#cwe-22

共收录 2819 条相关情报。

← 返回所有主题
漏洞预警2026-05-21 发布INFO

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulner...

CVE-2025-71211

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please n...

CVE-2025-71210

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenti...

CVE-2026-4858

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the intended ...

CVE-2026-44068

Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authe

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController...

CVE-2026-9129

A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due to improper handling

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to...

CVE-2026-9102

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitiza

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due to improper handling of file path route parameters. On on-premise deployments ...

CVE-2026-9129

A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due to improper handling

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs. A regular authentica...

CVE-2026-9102

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitiza

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.50.0 and below, a user with course editing role could upload...

CVE-2026-39405

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.50.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is re...

CVE-2026-39352

Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary Fi

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path...

CVE-2026-24208

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path...

CVE-2026-24209

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successf

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of ...

CVE-2026-24209

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successful exploit of this vulnerability might lead to denial of ...

CVE-2026-24208

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior are vulnerable to Lo...

CVE-2026-35593

Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowled

历史摘要 · 未重新核验 · NVD

安全公告2026-05-19 发布INFO

Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path

CVE-2026-46338

# Summary `pymdownx.snippets` has a regression of the CVE-2023-32309 / GHSA-jh85-wwv9-24hv fix. With `restrict_base_pat

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-19 发布INFO

An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7. The server validates session cookies using a filesystem ...

CVE-2026-36829

An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.

CVE-2025-70950

An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on ...

CVE-2026-46724

The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer config

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Co...

CVE-2026-31379

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname

历史摘要 · 未重新核验 · NVD