共收录 2819 条相关情报。
← 返回所有主题CVE-2026-52902
A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize
CVE-2026-49818
The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a c
CVE-2026-41972
Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availabili
CVE-2026-41843
Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources. Affected
CVE-2026-47735
### Summary Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read_parquet(` and `arc
CVE-2026-47712
### Impact dulwich.porcelain.format_patch(outdir=...) derives each patch filename from the commit's subject line. Prior
CVE-2026-46484
Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable
CVE-2026-46486
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potentia
CVE-2026-41448
AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthent
CVE-2026-25559
OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authentic
CVE-2026-49233
Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths fo
CVE-2026-9506
This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController compo
CVE-2022-50953
WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attack
CVE-2026-11470
A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the
CVE-2022-50953
WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attack
CVE-2026-11470
A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the
CVE-2026-11467
A security vulnerability has been detected in jishenghua jshERP up to 3.6. This vulnerability affects the function addAc
CVE-2026-11467
A security vulnerability has been detected in jishenghua jshERP up to 3.6. This vulnerability affects the function addAc
CVE-2026-11411
A security flaw has been discovered in iAI Lab PDF AI App 4.21.0 on Android. Impacted is the function getExternalCacheDi
CVE-2026-11411
CVE-2026-11411 是 iAI Lab PDF AI App 4.21.0 版本（Android 平台）中存在的一处路径遍历漏洞。漏洞位于 chatpdf.pro 组件的 getExternalCacheDir 函数中，攻击者通过