回复：0
CVE-2021-30066

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware s ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：51 | 回复：0
CVE-2022-26233

Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：55 | 回复：0
CVE-2022-26530

swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：53 | 回复：0
CVE-2022-27248

A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download arbitrary .dwg files from a remote server by specifying an absolute or relative pa ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：56 | 回复：0
CVE-2022-27249

An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web ro ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：61 | 回复：0
CVE-2022-0939

Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：53 | 回复：0
CVE-2022-1222

Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：51 | 回复：0
CVE-2022-1223

Improper Access Control in GitHub repository phpipam/phpipam prior to 1.4.6.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：64 | 回复：0
CVE-2022-1224

Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：60 | 回复：0
CVE-2022-1225

Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：44 | 回复：0
CVE-2022-24191

In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：69 | 回复：0
CVE-2021-33616

RSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) allows stored XSS.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：78 | 回复：0
CVE-2021-36775

a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. This issue affects: SUSE Rancher Rancher versions prior to 2.4.18; Rancher versio ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：153 | 回复：0
CVE-2021-36776

A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users. This issue affects: SUSE Rancher Rancher versions prior to 2.5.10.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：128 | 回复：0
CVE-2021-44138

There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：110 | 回复：0
CVE-2022-26616

PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：168 | 回复：0
CVE-2022-27435

An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：98 | 回复：0
CVE-2022-27436

A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：94 | 回复：0
CVE-2022-28062

Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：89 | 回复：0
CVE-2022-28063

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：90 | 回复：0
CVE-2021-43454

An Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.394 via a specially crafted file in the ATService path. .……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：99 | 回复：0
CVE-2021-43455

An Unquoted Service Path vulnerability exists in FreeLAN 2.2 via a specially crafted file in the FreeLAN Service path.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:11 | 阅读：135 | 回复：0