CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-4133

A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：50 | 回复：0
CVE-2021-4145

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：52 | 回复：0
CVE-2022-0270

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：64 | 回复：0
CVE-2022-0332

A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：58 | 回复：0
CVE-2022-0333

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any ca ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：78 | 回复：0
CVE-2022-0334

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：64 | 回复：0
CVE-2022-0335

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The delete badge alignment functionality did not include the necessary token chec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：56 | 回复：0
CVE-2022-22789

Charactell - FormStorm Enterprise Account takeover – An attacker can modify (add, remove and update) passwords file for all the users. The xx_users.ini file in the FormStorm folder contains usernames ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：54 | 回复：0
CVE-2022-23008

On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the user or admin role can use undisclosed API endpoints on NGINX Controller API Management to injec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：47 | 回复：0
CVE-2022-23009

On BIG-IQ Centralized Management 8.x before 8.1.0, an authenticated administrative role user on a BIG-IQ managed BIG-IP device can access other BIG-IP devices managed by the same BIG-IQ system. Note: ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：37 | 回复：0
CVE-2022-23010

On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile and an HTTP profile are configured on a vir ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：50 | 回复：0
CVE-2022-23011

On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers may stop responding while processing TCP traffic due to an issue in the SYN Cookie Prote ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：47 | 回复：0
CVE-2022-23012

On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：39 | 回复：0
CVE-2022-23013

On BIG-IP DNS GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a DOM-based cross-site scripting (XSS) vulnerability exists ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：48 | 回复：0
CVE-2022-23014

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：46 | 回复：0
CVE-2022-23015

On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL profile is configured on a virtual server with Client Certificate Authentication set to request/ ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：57 | 回复：0
CVE-2022-23016

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microke ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：56 | 回复：0
CVE-2022-23017

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode se ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：61 | 回复：0
CVE-2022-23018

On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP protocol security and H ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：78 | 回复：0
CVE-2022-23019

On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a message routing type virtual server is configured with both Diamet ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：75 | 回复：0
CVE-2022-23020

On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can cause the Tra ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：66 | 回复：0
CVE-2022-23021

On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminat ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：68 | 回复：0
CVE-2022-23022

On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software ver ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：58 | 回复：0
CVE-2022-23023

On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, and BIG-IQ all versions of 8.x and 7.x, undisclosed requests by an authen ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：67 | 回复：0
CVE-2022-23024

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway (ALG) logging profile is configured on an ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：76 | 回复：0
CVE-2022-23025

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cau ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：63 | 回复：0
CVE-2022-23026

On BIG-IP ASM Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, an authenticated user with low privileges, such as a gu ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：55 | 回复：0
CVE-2022-23027

On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2, when a FastL4 profile and an HTTP, FIX, and/or hash persistence profile ar ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：56 | 回复：0
CVE-2022-23028

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when global AFM SYN cookie protection (TCP Half Open flood vector) is activated in t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：65 | 回复：0
CVE-2022-23029

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile is configured on a virtual server, undisclos ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：58 | 回复：0
CVE-2022-23030

On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the BIG-IP Virtual Edition (VE) uses the ixlv driver (which is used in SR-IOV mode and ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：56 | 回复：0
CVE-2022-23031

On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML External Entity (XXE) vulnerability exists in an undisclosed page of the F5 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：50 | 回复：0
CVE-2022-23032

In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system, connecting BIG-IP Edge Client on Mac and Windows is vulnerable to a DNS rebind ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：60 | 回复：0
CVE-2021-43799

Zulip is an open-source team collaboration tool. Zulip Server installs RabbitMQ for internal message passing. In versions of Zulip Server prior to 4.9, the initial installation (until first reboot, or ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：50 | 回复：0
CVE-2022-23258

Microsoft Edge for Android Spoofing Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：50 | 回复：0
CVE-2021-36289

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：53 | 回复：0
CVE-2021-36294

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging a cookie to login as ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：61 | 回复：0
CVE-2021-36295

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：46 | 回复：0
CVE-2021-36296

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：54 | 回复：0
CVE-2021-36346

Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to deny access to the iDRAC webserve ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:08 | 阅读：74 | 回复：0