CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-1115

A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:31 | 阅读：508 | 回复：0
CVE-2022-1117

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:31 | 阅读：556 | 回复：0
CVE-2022-1198

A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:31 | 阅读：516 | 回复：0
CVE-2022-0812

An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：689 | 回复：0
CVE-2022-0850

A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：605 | 回复：0
CVE-2022-0851

There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription-manager via the command line, which could allow un ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：557 | 回复：0
CVE-2022-0852

There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：497 | 回复：0
CVE-2022-0934

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：740 | 回复：0
CVE-2022-0496

A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import().……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：521 | 回复：0
CVE-2022-0485

A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：747 | 回复：0
CVE-2022-0497

A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：687 | 回复：0
CVE-2022-0644

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：704 | 回复：0
CVE-2022-0669

A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages tha ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：531 | 回复：0
CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( ) in them cause incorrect masking in debug logs, causing any part of the password after the double quot ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：529 | 回复：0
CVE-2022-36689

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/wastemonth=.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：513 | 回复：0
CVE-2022-36690

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_userid=.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：443 | 回复：0
CVE-2022-0284

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Ta ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：478 | 回复：0
CVE-2022-0336

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypas ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：500 | 回复：0
CVE-2022-0358

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories sha ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：558 | 回复：0
CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：845 | 回复：0
CVE-2022-0400

An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：517 | 回复：0
CVE-2022-0480

A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interf ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：545 | 回复：0
CVE-2022-35017

Advancecomp v2.3 was discovered to contain a heap buffer overflow.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：674 | 回复：0
CVE-2022-35019

Advancecomp v2.3 was discovered to contain a segmentation fault.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：586 | 回复：0
CVE-2022-35018

Advancecomp v2.3 was discovered to contain a segmentation fault.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：514 | 回复：0
CVE-2022-35020

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：529 | 回复：0
CVE-2022-36686

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockinmonth=.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：506 | 回复：0
CVE-2022-36687

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：581 | 回复：0
CVE-2022-36688

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockoutmonth=.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：504 | 回复：0
CVE-2022-38570

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adPushUID parameter.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：999 | 回复：0
CVE-2022-35015

Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：791 | 回复：0
CVE-2022-36496

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：1165 | 回复：0
CVE-2022-36497

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：668 | 回复：0
CVE-2022-35014

Advancecomp v2.3 contains a segmentation fault.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：798 | 回复：0
CVE-2022-35016

Advancecomp v2.3 was discovered to contain a heap buffer overflow.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：556 | 回复：0
CVE-2020-35509

A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest thr ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：1665 | 回复：0
CVE-2021-20298

A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：513 | 回复：0
CVE-2021-23156

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：546 | 回复：0
CVE-2021-23161

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：785 | 回复：0
CVE-2021-3670

MaxQueryDuration not honoured in Samba AD DC LDAP……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：619 | 回复：0