#cwe-22

共收录 2819 条相关情报。

← 返回所有主题
漏洞预警2026-05-05 发布INFO

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 via the 'up...

CVE-2026-5192

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Trave

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The affected element is the function is_safe_path of the file src/code_mcp/serv...

CVE-2026-7811

A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The affected element i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0d4369894c2. Impacted is the function create_notebook/read_notebook/edit_cell/add_cell o...

CVE-2026-7810

A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0d4369894c2. Impacted is the fu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to and including 1.6.5. This is due to a flawed path traversal validation in the create...

CVE-2026-5957

The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to and including 1.6.5. This i

历史摘要 · 未重新核验 · NVD

安全公告2026-05-05 发布INFO

The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to,...

CVE-2026-1921

The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-05 发布INFO

The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via the `fsReference` AJAX route. This is due to the `findSou...

CVE-2026-1921

The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via

历史摘要 · 未重新核验 · NVD

安全公告2026-05-05 发布INFO

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to...

CVE-2026-7788

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The af

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-05 发布INFO

A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some unknown...

CVE-2026-7784

A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some unknown processing of the file

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-05 发布INFO

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function update_document/continue_d...

CVE-2026-7788

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some unknown processing of the file apiserver/routes/extensions.py of the component Skills E...

CVE-2026-7784

A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some unknown processing of the file

历史摘要 · 未重新核验 · NVD

安全公告2026-05-04 发布INFO

apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root

CVE-2026-42574

### Impact A crafted `.apk` could install a `TypeSymlink` tar entry whose target pointed outside the build root, and a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-04 发布INFO

AzuraCast has Path Traversal in `currentDirectory` Parameter that Enables Remote Code Execution via Media Upload

CVE-2026-42605

## Summary The `currentDirectory` request parameter in the Flow.js media upload endpoint (`POST /api/station/{station_i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-04 发布INFO

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated lik...

CVE-2026-6321

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This ...

CVE-2026-42080

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdow...

CVE-2026-42078

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to wr...

CVE-2026-42075

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A security flaw has been discovered in puchunjie doc-tools-mcp 1.0.18. This affects the function create_document/open_document of the file src/mcp-server.ts of the component MCP...

CVE-2026-7738

A security flaw has been discovered in puchunjie doc-tools-mcp 1.0.18. This affects the function create_document/open_do

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was identified in ryanjoachim mcp-rtfm 0.1.0. This vulnerability affects the function get_doc_content/read_doc/update_doc of the component MCP Interface. Such ma...

CVE-2026-7728

A vulnerability was identified in ryanjoachim mcp-rtfm 0.1.0. This vulnerability affects the function get_doc_content/re

历史摘要 · 未重新核验 · NVD

安全公告2026-05-04 发布INFO

A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the...

CVE-2026-7715

A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arango_backup of

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-04 发布INFO

A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arango_backup of the file src/tools.ts of the component MCP Interface. Suc...

CVE-2026-7715

A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7. This affects the function arango_backup of

历史摘要 · 未重新核验 · NVD