漏洞 - 第972页-OStack程序员社区-中国程序员成长平台

OStack程序员社区-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsof ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-22663

Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerabil ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：47 | 回复：0
CVE漏洞

CVE-2020-27008

A vulnerability has been identified in JT2Go (All versions V13.1.0.1), Teamcenter Visualization (All versions V13.1.0.1). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：39 | 回复：0
CVE漏洞

CVE-2020-27007

A vulnerability has been identified in JT2Go (All versions V13.1.0.1), Teamcenter Visualization (All versions V13.1.0.1). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：43 | 回复：0
CVE漏洞

CVE-2020-27006

A vulnerability has been identified in JT2Go (All versions V13.1.0.1), Teamcenter Visualization (All versions V13.1.0.1). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：43 | 回复：0
CVE漏洞

CVE-2020-27005

A vulnerability has been identified in JT2Go (All versions V13.1.0.1), Teamcenter Visualization (All versions V13.1.0.1). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：32 | 回复：0
CVE漏洞

CVE-2020-27004

A vulnerability has been identified in JT2Go (All versions V13.1.0.1), Teamcenter Visualization (All versions V13.1.0.1). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：39 | 回复：0
CVE漏洞

CVE-2020-27003

A vulnerability has been identified in JT2Go (All versions V13.1.0.1), Teamcenter Visualization (All versions V13.1.0.1). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：46 | 回复：0
CVE漏洞

CVE-2020-27002

A vulnerability has been identified in JT2Go (All versions V13.1.0.2), Teamcenter Visualization (All versions V13.1.0.2). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：33 | 回复：0
CVE漏洞

CVE-2020-27001

A vulnerability has been identified in JT2Go (All versions V13.1.0.2), Teamcenter Visualization (All versions V13.1.0.2). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：34 | 回复：0
CVE漏洞

CVE-2020-27000

A vulnerability has been identified in JT2Go (All versions V13.1.0.1), Teamcenter Visualization (All versions V13.1.0.1). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：34 | 回复：0
CVE漏洞

CVE-2020-26999

A vulnerability has been identified in JT2Go (All versions V13.1.0.2), Teamcenter Visualization (All versions V13.1.0.2). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：39 | 回复：0
CVE漏洞

CVE-2020-26998

A vulnerability has been identified in JT2Go (All versions V13.1.0.2), Teamcenter Visualization (All versions V13.1.0.2). Affected applications lack proper validation of user-supplied data when pars ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：43 | 回复：0
CVE漏洞

CVE-2020-25245

A vulnerability has been identified in DIGSI 4 (All versions V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users. As these folders are included in the search for dlls, an att ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：44 | 回复：0
CVE漏洞

CVE-2020-25238

A vulnerability has been identified in PCS neo (Administration Console) (All versions V3.1), TIA Portal (V15, V15.1 and V16). Manipulating certain files in specific folders could allow a local attack ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：37 | 回复：0
CVE漏洞

CVE-2020-25237

A vulnerability has been identified in SINEC NMS (All versions V1.0 SP1 Update 1), SINEMA Server (All versions V14.0 SP2 Update 2). When uploading files to an affected system using a zip container, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：50 | 回复：0
CVE漏洞

CVE-2020-15798

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions V16 Update 3a), SINAMICS GH150 (Al ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：33 | 回复：0
CVE漏洞

CVE-2020-10048

A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions V7.5 SP2). Due to an insecure password verification process, an attacker could bypass the password pro ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-26676

gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-26675

A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：55 | 回复：0
CVE漏洞

CVE-2021-21148

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-3394

Millennium Millewin (also known as Cartella clinica) 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：59 | 回复：0
CVE漏洞

CVE-2021-26921

In util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-21147

Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-21146

Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-21145

Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-21144

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafte ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-21143

Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafte ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-21142

Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：37 | 回复：0
CVE漏洞

CVE-2020-4996

IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials. IBM X-Force ID: 192913.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：27 | 回复：0
CVE漏洞

CVE-2020-4995

IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a user to obtain sensitive information from another users' session. IBM X-Force I ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：31 | 回复：0
CVE漏洞

CVE-2020-4795

IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a specially crafted HTTP request. IBM X-Force ID: 189446.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：28 | 回复：0
CVE漏洞

CVE-2020-4791

IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using main in the middle attacks due to improper certificate validation. IBM X-Force ID: ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：34 | 回复：0
CVE漏洞

CVE-2020-4790

IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to improperly validating a supplied URL, rendering the application unusuable. IBM X-Force ID ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：40 | 回复：0
CVE漏洞

CVE-2020-27261

The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：32 | 回复：0
CVE漏洞

CVE-2020-27259

The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：35 | 回复：0
CVE漏洞

CVE-2020-27257

This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Versi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：33 | 回复：0
CVE漏洞

CVE-2021-26719

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-21141

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：43 | 回复：0
CVE漏洞

CVE-2021-21140

Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：50 | 回复：0