CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-46164

Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：106 | 回复：0
CVE-2021-46165

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：93 | 回复：0
CVE-2021-46166

Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：71 | 回复：0
CVE-2022-0132

peertube is vulnerable to Server-Side Request Forgery (SSRF)……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：56 | 回复：0
CVE-2022-0133

peertube is vulnerable to Improper Access Control……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：59 | 回复：0
CVE-2022-21667

soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a P ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：44 | 回复：0
CVE-2022-21823

A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 (10.7.30.0) that could allow an attacker with locally authenticated low privileges to obtain key inf ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：57 | 回复：0
CVE-2022-22263

Unprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted applications to launch arbitrary activity.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：42 | 回复：0
CVE-2022-22264

Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：38 | 回复：0
CVE-2022-22265

An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：57 | 回复：0
CVE-2022-22266

(Applicable to China models only) Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan-2022 Release 1 allows untrusted applications to get WiFi information without pro ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：48 | 回复：0
CVE-2022-22267

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：41 | 回复：0
CVE-2022-22268

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：48 | 回复：0
CVE-2022-22269

Keeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Release 1 allows untrusted applications to get a local Bluetooth MAC address.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：44 | 回复：0
CVE-2022-22270

An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：41 | 回复：0
CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：36 | 回复：0
CVE-2022-22272

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：36 | 回复：0
CVE-2022-22283

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：43 | 回复：0
CVE-2022-22284

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：42 | 回复：0
CVE-2022-22285

A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute privileged action by hijacking and modifyi ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：38 | 回复：0
CVE-2022-22286

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) allows attackers to execute privileged action by hijacking and modify ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：46 | 回复：0
CVE-2022-22287

Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：46 | 回复：0
CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：31 | 回复：0
CVE-2022-22289

Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：43 | 回复：0
CVE-2022-22701

PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowing an authenticated user to read local files.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：30 | 回复：0
CVE-2022-22702

PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to local ports, allowing an authenticated user ...……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：30 | 回复：0
CVE-2022-22815

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：41 | 回复：0
CVE-2022-22816

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：35 | 回复：0
CVE-2022-22817

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used,……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：30 | 回复：0
CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：23 | 回复：0
CVE-2022-22822

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：52 | 回复：0
CVE-2022-22823

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：32 | 回复：0
CVE-2022-22824

defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：30 | 回复：0
CVE-2022-22825

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：24 | 回复：0
CVE-2022-22826

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：20 | 回复：0
CVE-2022-22827

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：19 | 回复：0
CVE-2022-22836

CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：21 | 回复：0
CVE-2022-22844

LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：32 | 回复：0
CVE-2022-22845

QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers' installations.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：27 | 回复：0
CVE-2022-22846

The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query.……

作者：菜鸟教程小白 | 时间：2022-6-22 22:00 | 阅读：27 | 回复：0