CVE漏洞

OGeek|极客世界-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-21741

Tensorflow is an Open Source Machine Learning Framework. ### Impact An attacker can craft a TFLite model that would trigger a division by zero in the implementation of depthwise convolutions. The para ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：110 | 回复：0
CVE-2022-24307

Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：114 | 回复：0
CVE-2021-45268

** DISPUTED ** A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：118 | 回复：0
CVE-2021-44246

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function setNoticeCfg. This vulnerabili ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：114 | 回复：0
CVE-2021-44247

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg. T ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：117 | 回复：0
CVE-2021-44880

D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allow ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：119 | 回复：0
CVE-2021-44881

D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary command ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：127 | 回复：0
CVE-2021-44882

D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：106 | 回复：0
CVE-2021-45733

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands vi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：120 | 回复：0
CVE-2021-45734

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via the url ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：121 | 回复：0
CVE-2021-45735

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：102 | 回复：0
CVE-2021-45736

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the eip, ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：78 | 回复：0
CVE-2021-45737

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the Host paramet ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：130 | 回复：0
CVE-2021-45738

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：112 | 回复：0
CVE-2021-45739

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the flag paramet ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：101 | 回复：0
CVE-2021-45740

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the pin par ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：89 | 回复：0
CVE-2021-45741

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the relay6to4 p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：97 | 回复：0
CVE-2021-45742

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the Main function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_ ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：98 | 回复：0
CVE-2021-45986

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：95 | 回复：0
CVE-2021-45987

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：112 | 回复：0
CVE-2021-45988

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service (DoS) via t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：90 | 回复：0
CVE-2021-45989

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service (DoS) vi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：91 | 回复：0
CVE-2021-45990

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary comman ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：92 | 回复：0
CVE-2021-45991

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：109 | 回复：0
CVE-2021-45992

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetQvlanList. This vulnerability allows attackers to cause a Denial of Service (DoS) via th ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：108 | 回复：0
CVE-2021-45993

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service (DoS) via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：98 | 回复：0
CVE-2021-45994

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：112 | 回复：0
CVE-2021-45995

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service (DoS) via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：95 | 回复：0
CVE-2021-45996

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：93 | 回复：0
CVE-2021-45997

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：104 | 回复：0
CVE-2021-45998

D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter. This vulnerability allows attackers to execute arbitrary ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：119 | 回复：0
CVE-2021-46226

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wget_test.asp. This vulnerability allows attackers to execute arbitrary commands via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：103 | 回复：0
CVE-2021-46227

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxy_client.asp. This vulnerability allows attackers to execute arbitrary commands ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：97 | 回复：0
CVE-2021-46228

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpd_debug.asp. This vulnerability allows attackers to execute arbitrary commands v ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：92 | 回复：0
CVE-2021-46229

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usb_paswd.asp. This vulnerability allows attackers to execute arbitrary commands via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：101 | 回复：0
CVE-2021-46230

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgrade_filter. This vulnerability allows attackers to execute arbitrary commands vi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：85 | 回复：0
CVE-2021-46231

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function urlrd_opt.asp. This vulnerability allows attackers to execute arbitrary commands via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：78 | 回复：0
CVE-2021-46232

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function version_upgrade.asp. This vulnerability allows attackers to execute arbitrary comman ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：72 | 回复：0
CVE-2021-46233

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function msp_info.htm. This vulnerability allows attackers to execute arbitrary commands via ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：111 | 回复：0
CVE-2021-46452

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitra ...……

作者：菜鸟教程小白 | 时间：2022-2-5 08:41 | 阅读：118 | 回复：0