漏洞 - 第973页-OStack程序员社区-中国程序员成长平台

OStack程序员社区-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-21139

Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-21138

Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：48 | 回复：0
CVE漏洞

CVE-2021-21137

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：51 | 回复：0
CVE漏洞

CVE-2021-21136

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：56 | 回复：0
CVE漏洞

CVE-2021-21135

Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：42 | 回复：0
CVE漏洞

CVE-2021-21134

Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：52 | 回复：0
CVE漏洞

CVE-2021-21133

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：46 | 回复：0
CVE漏洞

CVE-2021-21131

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：37 | 回复：0
CVE漏洞

CVE-2021-21130

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-21129

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：54 | 回复：0
CVE漏洞

CVE-2021-21128

Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：39 | 回复：0
CVE漏洞

CVE-2021-21127

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：53 | 回复：0
CVE漏洞

CVE-2021-21126

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-21125

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：49 | 回复：0
CVE漏洞

CVE-2021-21124

Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-21123

Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：54 | 回复：0
CVE漏洞

CVE-2021-21122

Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：41 | 回复：0
CVE漏洞

CVE-2021-21121

Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：48 | 回复：0
CVE漏洞

CVE-2021-21120

Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：48 | 回复：0
CVE漏洞

CVE-2021-21119

Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：62 | 回复：0
CVE漏洞

CVE-2021-21118

Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：50 | 回复：0
CVE漏洞

CVE-2021-21117

Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：51 | 回复：0
CVE漏洞

CVE-2020-22841

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：70 | 回复：0
CVE漏洞

CVE-2020-22840

Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirect_to parameter in email_pass ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：40 | 回复：0
CVE漏洞

CVE-2020-16044

Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：56 | 回复：0
CVE漏洞

CVE-2021-26925

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：52 | 回复：0
CVE漏洞

CVE-2021-23327

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：56 | 回复：0
CVE漏洞

CVE-2020-13462

Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：64 | 回复：0
CVE漏洞

CVE-2020-13461

Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided not to fix this vulnerability. Vendor's response: This attack requires ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：57 | 回复：0
CVE漏洞

CVE-2020-13460

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：47 | 回复：0
CVE漏洞

CVE-2020-13409

Tufin SecureTrack R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later triggered again by the same victim, or al ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：36 | 回复：0
CVE漏洞

CVE-2020-13408

Tufin SecureTrack R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later triggered again by the same victim, or al ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：42 | 回复：0
CVE漏洞

CVE-2020-13407

Tufin SecureTrack R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later triggered again by the same victim, or al ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：47 | 回复：0
CVE漏洞

CVE-2020-24685

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service (DoS) vulnerability. Vulnerability allows attacker to stop the PLC. After stopping (ERR ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：40 | 回复：0
CVE漏洞

CVE-2021-26918

** DISPUTED ** The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the Send an image when a user joins the server feature (or possibly have un ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：32 | 回复：0
CVE漏洞

CVE-2021-3294

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-26917

** DISPUTED ** PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states security mitiga ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：57 | 回复：0
CVE漏洞

CVE-2020-29021

A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：42 | 回复：0
CVE漏洞

CVE-2020-14391

A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly uses Red Hat Customer Portal credentials when a user registers a system through th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:39 | 阅读：49 | 回复：0