CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-32246

SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send crafted queries and ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：881 | 回复：0
CVE-2022-32247

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User i ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1559 | 回复：0
CVE-2022-32248

Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the databas ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：585 | 回复：0
CVE-2022-32249

Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit?s data volume to gain access to highly sensitive information (e.g., high privil ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：917 | 回复：0
CVE-2022-35168

Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：606 | 回复：0
CVE-2022-35169

SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decrypt LCMBIAR file's password under certain conditions, enabl ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：640 | 回复：0
CVE-2022-35170

SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting ( ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：682 | 回复：0
CVE-2022-35171

When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the us ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1112 | 回复：0
CVE-2022-35172

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerabilit ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1048 | 回复：0
CVE-2022-35224

SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This attack can b ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：696 | 回复：0
CVE-2022-35225

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting ( ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：816 | 回复：0
CVE-2022-35227

A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site (XSS) scripting attac ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：619 | 回复：0
CVE-2022-35228

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：647 | 回复：0
CVE-2022-29600

The oelib (aka One is Enough Library) extension through 4.1.5 for TYPO3 allows SQL Injection.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：938 | 回复：0
CVE-2022-29601

The seminars (aka Seminar Manager) extension through 4.1.3 for TYPO3 allows SQL Injection.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：618 | 回复：0
CVE-2022-31102

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with 2.3.0 and prior to 2.3.6 and 2.4.5 is vulnerable to a cross-site scripting (XSS) bug which could allow a ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：681 | 回复：0
CVE-2022-31105

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.4.0 and prior to 2.2.11, 2.3.6, and 2.4.5 is vulnerable to an improper certificate validation ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：629 | 回复：0
CVE-2022-33154

The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：687 | 回复：0
CVE-2022-33155

The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) extension before 1.2.23 for TYPO3 allows XSS.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1211 | 回复：0
CVE-2022-35403

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticke ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1805 | 回复：0
CVE-2022-21845

Windows Kernel Information Disclosure Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：680 | 回复：0
CVE-2022-22022

Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-22041, CVE-2022-30206, CVE-2022-30226.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：630 | 回复：0
CVE-2022-22023

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：678 | 回复：0
CVE-2022-22024

Windows Fax Service Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22027.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1584 | 回复：0
CVE-2022-22025

Windows Internet Information Services Cachuri Module Denial of Service Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1394 | 回复：0
CVE-2022-22026

Windows CSRSS Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-22047, CVE-2022-22049.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：650 | 回复：0
CVE-2022-22027

Windows Fax Service Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22024.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1033 | 回复：0
CVE-2022-22028

Windows Network File System Information Disclosure Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：796 | 回复：0
CVE-2022-22029

Windows Network File System Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22039.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：744 | 回复：0
CVE-2022-22031

Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：614 | 回复：0
CVE-2022-22034

Windows Graphics Component Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：694 | 回复：0
CVE-2022-22036

Performance Counters for Windows Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1198 | 回复：0
CVE-2022-22037

Windows Advanced Local Procedure Call Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-30202, CVE-2022-30224.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：666 | 回复：0
CVE-2022-22038

Remote Procedure Call Runtime Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1068 | 回复：0
CVE-2022-22039

Windows Network File System Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22029.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：947 | 回复：0
CVE-2022-22040

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：1322 | 回复：0
CVE-2022-22041

Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-22022, CVE-2022-30206, CVE-2022-30226.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：887 | 回复：0
CVE-2022-22042

Windows Hyper-V Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30223.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：555 | 回复：0
CVE-2022-22043

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：591 | 回复：0
CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:14 | 阅读：614 | 回复：0