CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-31943

MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：184 | 回复：0
CVE-2022-32093

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：184 | 回复：0
CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：188 | 回复：0
CVE-2022-32095

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：175 | 回复：0
CVE-2022-32384

Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：191 | 回复：0
CVE-2022-32420

College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：173 | 回复：0
CVE-2022-32324

PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：167 | 回复：0
CVE-2022-32325

JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：184 | 回复：0
CVE-2022-32411

An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：145 | 回复：0
CVE-2022-32412

An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：105 | 回复：0
CVE-2022-34903

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forge ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：122 | 回复：0
CVE-2022-32551

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml).……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：120 | 回复：0
CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：117 | 回复：0
CVE-2022-33014

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：98 | 回复：0
CVE-2022-33015

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：95 | 回复：0
CVE-2022-33016

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：100 | 回复：0
CVE-2022-2284

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：101 | 回复：0
CVE-2022-2285

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：104 | 回复：0
CVE-2022-2286

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：104 | 回复：0
CVE-2022-34911

An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After acco ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：118 | 回复：0
CVE-2022-34912

An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Contributions, is used as page title without escaping. Hence, in a non-default con ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：106 | 回复：0
CVE-2022-34913

** DISPUTED ** md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the produc ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：93 | 回复：0
CVE-2022-2287

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：94 | 回复：0
CVE-2022-2290

Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：99 | 回复：0
CVE-2022-2288

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：95 | 回复：0
CVE-2022-2289

Use After Free in GitHub repository vim/vim prior to 9.0.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：101 | 回复：0
CVE-2022-32284

Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WAC Router) AW810D, which may allow a remote attacker to caus ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：115 | 回复：0
CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and ear ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：103 | 回复：0
CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the produc ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：106 | 回复：0
CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and ear ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：112 | 回复：0
CVE-2022-34151

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Mach ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：111 | 回复：0
CVE-2022-26051

Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Portal.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：107 | 回复：0
CVE-2022-26054

Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：117 | 回复：0
CVE-2022-26368

Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain the data of Cabinet.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：98 | 回复：0
CVE-2022-27627

Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser. ...……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：125 | 回复：0
CVE-2022-27661

Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：110 | 回复：0
CVE-2022-27803

Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：108 | 回复：0
CVE-2022-27807

Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to disable to add Categories.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：103 | 回复：0
CVE-2022-28692

Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Scheduler.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：105 | 回复：0
CVE-2022-28713

Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product.……

作者：菜鸟教程小白 | 时间：2022-7-8 08:05 | 阅读：108 | 回复：0