CVE-2022-40469 · iKuai OS · 远程代码执行
【中文导读】iKuai OS 存在远程代码执行风险（高危风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.
安全史上的今天（2022-10-12）安全事件列表。
【中文导读】iKuai OS 存在远程代码执行风险（高危风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.
【中文导读】In Progress WhatsUp Gold 存在安全缺陷风险（严重风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.
【中文导读】Open Source SACCO Management System 存在SQL 注入风险（高危风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_plan.
【中文导读】该 CVE 涉及拒绝服务、访问控制（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI < R18 Firmware v4.13.00. It does not properly validate requests for access to (or editing of) data and functionality in all endpoints under /#settings/* and /api/settings/*. By not verifying the permissions for access to resources, it allows a potential attacker to view pages, with sensitive data, that are not allowed, and modify system configurations also causing DoS, which should be accessed only by user with administration profile, bypassing all controls (without checking for user identity).
【中文导读】DedeCMS 存在任意文件上传风险（高危风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/file_manage_control.php.
【中文导读】该 CVE 涉及任意文件上传（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
【中文导读】Online Pet Shop We App 存在SQL 注入风险（高危风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.
【中文导读】Online Pet Shop We App 存在SQL 注入风险（严重风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.
【中文导读】Open Source SACCO Management System 存在SQL 注入风险（高危风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_borrower.
【中文导读】该 CVE 涉及安全缺陷（严重风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js.