CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-29395

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：75 | 回复：0
CVE-2022-29396

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：60 | 回复：0
CVE-2022-29397

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：70 | 回复：0
CVE-2022-29398

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：48 | 回复：0
CVE-2022-29399

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：44 | 回复：0
CVE-2022-30278

A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting attack. The vulnerability is due to impr ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：44 | 回复：0
CVE-2021-39738

In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：49 | 回复：0
CVE-2022-0866

This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs principal. In particular, the org.jboss.as.e ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：44 | 回复：0
CVE-2022-1417

Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and all versions starting from 14.10 before 14.10.1 allo ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：50 | 回复：0
CVE-2022-1431

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：50 | 回复：0
CVE-2022-20117

In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privil ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：74 | 回复：0
CVE-2022-20118

In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：116 | 回复：0
CVE-2022-20119

In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privile ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：108 | 回复：0
CVE-2022-20120

Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：232 | 回复：0
CVE-2022-20121

In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：134 | 回复：0
CVE-2022-21972

Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-23270.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：65 | 回复：0
CVE-2022-21978

Microsoft Exchange Server Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：60 | 回复：0
CVE-2022-22011

Windows Graphics Component Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-26934, CVE-2022-29112.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：53 | 回复：0
CVE-2022-22012

Windows LDAP Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137, CVE-2022-29 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：48 | 回复：0
CVE-2022-22013

Windows LDAP Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22012, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137, CVE-2022-29 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：56 | 回复：0
CVE-2022-22014

Windows LDAP Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22012, CVE-2022-22013, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137, CVE-2022-29 ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：72 | 回复：0
CVE-2022-22015

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：46 | 回复：0
CVE-2022-22016

Windows PlayToManager Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：32 | 回复：0
CVE-2022-22017

Remote Desktop Client Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：34 | 回复：0
CVE-2022-22019

Remote Procedure Call Runtime Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：34 | 回复：0
CVE-2022-22713

Windows Hyper-V Denial of Service Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：38 | 回复：0
CVE-2022-23267

.NET and Visual Studio Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-29117, CVE-2022-29145.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：36 | 回复：0
CVE-2022-23270

Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21972.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：44 | 回复：0
CVE-2022-23279

Windows ALPC Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：49 | 回复：0
CVE-2022-24466

Windows Hyper-V Security Feature Bypass Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：51 | 回复：0
CVE-2022-26913

Windows Authentication Security Feature Bypass Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：52 | 回复：0
CVE-2022-26923

Active Directory Domain Services Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：62 | 回复：0
CVE-2022-26925

Windows LSA Spoofing Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：90 | 回复：0
CVE-2022-26926

Windows Address Book Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：56 | 回复：0
CVE-2022-26927

Windows Graphics Component Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：53 | 回复：0
CVE-2022-26930

Windows Remote Access Connection Manager Information Disclosure Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：39 | 回复：0
CVE-2022-26931

Windows Kerberos Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：38 | 回复：0
CVE-2022-26932

Storage Spaces Direct Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26938, CVE-2022-26939.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：28 | 回复：0
CVE-2022-26933

Windows NTFS Information Disclosure Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：27 | 回复：0
CVE-2022-26934

Windows Graphics Component Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-22011, CVE-2022-29112.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:34 | 阅读：28 | 回复：0