CVE-2022 第24页
CVE-2022-29272: Nagios XI <5.8.5 - Open Redirect-渗透云记 - 专注于网络安全与技术分享

CVE-2022-29272: Nagios XI <5.8.5 - Open Redirect

漏洞标题 CVE-2022-29272: Nagios XI <5.8.5 - Open Redirect 漏洞描述 Nagios XI through 5.8.5 contains an open redirect vulnerability in the login function. An attacker can redirec...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年12月8日 02:24
60
CVE-2022-38295: Cuppa CMS v1.0 - Cross Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-38295: Cuppa CMS v1.0 – Cross Site Scripting

漏洞标题 CVE-2022-38295: Cuppa CMS v1.0 - Cross Site Scripting 漏洞描述 Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年6月13日 16:25
60
CVE-2022-42746: CandidATS 3.0.0 - Cross-Site Scripting.-渗透云记 - 专注于网络安全与技术分享

CVE-2022-42746: CandidATS 3.0.0 – Cross-Site Scripting.

漏洞标题 CVE-2022-42746: CandidATS 3.0.0 - Cross-Site Scripting. 漏洞描述 CandidATS 3.0.0 contains a cross-site scripting vulnerability via the indexFile parameter of the ajax.php ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月30日 03:04
60
CVE-2022-25082: TOTOLink - Unauthenticated Command Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-25082: TOTOLink – Unauthenticated Command Injection

漏洞标题 CVE-2022-25082: TOTOLink - Unauthenticated Command Injection 漏洞描述 TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年10月3日 18:52
60
CVE-2022-25084: TOTOLink T6 V5.9c.4085_B20190428 Command Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-25084: TOTOLink T6 V5.9c.4085_B20190428 Command Injection

漏洞标题 CVE-2022-25084: TOTOLink T6 V5.9c.4085_B20190428 Command Injection 漏洞描述 TOTOLink 多个设备 download.cgi文件存在远程命令执行漏洞,攻击者通过构造特殊的请求可以获取服务器...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年2月18日 00:11
60
CVE-2022-0208: WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-0208: WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting

漏洞标题 CVE-2022-0208: WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting 漏洞描述 WordPress Plugin MapPress before version 2.73.4 does not sanitize and escape the '...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年10月20日 06:35
60
CVE-2022-45933: KubeView <=0.1.31 - Information Disclosure-渗透云记 - 专注于网络安全与技术分享

CVE-2022-45933: KubeView <=0.1.31 - Information Disclosure

漏洞标题 CVE-2022-45933: KubeView <=0.1.31 - Information Disclosure 漏洞描述 KubeView through 0.1.31 is susceptible to information disclosure. An attacker can obtain control of ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年8月11日 10:21
60
CVE-2022-28363: Reprise License Manager 14.2 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-28363: Reprise License Manager 14.2 – Cross-Site Scripting

漏洞标题 CVE-2022-28363: Reprise License Manager 14.2 - Cross-Site Scripting 漏洞描述 Reprise License Manager 14.2 contains a reflected cross-site scripting vulnerability in the /g...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年1月30日 00:25
60
CVE-2022-29316: Complete Online Job Search System 1.0 - Cross-Site Scripting-渗透云记 - 专注于网络安全与技术分享

CVE-2022-29316: Complete Online Job Search System 1.0 – Cross-Site Scripting

漏洞标题 CVE-2022-29316: Complete Online Job Search System 1.0 - Cross-Site Scripting 漏洞描述 Complete Online Job Search System 1.0 contains a cross-site scripting vulnerability v...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年11月27日 12:12
60
CVE-2022-45362: WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery-渗透云记 - 专注于网络安全与技术分享

CVE-2022-45362: WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery

漏洞标题 CVE-2022-45362: WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery 漏洞描述 WordPress Paytm Payment Gateway plugin through 2.7.0 contains a server-si...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年5月17日 12:22
60
CVE-2022-34045: WAVLINK WN530HG4 - Improper Access Control-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34045: WAVLINK WN530HG4 – Improper Access Control

漏洞标题 CVE-2022-34045: WAVLINK WN530HG4 - Improper Access Control 漏洞描述 WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. It contains a hardcoded...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年6月27日 22:10
60
CVE-2022-34047: WAVLINK WN530HG4 - Improper Access Control-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34047: WAVLINK WN530HG4 – Improper Access Control

漏洞标题 CVE-2022-34047: WAVLINK WN530HG4 - Improper Access Control 漏洞描述 WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. An attacker can obtain ...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年9月9日 22:53
60
CVE-2022-34049: WAVLINK WN530HG4 - Improper Access Control-渗透云记 - 专注于网络安全与技术分享

CVE-2022-34049: WAVLINK WN530HG4 – Improper Access Control

漏洞标题 CVE-2022-34049: WAVLINK WN530HG4 - Improper Access Control 漏洞描述 Wavlink WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. An attacker can downloa...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年4月7日 16:58
60
CVE-2022-36804: Atlassian Bitbucket - Remote Command Injection-渗透云记 - 专注于网络安全与技术分享

CVE-2022-36804: Atlassian Bitbucket – Remote Command Injection

漏洞标题 CVE-2022-36804: Atlassian Bitbucket - Remote Command Injection 漏洞描述 Atlassian Bitbucket Server and Data Center is susceptible to remote command injection. Multiple API...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年10月28日 12:40
60
CVE-2022-22963: Spring Cloud - Remote Code Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2022-22963: Spring Cloud – Remote Code Execution

漏洞标题 CVE-2022-22963: Spring Cloud - Remote Code Execution 漏洞描述 Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions are susceptible to remote code exe...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年8月18日 21:58
60
CVE-2022-40022: Symmetricom SyncServer Unauthenticated - Remote Command Execution-渗透云记 - 专注于网络安全与技术分享

CVE-2022-40022: Symmetricom SyncServer Unauthenticated – Remote Command Execution

漏洞标题 CVE-2022-40022: Symmetricom SyncServer Unauthenticated - Remote Command Execution 漏洞描述 Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a com...
云记的头像-渗透云记 - 专注于网络安全与技术分享云记2022年3月4日 21:32
60