#cwe-22

共收录 2611 条相关情报。

漏洞预警2026-10-06 发布INFO

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or...

CVE-2026-101155

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or...

CVE-2026-101154

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges coul...

CVE-2026-101153

On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attac...

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory (

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacke...

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory (

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively removed the resolved build.distDir bef...

CVE-2026-106109

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/ap

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder ...

CVE-2026-106103

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1,

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-10-06 发布INFO

kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" param...

CVE-2026-95140

kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can update ...

CVE-2026-105865

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

安全公告2026-10-06 发布INFO

Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests

CVE-2026-105795

### Impact When generating an API plugin manifest from an attacker-controlled or compromised OpenAPI description, Kiota

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-22 #severity:low

漏洞预警2026-10-06 发布INFO

Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_semantics.oauth_card_path from an attacker-controlled or ...

CVE-2026-105795

Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current ...

CVE-2026-105840

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows mal

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source....

CVE-2026-105834

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

CVE-2026-39792

Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions.

CVE-2026-39754

Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-06 发布INFO

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.

CVE-2026-39752

Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-10-05 发布INFO

uv: Path traversal on Windows through wheel extraction

CVE-2026-104843

### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #rust #cwe-22 #severity:medium

安全公告2026-10-05 发布INFO

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

CVE-2026-102991

## Summary On Windows, a `TemplateLookup` URI beginning with a drive designator (e.g. `C:/../../secret.txt` or `C:\..\.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #severity:medium

安全公告2026-10-05 发布INFO

Nx: Path traversal in nx migrate package-migrations extraction

CVE-2026-104853

## Summary `nx migrate` reads each target package's `nx-migrations.migrations` value from its manifest and extracts the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-22 #cwe-73 #severity:medium

漏洞预警2026-10-05 发布INFO

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docling/backend/opendo...

CVE-2026-105751

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

历史摘要 · 未重新核验 · NVD

#cve #cwe-22