漏洞 - 第6页-OStack程序员社区-中国程序员成长平台

OStack程序员社区-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-1016

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:31 | 阅读：470 | 回复：0
CVE漏洞

CVE-2022-1184

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of servi ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:31 | 阅读：832 | 回复：0
CVE漏洞

CVE-2022-1043

A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:31 | 阅读：816 | 回复：0
CVE漏洞

CVE-2022-0934

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：740 | 回复：0
CVE漏洞

CVE-2022-0852

There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：497 | 回复：0
CVE漏洞

CVE-2022-0851

There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription-manager via the command line, which could allow un ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：557 | 回复：0
CVE漏洞

CVE-2022-0850

A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：605 | 回复：0
CVE漏洞

CVE-2022-0812

An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:30 | 阅读：689 | 回复：0
CVE漏洞

CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( ) in them cause incorrect masking in debug logs, causing any part of the password after the double quot ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：529 | 回复：0
CVE漏洞

CVE-2022-0669

A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages tha ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：531 | 回复：0
CVE漏洞

CVE-2022-0644

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：704 | 回复：0
CVE漏洞

CVE-2022-0497

A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：687 | 回复：0
CVE漏洞

CVE-2022-0485

A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：747 | 回复：0
CVE漏洞

CVE-2022-0496

A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import().……

作者：菜鸟教程小白 | 时间：2022-9-18 10:29 | 阅读：521 | 回复：0
CVE漏洞

CVE-2022-0480

A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interf ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：545 | 回复：0
CVE漏洞

CVE-2022-0400

An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：517 | 回复：0
CVE漏洞

CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：845 | 回复：0
CVE漏洞

CVE-2022-0358

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories sha ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：558 | 回复：0
CVE漏洞

CVE-2022-0336

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypas ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：500 | 回复：0
CVE漏洞

CVE-2022-0284

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Ta ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：478 | 回复：0
CVE漏洞

CVE-2022-36690

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_userid=.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：443 | 回复：0
CVE漏洞

CVE-2022-36689

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/wastemonth=.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:28 | 阅读：513 | 回复：0
CVE漏洞

CVE-2022-36688

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockoutmonth=.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：504 | 回复：0
CVE漏洞

CVE-2022-36687

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：581 | 回复：0
CVE漏洞

CVE-2022-36686

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockinmonth=.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：506 | 回复：0
CVE漏洞

CVE-2022-35020

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：529 | 回复：0
CVE漏洞

CVE-2022-35018

Advancecomp v2.3 was discovered to contain a segmentation fault.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：514 | 回复：0
CVE漏洞

CVE-2022-35019

Advancecomp v2.3 was discovered to contain a segmentation fault.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：586 | 回复：0
CVE漏洞

CVE-2022-35017

Advancecomp v2.3 was discovered to contain a heap buffer overflow.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:27 | 阅读：674 | 回复：0
CVE漏洞

CVE-2022-35016

Advancecomp v2.3 was discovered to contain a heap buffer overflow.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：556 | 回复：0
CVE漏洞

CVE-2022-35014

Advancecomp v2.3 contains a segmentation fault.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：798 | 回复：0
CVE漏洞

CVE-2022-36497

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：668 | 回复：0
CVE漏洞

CVE-2022-36496

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：1165 | 回复：0
CVE漏洞

CVE-2022-35015

Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：791 | 回复：0
CVE漏洞

CVE-2022-38570

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adPushUID parameter.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:26 | 阅读：999 | 回复：0
CVE漏洞

CVE-2021-3905

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：926 | 回复：0
CVE漏洞

CVE-2021-3839

A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg-payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software ...……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：555 | 回复：0
CVE漏洞

CVE-2021-3670

MaxQueryDuration not honoured in Samba AD DC LDAP……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：619 | 回复：0
CVE漏洞

CVE-2021-23161

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：785 | 回复：0
CVE漏洞

CVE-2021-23156

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-9-18 10:25 | 阅读：546 | 回复：0