CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2018-25035

A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAd ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：26 | 回复：0
CVE-2018-25036

A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of th ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：25 | 回复：0
CVE-2018-25037

A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：23 | 回复：0
CVE-2018-25038

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName wit ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：22 | 回复：0
CVE-2018-25039

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argumen ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：23 | 回复：0
CVE-2021-41749

In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：23 | 回复：0
CVE-2021-41750

A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-li ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：22 | 回复：0
CVE-2021-41641

Deno =1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：25 | 回复：0
CVE-2022-2054

Command Injection in GitHub repository nuitka/nuitka prior to 0.9.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：29 | 回复：0
CVE-2022-2013

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：32 | 回复：0
CVE-2022-26041

Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitrary file on the server via unspecified vec ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：29 | 回复：0
CVE-2022-26834

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information stored in the product because the product is set to accept H ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：28 | 回复：0
CVE-2022-27174

Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：23 | 回复：0
CVE-2022-27231

Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be e ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：23 | 回复：0
CVE-2022-28704

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：24 | 回复：0
CVE-2022-29525

Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：26 | 回复：0
CVE-2022-29894

Strapi v3.x.x versions and earlier contain a stored cross-site scripting vulnerability in file upload function. By exploiting this vulnerability, an arbitrary script may be executed on the web browser ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：28 | 回复：0
CVE-2017-20041

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title lead ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：28 | 回复：0
CVE-2017-20042

A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection (Blind). Th ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：85 | 回复：0
CVE-2017-20043

A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting (Persi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：36 | 回复：0
CVE-2017-20044

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to basic cross site scripting (Reflected). It is po ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：33 | 回复：0
CVE-2017-20045

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：50 | 回复：0
CVE-2021-37404

There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. U ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：62 | 回复：0
CVE-2022-32739

When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：53 | 回复：0
CVE-2022-32740

A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：71 | 回复：0
CVE-2022-32741

Attacker is able to determine if the provided username exists (and it's valid) using Request New Password feature, based on the response time.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：109 | 回复：0
CVE-2022-2060

Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：59 | 回复：0
CVE-2022-2061

Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：49 | 回复：0
CVE-2022-2062

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nocodb/nocodb prior to 0.91.7+.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：30 | 回复：0
CVE-2022-2063

Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：33 | 回复：0
CVE-2022-2064

Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：31 | 回复：0
CVE-2022-31040

Open Forms is an application for creating and publishing smart forms. Prior to versions 1.0.9 and 1.1.1, the cookie consent page in Open Forms contains an open redirect by injecting a `referer` querys ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：30 | 回复：0
CVE-2021-25116

The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. A ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：27 | 回复：0
CVE-2021-40902

flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the Create New Page option through the index page.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：27 | 回复：0
CVE-2021-46816

Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in th ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：22 | 回复：0
CVE-2021-46817

Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：17 | 回复：0
CVE-2021-46818

Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：17 | 回复：0
CVE-2022-0626

The Advanced Admin Search WordPress plugin before 1.1.6 does not sanitize and escape some parameters before outputting them back in an admin page, leading to a Reflected Cross-Site Scripting.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：16 | 回复：0
CVE-2022-0745

The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：16 | 回复：0
CVE-2022-0786

The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the get_doctor_details route, leading to ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:04 | 阅读：15 | 回复：0