#cwe-22

共收录 2611 条相关情报。

漏洞预警2026-10-09 发布INFO

KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.function.php, where a single non-recursive str_replac...

CVE-2026-104081

KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/hel

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-10-09 发布INFO

KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction

CVE-2026-104081

KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/hel

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

漏洞预警2026-10-09 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name supplied through the project file AP...

CVE-2026-103412

Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-10-09 发布INFO

Apache Camel Karavan: project file name path traversal when committing a project to Git

CVE-2026-103412

Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

漏洞预警2026-10-09 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 al...

CVE-2026-94666

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-09 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.T...

CVE-2026-94664

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Cont

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-09 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulner...

CVE-2026-78340

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pat

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-09 发布INFO

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does...

CVE-2026-107935

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial...

CVE-2026-84247

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...

CVE-2026-75875

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path tr

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:critical

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary...

CVE-2026-82900

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper li

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

CVE-2026-84247

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.

CVE-2026-82900

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper li

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.

CVE-2026-75875

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path tr

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-08 发布INFO

Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or discovere...

CVE-2026-107716

Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry d

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

安全公告2026-10-08 发布INFO

Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

CVE-2026-107716

### Summary In `banks.registries.DirectoryPromptRegistry`, prompt file paths and the index file (`index.json`) do not re

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #cwe-59 #severity:medium

安全公告2026-10-08 发布INFO

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

CVE-2026-61445

### Summary The `AICoder` UI component exposes `write_to_file` and `execute_command` tools to the LLM with no path valid

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #cwe-78 #severity:critical

安全公告2026-10-08 发布INFO

Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

CVE-2026-107716

Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry d

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-59

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path ...

CVE-2026-19493

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arb...

CVE-2026-84275

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticat

历史摘要 · 未重新核验 · NVD

#cve #cwe-22