#cwe-22

共收录 2819 条相关情报。

漏洞预警2026-06-10 发布INFO

Dulwich is a pure-Python implementation of the Git file formats and protocols. Versions starting with 0.10.0 and prior to 1.2.5 have an arbitrary file write leading to remote co...

CVE-2026-42305

Dulwich is a pure-Python implementation of the Git file formats and protocols. Versions starting with 0.10.0 and prior t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-10 发布INFO

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, a one-byte off-by-one error in SafeOutPathBuilder:...

CVE-2026-45380

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-193

漏洞预警2026-06-10 发布INFO

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability t...

CVE-2026-0270

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-10 发布MEDIUM

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the...

CVE-2026-24717

CVE-2026-24717 是一个影响多个 QNAP 操作系统版本的路径遍历漏洞。漏洞描述指出，如果远程攻击者首先获取管理员账户权限，则可以利用该漏洞读取意外文件或系统数据。QNAP 已在以下版本中修复该漏洞：QTS 5.2.9.3492

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-10 发布MEDIUM

A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read th...

CVE-2025-62851

该漏洞影响 License Center 组件，属于路径遍历漏洞。攻击者需先获得本地管理员账户权限，然后利用该漏洞读取意料之外的文件或系统数据。此漏洞已在 License Center 版本 1.9.56 及后续版本中修复。目前没有证据表明

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-06-10 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...

CVE-2026-34657

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

漏洞预警2026-06-10 发布INFO

SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. Prior to version 7.0.3, simplesamlphp-module-casserver builds file paths...

CVE-2026-46491

SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. Prior to versio

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-10 发布INFO

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From version 0.0.90 to before version 1.2.0, a path traversal vulne...

CVE-2026-44716

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From versi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-09 发布INFO

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulne...

CVE-2026-34657

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-06-09 发布INFO

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a...

CVE-2026-47932

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Dir

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

漏洞预警2026-06-09 发布INFO

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result...

CVE-2026-47932

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Dir

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-09 发布INFO

Hermes WebUI before version 0.51.269 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting ...

CVE-2026-49957

Hermes WebUI before version 0.51.269 contains a workspace boundary bypass vulnerability that allows authenticated attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-09 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feat...

CVE-2026-45482

Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-09 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-45454

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-09 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.

CVE-2026-32193

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service all

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-09 发布INFO

Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability.

CVE-2026-22926

Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-09 发布INFO

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers ca...

CVE-2017-20250

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrar

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-09 发布INFO

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attack...

CVE-2017-20248

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-06-09 发布INFO

Backend users with file download permissions were able to download files from the fallback storage of the file abstraction layer (FAL) via the Media Module. Since the fallback s...

CVE-2026-49742

Backend users with file download permissions were able to download files from the fallback storage of the file abstracti

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

漏洞预警2026-06-09 发布INFO

The path allowance check in GeneralUtility::isAllowedAbsPath() performed a plain string prefix comparison without requiring a directory separator boundary, causing a path like /...

CVE-2026-49738

The path allowance check in GeneralUtility::isAllowedAbsPath() performed a plain string prefix comparison without requir

历史摘要 · 未重新核验 · NVD

#cve #cwe-22