#cwe-22

共收录 2819 条相关情报。

← 返回所有主题

漏洞预警2026-06-25 发布INFO

K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, 1.34.6+k3s1, v1.33.10+k3s1, a path traversal vulnerability exists in K3s's etcd snapsho...

CVE-2026-54250

K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, 1.34.6+k3s1, v1.33.10+k3s1, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.14, it does not stop the H...

CVE-2026-54094

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

漏洞预警2026-06-25 发布INFO

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, filebrowser builds the ...

CVE-2026-54093

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

Glances is an open-source system cross-platform monitoring tool. From 4.0.8 until 4.5.5, the secure_popen() function in glances/secure.py interprets > (file redirection), | (pip...

CVE-2026-53925

Glances is an open-source system cross-platform monitoring tool. From 4.0.8 until 4.5.5, the secure_popen() function in

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox grants write access to the comm...

CVE-2026-50548

Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename from registry-controlled package name and version fields. A crafted manifest ...

CVE-2026-55700

pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename from registry-contro

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-06-25 发布INFO

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, Manifest bin object keys such as "", ".", and ".." passed pnpm's bin-name guard. When a malicious package was installed g...

CVE-2026-55699

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, Manifest bin object keys such as "", ".", and ".." passed pnpm's

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-06-25 发布INFO

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline (@pnpm/patch-package) performs no path validation on file paths extracted from .patch f...

CVE-2026-50015

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline (@pnpm/patch-package) performs

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore paramete...

CVE-2026-9083

A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download endpoint allows authenticated administrators to read arbitra...

CVE-2026-55439

Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download end

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the desti...

CVE-2026-55092

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal s...

CVE-2026-45233

HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to re

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concatenated with `JPATH_SITE/` and passed to `JFile::copy()`. `JPath::clean` does N...

CVE-2026-48944

The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concatenated with `JPATH_SI

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with do...

CVE-2026-56122

Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.

CVE-2026-56054

Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-25 发布INFO

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privil...

CVE-2026-49506

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-06-25 发布INFO

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression...

CVE-2026-8662

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

安全公告2026-06-25 发布INFO

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows...

CVE-2026-9153

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read ar

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

安全公告2026-06-25 发布INFO

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows...

CVE-2026-9154

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

漏洞预警2026-06-25 发布INFO

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths...

CVE-2026-8662

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-22