CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-40563

A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu.c when using mp4box, which causes a denia ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:00 | 阅读：20 | 回复：0
CVE-2021-40011

There is an Uncontrolled resource consumption vulnerability in the display module in smartphones. Successful exploitation of this vulnerability may affect service integrity.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40014

The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40018

The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40020

There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-40021

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-40022

The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40025

The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40026

There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-40027

The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40029

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function s ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40031

There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-40032

The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40035

There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function s ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-40037

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40038

There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-40039

There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-40041

There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a local authenticated attacker could exploit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-42748

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-42749

In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-43579

A stack-based buffer overflow in image_load_bmp() in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-44024

A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-44528

A open redirect vulnerability exists in Action Pack = 6.0.0 that could allow an attacker to craft a X-Forwarded-Host headers in combination with certain allowed host formats can cause the Host Authori ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-45003

Laundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote code execution (RCE) vulnerability in profile.php through the image parameter that can execute a webshell ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：10 | 回复：0
CVE-2021-45231

A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to crea ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-45440

A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-45441

A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and e ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-45442

A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-45856

Accu-Time Systems MAXIMUS 1.0 telnet service suffers from a remote buffer overflow which causes the telnet service to crash……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-46045

GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context-dependent).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-46046

A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-46047

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-46048

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-46049

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-46050

A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-46051

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. .……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-46052

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0