CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-29217

A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global D ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2021-29220

Multiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack version(s): Prior to 2.12. These vulnerabilities could be exploited by a highly privileged user to remo ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：6 | 回复：0
CVE-2021-39363

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2021-39364

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP cache poisoning has been achieved.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2021-43745

A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-23701

A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior to 2.60. This vulnerability could be remotely expl ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-23835

** DISPUTED ** The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporarily controls an application that has the READ_SMS permission, and ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2021-34359

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have alre ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2021-34361

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have alre ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2021-45229

It was discovered that the Trigger DAG with config screen was susceptible to XSS attacks via the `origin` query argument. This issue affects Apache Airflow versions 2.2.3 and below.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-24288

In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-24947

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-24948

A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to execute javascript i ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：6 | 回复：0
CVE-2022-0247

An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：6 | 回复：0
CVE-2022-25326

fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-25327

The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-25328

The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-24594

In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-24612

An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：7 | 回复：0
CVE-2022-25374

HashiCorp Terraform Enterprise before 202202-1 inserts Sensitive Information into a Log File.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：15 | 回复：0
CVE-2021-45977

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, Ruby ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：12 | 回复：0
CVE-2022-24327

In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：10 | 回复：0
CVE-2022-24328

In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：11 | 回复：0
CVE-2022-24329

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：10 | 回复：0
CVE-2022-24330

In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：10 | 回复：0
CVE-2022-24331

In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：12 | 回复：0
CVE-2022-24332

In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：15 | 回复：0
CVE-2022-24333

In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：12 | 回复：0
CVE-2022-24334

In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：13 | 回复：0
CVE-2022-24335

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-condition attack in agent registration via XML-RPC.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：14 | 回复：0
CVE-2022-24336

In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to the TeamCity server.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：15 | 回复：0
CVE-2022-24337

In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked appropriate permissions.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：17 | 回复：0
CVE-2022-24338

JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：15 | 回复：0
CVE-2022-24339

JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：18 | 回复：0
CVE-2022-24340

In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：18 | 回复：0
CVE-2022-24341

In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the edited user.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：19 | 回复：0
CVE-2022-24342

In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：22 | 回复：0
CVE-2022-24343

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：33 | 回复：0
CVE-2022-24344

JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:32 | 阅读：50 | 回复：0