#cwe-22

共收录 2611 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing c...

CVE-2026-93695

In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when con

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This ma...

CVE-2026-78355

A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to refe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names t...

CVE-2026-87690

The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privi

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

A security flaw has been discovered in westboy CicadasCMS up to...

CVE-2026-108790

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-12 发布INFO

A weakness has been identified in westboy CicadasCMS up to...

CVE-2026-108791

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the fun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-12 发布INFO

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/te...

CVE-2026-108791

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/c...

CVE-2026-108790

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts t

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects...

CVE-2026-108772

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Joi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-11 发布INFO

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the ...

CVE-2026-108772

A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Joi

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the...

CVE-2026-108902

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePho

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-11 发布INFO

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete a...

CVE-2026-108902

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePho

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link

CVE-2026-108902

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePho

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-11 发布INFO

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file system/fields/image.php of the component Image Handler. Perfo...

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file syst

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

InstantSoft icms2 Image image.php files_delete_file path traversal

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file syst

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-11 发布INFO

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such...

CVE-2026-108544

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument ...

CVE-2026-108543

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the com

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.

CVE-2026-78530

Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.

CVE-2026-66481

Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.

CVE-2026-40805

Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.

历史摘要 · 未重新核验 · NVD