#cwe-22

共收录 2611 条相关情报。

漏洞预警2026-10-30 发布MEDIUM

Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in restore-repo that allows attackers to read files outside the...

CVE-2026-119546

Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in res

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布INFO

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook `POST /api/v1/projects/{projectUuid}/dbt-cloud/webhook` ...

CVE-2026-61576

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布HIGH

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=vo...

CVE-2026-118758

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD

#cve #cwe-22

安全公告2026-10-29 发布HIGH

zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.

CVE-2026-115908

### Summary - **Verified version:** zip `9.0.0-pre3` - **Affected versions:** `7.2.0` and later - **Precondition:** The

来源摘录 · GitHub Advisory

#advisory #cwe-22 #cwe-59 #cwe-61 #rust #severity:high

安全公告2026-10-29 发布MEDIUM

Keycloak vulnerable to information disclosure through arbitrary filesystem path probing

CVE-2026-9083

### Description A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulner

来源摘录 · GitHub Advisory

#advisory #cwe-22 #maven #severity:medium

漏洞预警2026-10-29 发布LOW

Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file that ...

CVE-2026-93571

Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update req

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-22 #severity:low

漏洞预警2026-10-29 发布MEDIUM

Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an unauthenticated ...

CVE-2026-90871

Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.

来源摘录 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-10-29 发布CRITICAL

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locatio...

CVE-2026-90866

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou

来源摘录 · NVD

#cve #cwe-22 #cwe-434

漏洞预警2026-10-29 发布CRITICAL

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modi...

CVE-2026-90864

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou

来源摘录 · NVD

#cve #cwe-22 #cwe-434

漏洞预警2026-10-29 发布HIGH

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticat...

CVE-2026-84294

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 20

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-22 #severity:high

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a restricted directory.

CVE-2026-77819

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to im

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布CRITICAL

Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validate the destination path before writing...

CVE-2026-119145

Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handl

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature byp...

CVE-2026-113576

Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted direct...

CVE-2026-110244

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request to view arb...

CVE-2026-110190

IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attack

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended e...

CVE-2026-104312

IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive co

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted direct...

CVE-2026-104309

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stm_l...

CVE-2026-80069

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authen

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by ...

CVE-2026-80067

MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Sub

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布INFO

Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated administrators to read files...

CVE-2026-113692

Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and

来源摘录 · NVD

#cve #cwe-22