雖然這篇cve-2016-10009鄉民發文沒有被收入到精華區：在cve-2016-10009這個話題中，我們另外找到其它相關的精選爆讚文章
[爆卦]cve-2016-10009是什麼？優點缺點精華區懶人包
你可能也想看看
搜尋相關網站
-
#1CVE-2016-10009 - The MITRE Corporation
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by ...
-
#2CVE-2016-10009 - Red Hat Customer Portal
It was found that ssh-agent could load PKCS#11 modules from arbitrary paths. An attacker having control of the forwarded agent-socket on the ...
-
#3cve-2016-10009 - NVD
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 ...
-
#4CVE-2016-10009 | Ubuntu
CVE -2016-10009 ... Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute ...
-
#5K31440025: OpenSSH vulnerability CVE-2016-10009 - AskF5
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local ...
-
#6CVE-2016-10009 | SUSE
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by ...
-
#7【漏洞公告】CVE-2016-10009：OpenSSH远程代码执行漏洞
2016年12月19日，漏洞平台SecurityFocus上发布了最新的OpenSSH远程代码执行漏洞CVE-2016-10009。该漏洞的影响范围包括OpenSSL版本5.0到7.3。
-
#8Security Bulletin: Vulnerabilities in SSH affect IBM DataPower ...
Vulnerability Details. CVEID: CVE-2016-10009. DESCRIPTION: OpenSSH could allow a remote authenticated attacker to execute arbitrary code on ...
-
#9SA144 : OpenSSH Vulnerabilities January 2017
CVE, Affected Version(s), Remediation. All CVEs, 5.4 and later, Not vulnerable, fixed in 5.4.1. 5.3, Upgrade to later release with fixes.
-
#10OpenSSH 遠程代碼執行漏洞(CVE-2016-10009) - 碼上快樂
OpenSSH 是一組用於安全地訪問遠程計算機的連接工具。 nbsp OpenSSH lt . 版本ssh agent未對加載的PKCS 模塊進行驗證，在實現上存在任意執行代碼漏洞 ...
-
#11CVE-2016-10009 - Debian Security Tracker
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by ...
-
#12Centos Linux: CVE-2016-10009: Moderate: openssh security ...
Rapid7 Vulnerability & Exploit Database. Centos Linux: CVE-2016-10009: Moderate: openssh security, bug fix, and enhancement update (CESA-2017:2029).
-
#13Junos OS: OpenSSH 7.4 Multiple vulnerabilities resolved.
This issue was discovered during a external security research. Important security issues resolved include: CVE, CVSS, Summary. CVE-2016-10009 ...
-
#14CVE-2016-10009 openssh: loading of untrusted PKCS#11 ...
CVE IDCVE-2016-10009DESCRIPTIONIt was found that ssh-agent could load PKCS#11 modules from arbitrary paths. An attacker having control of...
-
#15HP-UX Secure Shell, Multiple Remote Vulnerabilities - HPE ...
CVE -2016-10012 - Affected version: The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 ...
-
#16Scientific Linux 安全性更新：SL7.x x86_64 上的openssh
(CVE-2016-6210) - 據發現，OpenSSH 並未限制用於密碼驗證的密碼長度。未經驗證的遠端攻擊者可利用此缺陷，藉由傳送長密碼，暫時在sshd 中觸發高CPU ...
-
#17Evaluation request to see if the ESA is impacted by CVE-2016 ...
Symptom: Cisco Email Security Appliance (ESA) includes a version of the OpenSSH Protocol that is affected by the vulnerabilities identified ...
-
#18Apple macOS 直到10.12.3 OpenSSH 权限升级 - VulDB
分类为致命的漏洞曾在Apple macOS 直到10.12.3中发现。 该漏洞唯一标识为CVE-2016-10009， 建议对受到影响的组件升级。
-
#19CVE-2016-10009 - Unbreakable Linux Network
Untrusted search path vulnerability in ssh-agent.c in ssh-agent inOpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 ...
-
#20Remote code execution vulnerability in OpenSSH - Alibaba ...
On December 19, 2016, the vulnerability platform SecurityFocus released the latest OpenSSH remote code execution vulnerability, CVE-2016-10009.
-
#21USN-3538-1: OpenSSH vulnerabilities | Security - VMware ...
CVEs contained in this USN include: CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2017-15906. Total CVEs: 5.
-
#22OpenSSH remote code execution vulnerability (CVE-2016 ...
On December 19th, the latest OpenSSH (CVE-2016-10009) remote code execution vulnerability was released on the foreign vulnerability platform securityfocus.
-
#23CVE-2016-10009 - Packet Storm Security
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by ...
-
#24CVE-2016-10009 - Untrusted search path vulnerability in ssh ...
ID, CVE-2016-10009 · Summary, Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary ...
-
#25January 2017 OpenSSH Vulnerabilities in NetApp Products
Advisory ID: NTAP-20171130-0002 Version: 12.0 Last updated: 09/01/2020 Status: Final. CVEs: CVE-2016-10012, CVE-2016-10011, CVE-2016-10010, ...
-
#26OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading
OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading. CVE-2016-10009 . remote exploit for Linux platform.
-
#27Juniper Junos OS update for OpenSSH - CyberSecurity Help
Risk, Medium. Patch available, YES. Number of vulnerabilities, 8. CVE-ID, CVE-2015-8325. CVE-2016-6210. CVE-2016-6515. CVE-2015-6564
-
#28OpenSSH远程代码执行漏洞（CVE-2016-10009） - 代码交流
12 月19 日，国外漏洞平台securityfocus 上发布了最新的OpenSSH（CVE-2016-10009） 远程代码执行漏洞。该漏洞影响范围包括5.0到7.3版本。 本次openssh官方刚刚宣布发布 ...
-
#29CVE-2016-10009 and CVE-2016-6515 - CentOS Forums
Hi, Recent vulnerability scan in our environment identified below vulnerabilities in CentOS 6.9 servers, CVE-2016-10009 - OpenSSH: Untrusted ...
-
#30CVE-2016-10009 Untrusted search path vulnerability in ssh ...
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH prior to 7.4 allows remote malicious users to execute arbitrary local ...
-
#31OpenSSH CVE-2016-10009遠程執行命令漏洞 - 每日頭條
CVE 編號:CVE-2016-10009遠程執行:Yes本地執行:No發布時間:Dec 19 2016 12:00AM更新時間:Dec 20 2016 01:11PM影響版本:OpenSSH OpenSSH 7.3OpenSSH ...
-
#32UPDATE Symantec products: Multiple vulnerabilities - AusCERT
Customers who use | | CVE-2016-10012, |5.3 |NSP for USB cleaning can switch to a version of| | CVE-2016-10011 | |ICSP with fixes.
-
#33net-misc/openssh-7.5_p1-r1 - Gentoo Bugzilla
The only real security problem is CVE-2016-8858 which was already handled in bug 597360. At least no A3. Comment 2 SpanKY gentoo-dev ...
-
#34OpenSSHに複数の脆弱性 ( CVE-2016-10009 , CVE-2016 ...
こんにちは。SIOS OSSエバンジェリスト/セキュリティ担当の面です。 12/19に、OpenSSH 7.4がリリースされると共に、複数の脆弱性情報 ( CVE-2016-10009 , ...
-
#35尽快升级！OpenSSH 曝远程代码执行漏洞（CVE-2016-10009）
12 月19 日，国外漏洞平台securityfocus 上发布了最新的OpenSSH（CVE-2016-10009） 远程代码执行漏洞。该漏洞影响范围包括5.0到7.3版本。由于问题出在ssh-agent ，这个 ...
-
#36CVE-2016-10009-微慑信息网
12 月19 日，国外漏洞平台securityfocus 上发布了最新的OpenSSH（CVE-2016-10009） 远程代码执行漏洞。由于问题出在ssh-agent ，这个进程默认不启动、只在多主机间免 ...
-
#37Dell Technologies VNXe1600 Security Update for Multiple ...
CVE -2015-5219 CVE-2015-8139 CVE-2015-8140 CVE-2016-7426 CVE-2016-7427 CVE-2016-7428. CVE-2016-7429 CVE-2016-7431 CVE-2016-7433 CVE-2016-7434 ...
-
#38Online Technical Support - Knowledgebase - Perle Systems
CVE -2017-17663 vulnerability. CVE-2017-17663 vulnerability. The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by ...
-
#39CVE-2016-10009 OpenSSH 安全漏洞-漏洞情报 - 安全客
OpenSSH 安全漏洞OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现， ...
-
#40ALAS-2017-898 - Amazon Linux Security Center
(CVE-2016-6210). It was found that OpenSSH did not limit password lengths for password authentication. A remote unauthenticated attacker ...
-
#41CVE-2016-10009 - Vulners
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local ...
-
#42Fixed in 6.7.2 - Aruba Networks
This includes fixes for CVE‑2015‑5600, CVE‑2016‑6563, CVE‑2016‑6564, CVE‑2016‑8858, CVE‑2016‑10009, CVE‑2016‑10010, CVE‑2016‑10011, and CVE‑2016‑10012.
-
#43Threat Encyclopedia | FortiGuard
(CVE-2016-6210) * It was found that OpenSSH did not limit password lengths for password authentication. A remote unauthenticated attacker ...
-
#44CVE-2016-10009 - 吓吓小说
【CVE 2016年12月26日 【CVE-2016-10009】OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading 粗看了一下,发现这个漏洞还是比较鸡肋的。如果前提 ...
-
#4596151 - OpenSSH < 7.4 Multiple Vulnerabilities - Huawei ...
CVE -2016-10010：EulerOS使用的openssh，基于CentOS 7中openssh6.6源码基线， centos从openssh-3.3/3.3p1开始启用了特权分离，而且sshd socket转发是比较新的功能， ...
-
#46FreeBSD-SA-17:01.openssh Security Advisory
[CVE-2016-10009] When privilege separation is disabled, forwarded Unix domain sockets would be created by sshd(8) with the privileges of 'root' instead of ...
-
#47Are SonicWall firewalls vulnerable against CVE-2016-6515?
The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote ...
-
#48OpenSSH version upgrade - Hardware, Installation, Up2Date ...
Did Sophos already release a fix for these CVEs? CVE-2015-5600, CVE-2015-6563, CVE-2015-6564. CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012 ...
-
#49OpenSSH 远程代码执行漏洞(CVE-2016-10009) - 博客园
OpenSSH 是一组用于安全地访问远程计算机的连接工具。 OpenSSH < 7.4版本ssh-agent未对加载的PKCS#11 模块进行验证，在实现上存在任意执行代码漏洞。
-
#50OpenSSH 远程代码执行漏洞(CVE-2016-10009) - Linux公社
OpenSSH < 7.4版本ssh-agent未对加载的PKCS#11 模块进行验证，在实现上存在任意执行代码漏洞。可使攻击者在受影响应用上下文中执行任意代码。
-
#51cve-2016-10009 - 德州烘焙培训
cve -2016-10009漏洞验证,cve-2016-10009 exp,cve-2016-10009 poc,cve-2016-10009 msf,cve-2016-10009复现,cve-2016-10009利用,cve-2011-1002,cve-2015-1635 ...
-
#52OpenSSH 曝遠程代碼執行漏洞，儘快升級 - 台部落
導讀 12月19日，國外漏洞平臺securityfocus上發佈了最新的OpenSSH（CVE-2016-10009）遠程代碼執行漏洞。
-
#53KB-8781: Does Centrify OpenSSH Address Specific Known ...
CVE -2016-10009; CVE-2016-10010; CVE-2016-10011; CVE-2016-10012. Answer: These vulnerabilities are addressed in Centrify Server Suite 2017.1 which is based ...
-
#54CVE-2016-10009 - Infosec - CERT-PA
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local ...
-
#55OpenSSH远程代码执行漏洞（CVE-2016-10009） - 51CTO博客
漏洞编号：CVE-2016-10009 · 漏洞描述： sshd服务可以利用转发的agent-socket文件欺骗本机的ssh-agent加载一个恶意的PKCS#11模块，从而可以远程执行代码。
-
#56CentOS, OpenSSH, PCI, CVE-2016-10009 - Server Fault
This is a vulnerability where a malicious ssh server can attack the client if the client has connected with ssh-agent forwarding, ...
-
#57请尽快升级！OpenSSH远程代码执行漏洞（CVE-2016-10009）
12月19日，国外漏洞平台SecurityFocus 上发布了最新的OpenSSH（CVE-2016-10009） 远程代码执行漏洞。 漏洞描述. OpenSSH存在远程代码执行漏洞，攻击者 ...
-
#58Status of OpenSSH CVEs - Check Point Support Center
CVE -2006-4924 - prevent DoS on deattack detector (#207957); The rpm -qa | grep ssh command can be used to verify the OpenSSH package version ...
-
#59请尽快升级！OpenSSH远程代码执行漏洞（CVE-2016-10009）
12月19日，国外漏洞平台securityfocus 上发布了最新的OpenSSH（CVE-2016-10009） 远程代码执行漏洞。 漏洞描述OpenSSH存在远程代码执行漏洞, ...
-
#60OpenSSH 7.4代理协议任意库加载漏洞 - Hedysx
CVE -2016-10009$catevil_lib.c#include __attribute__((constructor))staticvoidrun(void){//incaseyou'reloadingthisviaLD_PRELOADor.
-
#61General : OpenSSH Multiple Vulnerabilities Jan17 (Linux)
Common Vulnerability Exposure (CVE) ID: CVE-2016-10009 · Common Vulnerability Exposure (CVE) ID: CVE-2016-10010 · Common Vulnerability Exposure (CVE) ID: ...
-
#62OpenSSH报远程代码执行漏洞（CVE-2016-10009） - 云服务器
OpenSSH CVE-2016-10009 Remote Code Execution Vulnerability.
-
#63尽快升级！OpenSSH 曝中危远程代码执行漏洞（CVE-2016 ...
12 月19 日，国外漏洞平台securityfocus 上发布了最新的OpenSSH（CVE-2016-10009） 远程代码执行漏洞。由于问题出在ssh-agent ，这个进程默认不启动、 ...
-
#64[3.4] openssh: multiple issues (CVE-2016 ... - alpine · GitLab
CVE -2016-10009: loading of untrusted PKCS#11 modules in ssh-agent Ssh-agent could load PKCS#11 modules from paths outside of a trusted whitelist. An...
-
#65OpenSSH Multiple Flaws Let Remote Authenticated Users ...
A local privileged user may be able to exploit a privilege separation flaw to obtain host private key material [CVE-2016-10011].
-
#66JVNDB-2016-006607 - 脆弱性対策情報データベース
共通脆弱性識別子(CVE) CVEとは? CVE-2016-10009. 参考情報. National Vulnerability Database (NVD) : CVE-2016-10009. 更新履歴. [2017年01月16日]
-
#67CVE-2016-0778 - 程序员秘密
OpenSSH 拒绝服务漏洞(CVE-2016-0778) OpenSSH sshd 权限许可和访问控制漏洞(CVE-2015-5600) OpenSSH sshd 安全漏洞(CVE-2016-6515) OpenSSH 远程代码执行 ...
-
#68Lenovo Branded Local Console Manager LCM8 and LCM16 ...
... CVE-2019-1551, CVE-2019-1563 Version 2.0.0.0.4476 Update OpenSSL to Version 1.0.2q (CVE-2018-0734) CVE-2018-0737, CVE-2018-0739 Version 1.30.2.0.4435 ...
-
#69PAN-SA-2020-0004 Informational: Third-party or open source ...
CVE -2014-1692, 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P, The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified ...
-
#71【CVE-2016-10009】OpenSSH < 7.4 - 术之多
【CVE-2016-10009】OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading. rebeyond 2016-12-26 原文. 粗看了一下，发现这个漏洞还是比较鸡肋的。
-
#72Vulnerability about OpenSSH: five vulnerabilities | Vigil@nce
An attacker can use several vulnerabilities of OpenSSH, identified by CVE-2016-10009, CVE-2016-10010, CVE-2016-10011.
-
#73从openssh漏洞修复谈linux启动过程 - 码农家园
OpenSSH auth_password函数拒绝服务漏洞(CVE-2016-6515). OpenSSH?远程代码执行漏洞(CVE-2016-10009). Openssh MaxAuthTries限制绕过 ...
-
#74openssh security, bug fix, and enhancemen修复_onekbit云笔记
OpenSSH存在安全漏洞。受影响的版本有：7.3之前的版本。攻击者可以利用该漏洞造成拒绝服务攻击。 基本信息. CVE编号: CVE-2016-6515
-
#75CVE 2016-10009 - Radware Support
APSulote Vision. CVE 2016-10009 · CVSS Severity 7.3 High. SW Version. Vulnerability Status. Vulnerable Component. ETA for the Fix.
-
#76为什么要说又？OpenSSH又出漏洞了这次是OpenSSH远程代码 ...
OpenSSH又出漏洞了这次是OpenSSH远程代码执行漏洞CVE-2016-10009_weixin_34354945的博客-程序员宅基地. 技术标签： 运维. 我去，OpenSSH今年这是第几 ...
-
#77#122113 OpenSSH / dropbearSSHd xauth command injection
https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115.
-
#78最近的OpenSSH 漏洞究竟有多大危害？_weixin_34411563的 ...
CVE -2016-10012：sshd 服务器如果启用了认证前压缩（也就是Compression yes），其中的某些边界检查可能会被编译优化去除，导致攻击者有可能从经过权限隔离的子进程中攻击高 ...
-
#79關於macOS Sierra 10.12.4、安全性更新2017-001 El Capitan ...
Apple 安全性文件會盡可能以CVE-ID 參照安全漏洞。 ... CVE-2017-2430：匿名研究員（與趨勢科技的Zero Day Initiative 計劃合作）.
-
#80Tag : 資安新聞及事件週報- Page No.2 - TDOHacker
Cisco AsyncOS遠程安全限制繞過漏洞(CVE-2016-6458) ... Norton 及Symantec 企業版產品遠端執行程式碼漏洞CVE-2016-5311
-
#81Debian alert DLA-1500-1 (openssh) - LWN.net
Package : openssh Version : 1:6.7p1-5+deb8u6 CVE ID : CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2016-1908 CVE-2016-3115 ...
-
#82NetScaler OpenSSH vulnerability - Citrix Discussions
Does anyone know if the NetScaler 11.1 amd64 is vulnerable to the following CVE-2016-1908 - The client in OpenSSH mishandles failed cookie ...
-
#83[CVE-2016-10009]OpenSSH 曝远程代码执行漏洞知道创宇云 ...
知道创宇云防御(defense.yunaq.com)是国内专业的免费云端业务系统防护平台，为用户业务系统提供免费黑客攻击云防护、云加速服务，使用知道创宇云防御 ...
-
#84安全研究 - 绿盟科技
描述：. BUGTRAQ ID: 94968. CVE(CAN) ID: CVE-2016-10009 OpenSSH 是一组用于安全地访问远程计算机的连接工具。 OpenSSH < 7.4版本ssh-agent未对加载 ...
-
#85FreeBSD -- OpenSSH multiple vulnerabilities - VuXML
[CVE-2016-10009]. When privilege separation is disabled, forwarded Unix domain sockets would be created by sshd(8) with the privileges of 'root' instead of ...
-
#86OpenSSH远程代码执行漏洞（CVE-2016-10009） - 极客分享
12 月19 日，国外漏洞平台securityfocus 上发布了最新的OpenSSH（CVE-2016-10009） 远程代码执行漏洞。该漏洞影响范围包括5.0到7.3版本。
-
#87OpenSSH Multiple Vulnerabilities | HKCERT
Vulnerability Identifier. CVE-2016-10009 · CVE-2016-10010 · CVE-2016-10011 · CVE-2016-10012. Source. SecurityTracker. Related Link.
-
#88尽快升级！OpenSSH 曝远程代码执行漏洞（CVE-2016-10009）
12月19日，国外漏洞平台securityfocus上发布了最新的OpenSSH（CVE-2016-10009）远程代码执行漏洞。由于问题出在ssh-agent，这个.
-
#89【CVE-2016-10009】OpenSSH < 7.4 - CSDN博客
粗看了一下，发现这个漏洞还是比较鸡肋的。如果前提条件满足，该漏洞可以在ssh server执行任意指令。不过前提是：1.攻击者可以往受害者磁盘上写文件。
-
#90【CVE-2016-10009】OpenSSH < 7.4 - agent Protocol ...
【CVE-2016-10009】OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading. rebeyond 2016-12-26 原文. 粗看了一下，发现这个漏洞还是比较鸡肋的。
-
#91OpenSSH远程代码执行漏洞（CVE-2016-10009） - 云夕阁 ...
漏洞编号：CVE-2016-10009漏洞描述：sshd服务可以利用转发的agent-socket文件欺骗本机的ssh-agent加载一个恶意的PKCS#11模块，从而可以远程执行代码。
-
#92HiNet 防毒防駭服務
廠牌, 軟硬體型號, 弱點數量, 說明, CVE ID. Arista, DCS-7050, 1, Arista DCS-7050系列的EOS 4.15 在4.15.8M之前、4.16 在4.16.7M之前，與4.17 ...
-
#93CVE-2016-10010 Archives - nixCraft
[CVE-2016-10009]. When privilege separation is disabled, forwarded Unix domain sockets would be created by sshd(8) with the privileges of ...
-
#94腾讯玄武实验室安全动态推送 - Tencent Security Xuanwu Lab
"Android WifiNative::setHotlist 栈溢出poc（CVE-2016-6772 ）： https://t.co/9Cwxjq9xTp". Project Zero Bugs @ProjectZeroBugs.
-
#95【漏洞预警】OpenSSH远程代码执行漏洞（CVE-2016-10009）
12月19日，国外漏洞平台securityfocus 上发布了最新的OpenSSH远程代码执行漏洞（CVE-2016-10009），该漏洞影响范围包括5.0到7.3版本。
-
#96请尽快升级！OpenSSH远程代码执行漏洞（CVE ... - 手机搜狐网
12月19日，国外漏洞平台securityfocus 上发布了最新的OpenSSH（CVE-2016-10009） 远程代码执行漏洞。 漏洞描述. OpenSSH存在远程代码执行漏洞, ...