#cwe-22

共收录 2819 条相关情报。

← 返回所有主题

漏洞预警2026-06-12 发布INFO

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnera...

CVE-2026-11847

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-12 发布INFO

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit thi...

CVE-2026-11846

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerabilit

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-12 发布INFO

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside...

CVE-2026-11844

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, all

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-12 发布INFO

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or ...

CVE-2026-47368

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices runni

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-06-12 发布INFO

Incomplete input validation and improperly configured folder permissions within Idira Privileged...

CVE-2026-45171

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) v

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:critical

漏洞预警2026-06-11 发布INFO

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an a...

CVE-2026-45171

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) v

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-06-11 发布INFO

A parsing issue in the handling of directory paths was addressed with improved path validation....

CVE-2025-24268

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

安全公告2026-06-11 发布INFO

WsgiDAV encoded dot segments can escape filesystem share roots

CVE-2026-48099

### Impact WsgiDAV 4.3.3 can allow a WebDAV request path containing an encoded parent-directory segment to escape the co

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #severity:high

漏洞预警2026-06-11 发布INFO

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive...

CVE-2025-24268

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-11 发布INFO

tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPath guard added to tmp rejects only string values that contain the substring ... It is b...

CVE-2026-49982

tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPath guard added to tmp rejects

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-22

漏洞预警2026-06-11 发布INFO

tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporar...

CVE-2026-44705

tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-06-11 发布INFO

@hapi/inert has a static-file confinement bypass via sibling-prefix path

CVE-2026-48049

### Impact `@hapi/inert` serves static files from a directory configured with `path` (in the `directory` / `file` handle

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-22 #severity:medium

漏洞预警2026-06-11 发布INFO

Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to any location writable by the running process by ...

CVE-2026-53777

Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary co

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-11 发布INFO

Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_saf...

CVE-2026-11816

Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-11 发布INFO

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's ...

CVE-2026-8464

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-11 发布INFO

A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the configured local-directory) with attacker-controlled cont...

CVE-2026-40987

A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-10 发布INFO

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.23.2 and prior to version 1.2.5, `dulwich.porcelain.submodule_update`, and b...

CVE-2026-52726

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.23.2 and prior to v

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can...

CVE-2026-49219

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-78 #cwe-200 #cwe-863

漏洞预警2026-06-10 发布INFO

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, dulwich.porcelain.format_patch(outdir=...) ...

CVE-2026-47712

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to v

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-10 发布INFO

Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0...

CVE-2026-46703

Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers

历史摘要 · 未重新核验 · NVD

#cve #cwe-22