CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-43054

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-43055

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-43971

A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-43972

An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web ro ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2021-43973

An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter in the HTTP POST bod ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2021-43974

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2022-21833

Virtual Machine IDE Drive Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2022-21834

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2022-21835

Microsoft Cryptographic Services Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2022-21836

Windows Certificate Spoofing Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2022-21837

Microsoft SharePoint Server Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2022-21838

Windows Cleanup Manager Elevation of Privilege Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2022-21839

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：5 | 回复：0
CVE-2022-21841

Microsoft Excel Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：7 | 回复：0
CVE-2022-21842

Microsoft Word Remote Code Execution Vulnerability.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：6 | 回复：0
CVE-2022-21843

Windows IKE Extension Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-21848, CVE-2022-21883, CVE-2022-21889, CVE-2022-21890.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:59 | 阅读：7 | 回复：0
CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-45913

A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-45978

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-45979

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-45980

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-40148

In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote information disclosure with no additional execution privileges needed. User interac ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-41789

In wifi driver, there is a possible system crash due to a missing validation check. This could lead to remote denial of service from a proximal attacker with no additional execution privileges needed. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-45389

StarWind SAN NAS build 1578 and StarWind Command Center Build 6864 Update Manager allows authentication with JTW token which is signed with any key. An attacker could use self-signed JTW token to byp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-45912

An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2022-20012

In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：6 | 回复：0
CVE-2022-20013

In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2022-20014

In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2022-20015

In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2022-20016

In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2022-20018

In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：6 | 回复：0
CVE-2022-20019

In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：6 | 回复：0
CVE-2022-20020

In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interact ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2022-20021

In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lead to remote denial of service of bluetoot ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：6 | 回复：0
CVE-2022-20022

In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from a host with the same BD address as the currently connected BT host. This could ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：6 | 回复：0
CVE-2022-20023

In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote denial of service of bluetooth with no additional execution pr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-3845

ws-scrcpy is vulnerable to External Control of File Name or Path……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2021-39143

Spinnaker is an open source, multi-cloud continuous delivery platform. A path traversal vulnerability was discovered in uses of TAR files by AppEngine for deployments. This uses a utility to extract f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0
CVE-2022-0086

uppy is vulnerable to Server-Side Request Forgery (SSRF)……

作者：菜鸟教程小白 | 时间：2022-2-5 12:58 | 阅读：5 | 回复：0