#cwe-22

共收录 2611 条相关情报。

漏洞预警2026-10-05 发布INFO

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into L...

CVE-2026-105744

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73 #cwe-1188

漏洞预警2026-10-05 发布INFO

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / ...

CVE-2026-102262

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attac

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-668

漏洞预警2026-10-05 发布INFO

Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article ...

CVE-2026-95264

Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can del

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-05 发布INFO

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to exec...

CVE-2026-105677

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme transla

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-94 #cwe-829

漏洞预警2026-10-05 发布INFO

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read...

CVE-2026-105676

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme transla

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-10-05 发布INFO

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the auto-changelog key in package.json) into its options, and ho...

CVE-2026-12171

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-88 #cwe-94 #cwe-829 #cwe-918

安全公告2026-10-05 发布INFO

auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF

CVE-2026-12171

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the aut

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-829 #cwe-88 #cwe-918 #cwe-94

漏洞预警2026-10-05 发布INFO

A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_script argument and receive the contents of any file readable ...

CVE-2026-89039

A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_scrip

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-424

漏洞预警2026-10-05 发布INFO

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database...

CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-05 发布INFO

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file /boafrm/formUploadFile of the component File Upload Handl...

CVE-2026-105286

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-05 发布INFO

DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitra...

CVE-2026-104805

DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73 #cwe-345 #cwe-434 #cwe-494

安全公告2026-10-05 发布INFO

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that...

CVE-2026-105293

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Disc

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:critical

安全公告2026-10-05 发布INFO

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function...

CVE-2026-105174

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the fil

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

漏洞预警2026-10-05 发布INFO

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated t...

CVE-2026-105293

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Disc

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-05 发布INFO

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Ma...

CVE-2026-105174

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-10-05 发布INFO

Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers

CVE-2026-105293

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Disc

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

安全公告2026-10-04 发布INFO

A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element...

CVE-2026-105157

A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocCon

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

漏洞预警2026-10-04 发布INFO

A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file /Doc/doGetTmpFile.do of the ...

CVE-2026-105157

A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocCon

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-10-04 发布INFO

A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function...

CVE-2026-105144

A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

漏洞预警2026-10-04 发布INFO

A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route of the file lib/src/StaticFileRouter.cc of the component ...

CVE-2026-105144

A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route

历史摘要 · 未重新核验 · NVD

#cve #cwe-22