#cwe-22

共收录 2619 条相关情报。

漏洞预警2026-10-01 发布INFO

The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a...

CVE-2026-101889

The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated admi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-01 发布INFO

The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the ...

CVE-2026-101888

The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authentic

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-01 发布INFO

Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones each student's ass...

CVE-2026-94620

Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to versio

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

安全公告2026-10-01 发布INFO

Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)

CVE-2026-94620

Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to versio

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-59

安全公告2026-10-01 发布INFO

vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted

CVE-2026-92945

## Summary `isPathAllowedForModule` decides whether a resolved path belongs to an allowlisted external module using a r

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-22 #cwe-863 #severity:medium

漏洞预警2026-10-01 发布INFO

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.

CVE-2026-95588

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-01 发布INFO

Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by ma...

CVE-2024-58388

Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-01 发布INFO

A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker prot...

CVE-2026-103754

A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-01 发布INFO

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the n8n node that fails to validate resource iden...

CVE-2026-103257

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerabi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-01 发布INFO

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in signed resume URL generation for Send-and-Wait ap...

CVE-2026-103254

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerabi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-10-01 发布INFO

n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node

CVE-2026-103257

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerabi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

安全公告2026-10-01 发布INFO

n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via Resume URL Generation

CVE-2026-103254

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerabi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

漏洞预警2026-10-01 发布INFO

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3,...

CVE-2026-78249

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, in

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-01 发布INFO

The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended d...

CVE-2025-41753

The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-01 发布INFO

A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacke...

CVE-2026-76147

A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent u

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-807 #cwe-862

漏洞预警2026-10-01 发布INFO

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/...

CVE-2026-103533

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-10-01 发布INFO

David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

CVE-2026-103533

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

漏洞预警2026-09-30 发布INFO

DB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/python_upload_api.py:42). A remote attacker can use ...

CVE-2026-51864

DB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app/src/dbgpt_app/openapi/ap

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-30 发布INFO

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py.

CVE-2026-51860

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_e

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-30 发布INFO

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:290).

CVE-2026-51859

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/co

历史摘要 · 未重新核验 · NVD

#cve #cwe-22