CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2020-17536

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：99 | 回复：0
CVE-2020-17537

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：100 | 回复：0
CVE-2020-24386

An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' emai ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：124 | 回复：0
CVE-2020-25275

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：106 | 回复：0
CVE-2020-36154

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the %SYSTEMDRIVE%\Pearson VUE directory, which allows local users to obtain administrative pr ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：103 | 回复：0
CVE-2019-25013

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：111 | 回复：0
CVE-2020-26292

Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours betwe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：96 | 回复：0
CVE-2020-35219

The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to Advanced_System_Content.asp wit ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：108 | 回复：0
CVE-2020-36155

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive met ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：102 | 回复：0
CVE-2020-36156

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page coul ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：118 | 回复：0
CVE-2020-36157

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that coul ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：109 | 回复：0
CVE-2020-26293

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：102 | 回复：0
CVE-2020-26294

Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server co ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：105 | 回复：0
CVE-2020-26297

mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0.4.5, there is a vulnerability affecting the search feature of mdBook, which cou ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：105 | 回复：0
CVE-2021-3014

In MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：123 | 回复：0
CVE-2020-29491

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the se ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：115 | 回复：0
CVE-2020-29492

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：113 | 回复：0
CVE-2020-29496

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high privileges could exploit this vulnerability to sto ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：113 | 回复：0
CVE-2020-29497

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low privileges could exploit this vulnerability to stor ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：102 | 回复：0
CVE-2020-29498

Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：124 | 回复：0
CVE-2020-5361

Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their passwords. Dell is aware of unauthorized ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：109 | 回复：0
CVE-2020-36158

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID- ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：128 | 回复：0
CVE-2021-3018

ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：103 | 回复：0
CVE-2021-3019

ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：110 | 回复：0
CVE-2020-17518

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be w ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：102 | 回复：0
CVE-2020-17519

A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the Job ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：119 | 回复：0
CVE-2019-4728

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deseri ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：108 | 回复：0
CVE-2020-26045

FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or e ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：123 | 回复：0
CVE-2020-26046

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account an ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：112 | 回复：0
CVE-2020-35488

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon crash) via a crafted Syslog payload to the Syslog service. This ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：119 | 回复：0
CVE-2020-4761

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical err ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：122 | 回复：0
CVE-2020-4762

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access con ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：111 | 回复：0
CVE-2020-4899

IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network. IBM X-For ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：112 | 回复：0
CVE-2020-7202

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：102 | 回复：0
CVE-2020-13539

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：111 | 回复：0
CVE-2020-13540

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the v ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：109 | 回复：0
CVE-2020-13541

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：90 | 回复：0
CVE-2021-3021

ISPConfig before 3.2.2 allows SQL injection.……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：108 | 回复：0
CVE-2020-27841

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：90 | 回复：0
CVE-2020-27842

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The hig ...……

作者：菜鸟教程小白 | 时间：2022-2-5 09:36 | 阅读：94 | 回复：0