#cwe-22

共收录 2611 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布HIGH

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file syste...

CVE-2026-106634

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-70084

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

CVE-2026-105727

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.

CVE-2026-102229

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorize

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

CVE-2026-102226

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or com...

CVE-2026-106173

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to wr...

CVE-2026-110116

Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager store

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthent...

CVE-2026-110115

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileCo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.

CVE-2026-106047

A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.

CVE-2026-106034

A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to creat

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile

CVE-2026-110116

Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager store

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream

CVE-2026-110115

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileCo

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-13 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages() cou...

CVE-2026-106108

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/ap

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

CVE-2026-106108

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/ap

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-13 发布INFO

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read arbitrary files via unvalidated ...

CVE-2026-93347

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload_decoder_file that allows malicious cluster workers to wr...

CVE-2026-74043

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB list handlers that allows compromised cluster workers to rea...

CVE-2026-74033

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB lis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file helpers that allows malicious cluster workers to delete ar...

CVE-2026-74031

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Atta...

CVE-2026-109956

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.paths

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The mani...

CVE-2026-109519

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settin

历史摘要 · 未重新核验 · NVD