漏洞 - 第998页-OStack程序员社区-中国程序员成长平台

OStack程序员社区-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2021-3019

ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：139 | 回复：0
CVE漏洞

CVE-2021-3018

ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：129 | 回复：0
CVE漏洞

CVE-2020-36158

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID- ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：156 | 回复：0
CVE漏洞

CVE-2020-5361

Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their passwords. Dell is aware of unauthorized ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：137 | 回复：0
CVE漏洞

CVE-2020-29498

Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：152 | 回复：0
CVE漏洞

CVE-2020-29497

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low privileges could exploit this vulnerability to stor ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：122 | 回复：0
CVE漏洞

CVE-2020-29496

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high privileges could exploit this vulnerability to sto ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：139 | 回复：0
CVE漏洞

CVE-2020-29492

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：147 | 回复：0
CVE漏洞

CVE-2020-29491

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the se ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：142 | 回复：0
CVE漏洞

CVE-2021-3014

In MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：137 | 回复：0
CVE漏洞

CVE-2020-26297

mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0.4.5, there is a vulnerability affecting the search feature of mdBook, which cou ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：125 | 回复：0
CVE漏洞

CVE-2020-26294

Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server co ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：126 | 回复：0
CVE漏洞

CVE-2020-26293

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：115 | 回复：0
CVE漏洞

CVE-2020-36157

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that coul ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：133 | 回复：0
CVE漏洞

CVE-2020-36156

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page coul ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：138 | 回复：0
CVE漏洞

CVE-2020-36155

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive met ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：133 | 回复：0
CVE漏洞

CVE-2020-35219

The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to Advanced_System_Content.asp wit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：140 | 回复：0
CVE漏洞

CVE-2020-26292

Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours betwe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：115 | 回复：0
CVE漏洞

CVE-2019-25013

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：129 | 回复：0
CVE漏洞

CVE-2020-36154

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the %SYSTEMDRIVE%\Pearson VUE directory, which allows local users to obtain administrative pr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：121 | 回复：0
CVE漏洞

CVE-2020-25275

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：124 | 回复：0
CVE漏洞

CVE-2020-24386

An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' emai ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：146 | 回复：0
CVE漏洞

CVE-2020-17537

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：124 | 回复：0
CVE漏洞

CVE-2020-17536

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：122 | 回复：0
CVE漏洞

CVE-2020-17535

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：114 | 回复：0
CVE漏洞

CVE-2020-36112

CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of thi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：120 | 回复：0
CVE漏洞

CVE-2020-35507

There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：126 | 回复：0
CVE漏洞

CVE-2020-35496

There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer derefe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：139 | 回复：0
CVE漏洞

CVE-2020-28194

Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS s ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：147 | 回复：0
CVE漏洞

CVE-2021-3350

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：128 | 回复：0
CVE漏洞

CVE-2021-3349

** DISPUTED ** GNOME Evolution through 3.38.3 produces a Valid signature message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the G ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：142 | 回复：0
CVE漏洞

CVE-2020-35495

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat fro ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：123 | 回复：0
CVE漏洞

CVE-2020-35494

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：132 | 回复：0
CVE漏洞

CVE-2020-35493

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow - out-of-bounds read that could lead to an impac ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：127 | 回复：0
CVE漏洞

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：148 | 回复：0
CVE漏洞

CVE-2020-4942

IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user tha ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：125 | 回复：0
CVE漏洞

CVE-2020-4928

IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the file extention, the attacker could execute arbitrary code on t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：127 | 回复：0
CVE漏洞

CVE-2020-4919

IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on the system. IBM X-Force ID: 191395.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：130 | 回复：0
CVE漏洞

CVE-2020-4918

IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：124 | 回复：0
CVE漏洞

CVE-2020-4917

IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X- ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:35 | 阅读：139 | 回复：0