CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-32045

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：534 | 回复：0
CVE-2022-32046

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：780 | 回复：0
CVE-2022-32047

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：605 | 回复：0
CVE-2022-32048

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：820 | 回复：0
CVE-2022-32049

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：555 | 回复：0
CVE-2022-32050

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：624 | 回复：0
CVE-2022-32051

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：660 | 回复：0
CVE-2022-32052

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：594 | 回复：0
CVE-2022-32053

TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：542 | 回复：0
CVE-2022-25758

All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of insecure regex.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：862 | 回复：0
CVE-2022-25876

The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read the response. This is due ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：883 | 回复：0
CVE-2022-25896

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：638 | 回复：0
CVE-2022-25898

The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped chara ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：623 | 回复：0
CVE-2022-25900

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：604 | 回复：0
CVE-2022-32081

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1312 | 回复：0
CVE-2022-32082

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-get_ref_count() == 0 in dict0dict.cc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：831 | 回复：0
CVE-2022-32083

MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：598 | 回复：0
CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：827 | 回复：0
CVE-2022-32085

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：595 | 回复：0
CVE-2022-32086

MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：618 | 回复：0
CVE-2022-32087

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：567 | 回复：0
CVE-2022-32088

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：731 | 回复：0
CVE-2022-32089

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：777 | 回复：0
CVE-2022-32091

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1169 | 回复：0
CVE-2022-31943

MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：800 | 回复：0
CVE-2022-32093

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：507 | 回复：0
CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1100 | 回复：0
CVE-2022-32095

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：614 | 回复：0
CVE-2022-32384

Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：921 | 回复：0
CVE-2022-32420

College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：624 | 回复：0
CVE-2022-32324

PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：511 | 回复：0
CVE-2022-32325

JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：978 | 回复：0
CVE-2022-32411

An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：555 | 回复：0
CVE-2022-32412

An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：570 | 回复：0
CVE-2022-34903

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forge ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：953 | 回复：0
CVE-2022-32551

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml).……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：1542 | 回复：0
CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：560 | 回复：0
CVE-2022-33014

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：470 | 回复：0
CVE-2022-33015

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：450 | 回复：0
CVE-2022-33016

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：780 | 回复：0