#cwe-22

共收录 2819 条相关情报。

← 返回所有主题

漏洞预警2026-04-27 发布INFO

ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload permissio...

CVE-2026-41463

ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-04-27 发布INFO

A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read arbitrary files via sending crafted URL path containing ...

CVE-2026-30351

A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-04-27 发布INFO

A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This affects the function readfile of the file /download.php. The manipulation of the argumen...

CVE-2026-7132

A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This affects the function readfile o

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-04-27 发布INFO

A vulnerability was identified in HBAI-Ltd Toonflow-app up to 1.1.1. This issue affects the function updateStoryboardUrl of the file replaceUrl.ts of the component Storyboard Ex...

CVE-2026-7086

A vulnerability was identified in HBAI-Ltd Toonflow-app up to 1.1.1. This issue affects the function updateStoryboardUrl

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-04-14 发布MEDIUM

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5....

CVE-2026-22573

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR Pa

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-03-26 发布MEDIUM

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malici...

CVE-2026-0964

A malicious SCP server can send unexpected paths that could make the client application override local files outside of

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-01-22 发布MEDIUM

Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensitive information via the joinCleanPath function.

CVE-2025-69820

Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensitive information via t

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-01-02 发布HIGH

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal.

CVE-2025-67160

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory travers

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-17 发布MEDIUM

Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can expl...

CVE-2023-53907

Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logg

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-17 发布HIGH

A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and defaul...

CVE-2025-67174

A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-10 发布HIGH

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the file_get...

CVE-2025-56431

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a deni

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-10 发布HIGH

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the deleteDi...

CVE-2025-56430

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a deni

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-10 发布MEDIUM

A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF, DOC, PPT v65.0 allows attackers to execute a directory traversal.

CVE-2025-65815

A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF, DOC, PPT v65.0 allows attack

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-10 发布MEDIUM

A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Edit Word v6.4.1 allows attackers to execute a directory traversal.

CVE-2025-65814

A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Edit Word v6.4.1 allows attacker

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-10 发布CRITICAL

DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.

CVE-2025-65792

DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-04 发布CRITICAL

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbit...

CVE-2025-65346

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-04 发布HIGH

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offline/bundle/upload/ ...

CVE-2025-54307

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/uplo

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-03 发布MEDIUM

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and d...

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality all

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-12-01 发布HIGH

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method.

CVE-2025-65838

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method.

来源摘录 · NVD

#cve #cwe-22

漏洞预警2025-11-24 发布CRITICAL

A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files ...

CVE-2025-54347

A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6

来源摘录 · NVD

#cve #cwe-22