Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows...
CVE-2018-25326
Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arb
#cwe-22
共收录 2819 条相关情报。
← 返回所有主题A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete R...
CVE-2026-8757
A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/fram
WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that...
CVE-2021-47979
WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated at
WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory...
CVE-2021-47977
WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that
Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows...
CVE-2021-47942
Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attacke
WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating parameters in AJA...
CVE-2021-47979
CVE-2021-47979 是 WordPress 插件 Backup and Restore 1.0.3 中存在的一个任意文件删除漏洞。该漏洞允许经过身份验证的攻击者通过向 admin-ajax.php 发送特制的 POST 请求，操纵
WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files...
CVE-2021-47977
WordPress插件 Anti-Malware Security and Bruteforce Firewall 4.20.59版本中存在一个目录遍历漏洞。未经身份验证的攻击者可以通过向 admin-ajax.php 发送特制请求，利用
Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via ...
CVE-2021-47942
Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attacke
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, when attaching files to a promp, the name of the file is der...
CVE-2026-44566
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, whe
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.10, when uploading an audio file, the name of the file is derived...
CVE-2026-44565
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.10, when
Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`
CVE-2026-46383
### Summary Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe us
SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion
CVE-2026-46491
## Summary `simplesamlphp-module-casserver` builds file paths for the file-based CAS ticket store by directly concatena
Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failur...
CVE-2026-46383
Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM conta
Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.8.12, Microsoft APM normalizes marketplace plugins by copying plugin components re...
CVE-2026-44641
Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.8.12, Microsoft APM norma
Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator
CVE-2026-44716
## Summary A path traversal vulnerability exists in Pipecat's development runner (`src/pipecat/runner/run.py`). When th
Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML...
CVE-2026-7182
Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenti
PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal...
CVE-2026-41552
PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sani
Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could inclu...
CVE-2026-7182
Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenti
PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user could craft the html pa...
CVE-2026-41552
PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sani
The Quick Playground plugin for WordPress is vulnerable to Path Traversal in versions up to and...
CVE-2026-6403
The Quick Playground plugin for WordPress is vulnerable to Path Traversal in versions up to and including 1.3.3. This is