漏洞 - 第937页-OStack程序员社区-中国程序员成长平台

OStack程序员社区-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-0449

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：100 | 回复：0
CVE漏洞

CVE-2021-0389

In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User intera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：65 | 回复：0
CVE漏洞

CVE-2021-0388

In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local escalation of privilege resulting in attribut ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：85 | 回复：0
CVE漏洞

CVE-2021-0387

In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：76 | 回复：0
CVE漏洞

CVE-2021-0386

In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege with User execution privileges needed. User ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：68 | 回复：0
CVE漏洞

CVE-2021-0385

In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to notification interaction above the lockscre ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：64 | 回复：0
CVE漏洞

CVE-2021-0384

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：79 | 回复：0
CVE漏洞

CVE-2021-0383

In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege in carrier settings with no additional execution privileges needed. User intera ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：95 | 回复：0
CVE漏洞

CVE-2021-0382

In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional exec ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：69 | 回复：0
CVE漏洞

CVE-2021-0381

In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution pr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：93 | 回复：0
CVE漏洞

CVE-2021-0380

In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of priv ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：66 | 回复：0
CVE漏洞

CVE-2021-0379

In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges ne ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：77 | 回复：0
CVE漏洞

CVE-2021-24030

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：72 | 回复：0
CVE漏洞

CVE-2021-24025

Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. This issue affects HHV ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：61 | 回复：0
CVE漏洞

CVE-2021-20265

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the syst ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：72 | 回复：0
CVE漏洞

CVE-2021-0399

In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User i ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:45 | 阅读：99 | 回复：0
CVE漏洞

CVE-2020-12373

Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：24 | 回复：0
CVE漏洞

CVE-2020-12372

Unchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：27 | 回复：0
CVE漏洞

CVE-2020-12371

Divide by zero in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：28 | 回复：0
CVE漏洞

CVE-2020-12370

Untrusted pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：24 | 回复：0
CVE漏洞

CVE-2020-12369

Out of bound write in some Intel(R) Graphics Drivers before version 26.20.100.8336 may allow a privileged user to potentially enable escalation of privilege via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：16 | 回复：0
CVE漏洞

CVE-2020-12368

Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable an escalation of privilege via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：22 | 回复：0
CVE漏洞

CVE-2020-12367

Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potentially enable an escalation of privilege via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：26 | 回复：0
CVE漏洞

CVE-2020-12366

Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation of privilege via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：36 | 回复：0
CVE漏洞

CVE-2020-12364

Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version 5.5 may allow a privileged user to potentially enable a deni ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：32 | 回复：0
CVE漏洞

CVE-2020-12363

Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：33 | 回复：0
CVE漏洞

CVE-2020-12362

Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：28 | 回复：0
CVE漏洞

CVE-2020-12361

Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial of service via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：45 | 回复：0
CVE漏洞

CVE-2020-12339

Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via n ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：39 | 回复：0
CVE漏洞

CVE-2020-0544

Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow an authenticated user to potentially enable escalation of privi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：29 | 回复：0
CVE漏洞

CVE-2020-0525

Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via loc ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：33 | 回复：0
CVE漏洞

CVE-2020-0524

Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow an authenticated user to potentially enable denial of se ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：16 | 回复：0
CVE漏洞

CVE-2020-0523

Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may potentially allow a privileged user to enable a denial of service v ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：18 | 回复：0
CVE漏洞

CVE-2020-0522

Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：33 | 回复：0
CVE漏洞

CVE-2020-0521

Insufficient control flow management in some Intel(R) Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potentially enable escalation of privilege via local access.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：21 | 回复：0
CVE漏洞

CVE-2020-0518

Improper access control in the Intel(R) HD Graphics Control Panel before version 15.40.46.5144 and 15.36.39.5143 may allow an authenticated user to potentially enable denial of service via local acces ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：24 | 回复：0
CVE漏洞

CVE-2021-22553

Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-22858

Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-22857

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-22856

The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:44 | 阅读：24 | 回复：0