共收录 2619 条相关情报。
← 返回所有主题CVE-2026-51853
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__
CVE-2026-51568
modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.
CVE-2026-102123
A Kiteworks appliance setup interface did not confine a user-supplied file path to its intended directory, which could a
CVE-2026-102119
A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to m
CVE-2026-102116
-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside
CVE-2026-102099
Kiteworks Core before version 9.5.0 is vulnerable to Arbitrary File Write. An improper restriction of a user-supplied fi
CVE-2026-102097
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protecti
CVE-2026-102089
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative
CVE-2024-58387
Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint th
CVE-2023-54403
Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows u
CVE-2026-101295
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs
CVE-2026-102843
A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th
CVE-2026-102843
A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th
CVE-2026-86105
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privil
CVE-2026-86136
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authe
CVE-2026-13224
A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read o
CVE-2026-86136
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authe
CVE-2026-86105
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privil
CVE-2026-13224
A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read o
CVE-2026-101894
### Impact When extracting an untrusted archive with the default `decompress(input, output)` API, a crafted archive con