CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-1709

The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comment ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：68 | 回复：0
CVE-2022-1712

The LiveSync for WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：54 | 回复：0
CVE-2022-31497

LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：46 | 回复：0
CVE-2022-1996

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：50 | 回复：0
CVE-2022-30552

Das U-Boot 2022.01 has a Buffer Overflow.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：32 | 回复：0
CVE-2022-30790

Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：28 | 回复：0
CVE-2022-1997

Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：64 | 回复：0
CVE-2022-30909

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：36 | 回复：0
CVE-2022-30910

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：24 | 回复：0
CVE-2022-30912

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：25 | 回复：0
CVE-2022-30913

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：24 | 回复：0
CVE-2022-30914

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：25 | 回复：0
CVE-2022-30915

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：35 | 回复：0
CVE-2022-30916

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:03 | 阅读：16 | 回复：0
CVE-2022-1285

Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：170 | 回复：0
CVE-2022-29875

A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A), MAMMOMAT Revelation (All ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：105 | 回复：0
CVE-2020-26184

Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：86 | 回复：0
CVE-2020-26185

Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：76 | 回复：0
CVE-2022-29098

Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no password. A remote attacker may potentially ex ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：73 | 回复：0
CVE-2021-27914

A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：64 | 回复：0
CVE-2022-24848

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the `/api/programs/orgUnits?programs=` API endpoint ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：63 | 回复：0
CVE-2022-31000

solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery (CSRF) vulnerability. The vulnerability al ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：64 | 回复：0
CVE-2022-26905

Microsoft Edge (Chromium-based) Spoofing Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：45 | 回复：0
CVE-2022-30127

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-30128.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：52 | 回复：0
CVE-2022-30128

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-30127.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：57 | 回复：0
CVE-2022-30190

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：63 | 回复：0
CVE-2022-31022

Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http package, that are used by its sample application. These HTTP methods pave way for exploitation of a node’s file ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：70 | 回复：0
CVE-2022-29169

BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service (ReDoS) attacks. ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：63 | 回复：0
CVE-2022-29232

BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of publi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：60 | 回复：0
CVE-2022-29233

BigBlueButton is an open source web conferencing system. In BigBlueButton starting with 2.2 but before 2.3.18 and 2.4-rc-1, an attacker can circumvent access controls to gain access to all breakout ro ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：82 | 回复：0
CVE-2022-29234

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and up to versions 2.3.18 and 2.4.1, an attacker could send messages to a locked chat within a grace period of 5s after ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：97 | 回复：0
CVE-2022-29235

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and up to versions 2.3.18 and 2.4-rc-6, an attacker who is able to obtain the meeting identifier for a meeting on a ser ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：126 | 回复：0
CVE-2022-29236

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and up to versions 2.3.18 and 2.4-rc-6, an attacker can circumvent access restrictions for drawing on the whiteboard. T ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：165 | 回复：0
CVE-2019-12349

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：299 | 回复：0
CVE-2019-12350

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：157 | 回复：0
CVE-2019-12351

An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailing comma.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：104 | 回复：0
CVE-2020-20971

Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：93 | 回复：0
CVE-2020-28246

A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL.……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：81 | 回复：0
CVE-2021-26633

SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：66 | 回复：0
CVE-2021-26634

SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code exec ...……

作者：菜鸟教程小白 | 时间：2022-6-23 09:02 | 阅读：63 | 回复：0