漏洞 - 第34页-OStack程序员社区-中国程序员成长平台

OStack程序员社区-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2017-20135

A vulnerability classified as critical was found in Itech Dating Script 3.26. Affected by this vulnerability is an unknown functionality of the file /see_more_details.php. The manipulation of the argu ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：842 | 回复：0
CVE漏洞

CVE-2017-20134

A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of t ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：682 | 回复：0
CVE漏洞

CVE-2017-20133

A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：503 | 回复：0
CVE漏洞

CVE-2017-20132

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manip ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：554 | 回复：0
CVE漏洞

CVE-2017-20131

A vulnerability was found in Itech News Portal 6.28. It has been classified as critical. Affected is an unknown function of the file /news-portal-script/information.php. The manipulation of the argume ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：691 | 回复：0
CVE漏洞

CVE-2017-20130

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/search_property ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：492 | 回复：0
CVE漏洞

CVE-2022-35906

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a DGN file conta ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：551 | 回复：0
CVE漏洞

CVE-2022-35905

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an FBX file cont ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：567 | 回复：0
CVE漏洞

CVE-2022-35904

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an IFC file cont ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：574 | 回复：0
CVE漏洞

CVE-2022-35903

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a 3DS file conta ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：509 | 回复：0
CVE漏洞

CVE-2022-35902

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file cont ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：524 | 回复：0
CVE漏洞

CVE-2022-35901

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a J2K file conta ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：513 | 回复：0
CVE漏洞

CVE-2022-35890

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. Designer and Vision Client Session IDs are mishandled. An attacker can determine which session IDs were ge ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:16 | 阅读：972 | 回复：0
CVE漏洞

CVE-2022-35900

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a JP2 file conta ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：578 | 回复：0
CVE漏洞

CVE-2022-32434

EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：652 | 回复：0
CVE漏洞

CVE-2022-31161

Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing t ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：550 | 回复：0
CVE漏洞

CVE-2022-30634

Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 32 - 1 bytes.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：543 | 回复：0
CVE漏洞

CVE-2022-25891

The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service (DoS) via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：863 | 回复：0
CVE漏洞

CVE-2022-25869

All versions of package angular are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of textarea elements.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：825 | 回复：0
CVE漏洞

CVE-2022-25858

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：1315 | 回复：0
CVE漏洞

CVE-2021-34987

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (49187). An attacker must first obtain the ability to execute high-privileged cod ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：896 | 回复：0
CVE漏洞

CVE-2021-34986

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (49183). An attacker must first obtain the ability to execute low-privileged code ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：1163 | 回复：0
CVE漏洞

CVE-2022-31159

The AWS SDK for Java enables Java developers to work with Amazon Web Services. A partial-path traversal issue exists within the `downloadDirectory` method in the AWS S3 TransferManager component of th ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：1548 | 回复：0
CVE漏洞

CVE-2022-31158

LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the Nonce Claim Value was not being validated against the nonce value sent in the ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：621 | 回复：0
CVE漏洞

CVE-2022-31157

LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the function used to generate random nonces was not sufficiently cryptographicall ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：606 | 回复：0
CVE漏洞

CVE-2022-31153

OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：811 | 回复：0
CVE漏洞

CVE-2022-34252

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：521 | 回复：0
CVE漏洞

CVE-2022-34251

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the context of the current user. ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：641 | 回复：0
CVE漏洞

CVE-2022-34250

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：1199 | 回复：0
CVE漏洞

CVE-2022-34249

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：656 | 回复：0
CVE漏洞

CVE-2022-34248

Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an a ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：690 | 回复：0
CVE漏洞

CVE-2022-34247

Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the context of the current u ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：653 | 回复：0
CVE漏洞

CVE-2022-34246

Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：611 | 回复：0
CVE漏洞

CVE-2022-34245

Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：984 | 回复：0
CVE漏洞

CVE-2022-34244

Adobe Photoshop versions 22.5.7 (and earlier) and 23.3.2 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker c ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：611 | 回复：0
CVE漏洞

CVE-2022-34243

Adobe Photoshop versions 22.5.7 (and earlier) and 23.3.2 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：615 | 回复：0
CVE漏洞

CVE-2022-34242

Adobe Character Animator version 4.4.7 (and earlier) and 22.4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end o ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：559 | 回复：0
CVE漏洞

CVE-2022-34241

Adobe Character Animator version 4.4.7 (and earlier) and 22.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of t ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：564 | 回复：0
CVE漏洞

CVE-2022-34239

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：775 | 回复：0
CVE漏洞

CVE-2022-34237

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sens ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:15 | 阅读：1295 | 回复：0