CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-34577

A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：628 | 回复：0
CVE-2022-34749

In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases. This behavior is commonly named cat ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：498 | 回复：0
CVE-2022-22686

Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to hijack the authentication of administrators via unspecif ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：398 | 回复：0
CVE-2020-36290

The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and from version 7.7.0 before version 7.7.4 allows remote attackers with permission to ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：440 | 回复：0
CVE-2022-1041

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：524 | 回复：0
CVE-2022-1042

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：527 | 回复：0
CVE-2022-30706

Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to acces ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：438 | 回复：0
CVE-2022-31471

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：432 | 回复：0
CVE-2022-33977

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a re ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：602 | 回复：0
CVE-2021-43959

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a Server-Side Request Forgery ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：433 | 回复：0
CVE-2022-2225

By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g. Secure Web Gateway policies) ...……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：481 | 回复：0
CVE-2021-33437

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks in frozen_cb() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：480 | 回复：0
CVE-2021-33438

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：422 | 回复：0
CVE-2021-33439

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：448 | 回复：0
CVE-2021-33440

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：393 | 回复：0
CVE-2021-33441

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：487 | 回复：0
CVE-2021-33442

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：688 | 回复：0
CVE-2021-33443

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：472 | 回复：0
CVE-2021-33444

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：574 | 回复：0
CVE-2021-33445

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_code_at() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：418 | 回复：0
CVE-2021-33446

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：400 | 回复：0
CVE-2021-33447

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：414 | 回复：0
CVE-2021-33448

An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：433 | 回复：0
CVE-2021-33449

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offset() in mjs.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：553 | 回复：0
CVE-2021-33450

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：498 | 回复：0
CVE-2021-33451

An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() in stream.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：404 | 回复：0
CVE-2021-33452

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：560 | 回复：0
CVE-2021-33453

An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：511 | 回复：0
CVE-2021-33454

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：462 | 回复：0
CVE-2021-33455

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in do_directive() in modules/preprocs/nasm/nasm-pp.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：410 | 回复：0
CVE-2021-33456

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash() in modules/preprocs/nasm/nasm-pp.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：483 | 回复：0
CVE-2021-33457

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmac_params() in modules/preprocs/nasm/nasm-pp.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：452 | 回复：0
CVE-2021-33458

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in find_cc() in modules/preprocs/nasm/nasm-pp.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：437 | 回复：0
CVE-2021-33459

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in modules/parsers/nasm/nasm-parse.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：456 | 回复：0
CVE-2021-33460

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in if_condition() in modules/preprocs/nasm/nasm-pp.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：635 | 回复：0
CVE-2021-33461

An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：667 | 回复：0
CVE-2021-33462

An issue was discovered in yasm version 1.3.0. There is a use-after-free in expr_traverse_nodes_post() in libyasm/expr.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：572 | 回复：0
CVE-2021-33463

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr__copy_except() in libyasm/expr.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：474 | 回复：0
CVE-2021-33464

An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in modules/preprocs/nasm/nasm-pp.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：443 | 回复：0
CVE-2021-33465

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/preprocs/nasm/nasm-pp.c.……

作者：菜鸟教程小白 | 时间：2022-7-29 17:19 | 阅读：450 | 回复：0