#cwe-22

共收录 2819 条相关情报。

← 返回所有主题

漏洞预警2026-06-25 发布INFO

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via t...

CVE-2026-9154

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insuffi...

CVE-2026-9153

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read ar

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

安全公告2026-06-25 发布INFO

ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability...

CVE-2026-9777

ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-06-25 发布INFO

ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This...

CVE-2026-9774

ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote at

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

安全公告2026-06-25 发布INFO

ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability. This...

CVE-2026-9775

ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attack

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

安全公告2026-06-25 发布INFO

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This...

CVE-2026-9778

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-06-25 发布INFO

ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure...

CVE-2026-9776

ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

漏洞预警2026-06-24 发布INFO

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graph_theme and rrdtool IPC serialization hardenin...

CVE-2026-39938

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-78

漏洞预警2026-06-24 发布INFO

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal via filename parameter in package_import.php. This...

CVE-2026-39899

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Tra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installati...

CVE-2026-9778

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ...

CVE-2026-9777

ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information...

CVE-2026-9776

ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations o...

CVE-2026-9775

ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installatio...

CVE-2026-9774

ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Traversal via Double URL Encoding") sanitized the /export/ rou...

CVE-2026-54066

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Trave

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23 #cwe-1188

漏洞预警2026-06-24 发布INFO

Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agent control and inspect a live Chrome browser. From 0.24.0 until 1.1.0, McpContext.validatePath() enforces wo...

CVE-2026-53766

Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agent control and inspect a live Chrome browser. From

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

漏洞预警2026-06-24 发布INFO

Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoFiles checks for symlinks only on the leaf of the upload target (osx.IsSymlink(targetPat...

CVE-2026-52811

Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoFiles checks for symlinks only

来源摘录 · NVD

#cve #cwe-22 #cwe-59 #cwe-61

漏洞预警2026-06-24 发布INFO

Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an authorized user, an intruder can dictate the value which is passed to the git diff command which, together...

CVE-2026-52797

Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an authorized user, an intruder can dictate the valu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

motionEye (mEye) is an online interface for motion software, which is a video surveillance program with motion detection. Versions prior to 0.44.0 are vulnerable to path travers...

CVE-2026-31978

motionEye (mEye) is an online interface for motion software, which is a video surveillance program with motion detection

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-284

漏洞预警2026-06-24 发布INFO

Jellyfin is an open source self hosted media server. From 10.9.0 until 10.11.10, the POST /ClientLog/Document endpoint accepts the Authorization header's Client and Version fiel...

CVE-2026-49247

Jellyfin is an open source self hosted media server. From 10.9.0 until 10.11.10, the POST /ClientLog/Document endpoint a

历史摘要 · 未重新核验 · NVD