Cyber Security Daily Radar

#cwe-22

共收录 2626 条相关情报。

← 返回所有主题
漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false acce...

CVE-2026-77246

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an

历史摘要 · 未重新核验 · NVD

#cve#cwe-22#cwe-200#cwe-441
漏洞预警2026-09-22 发布INFO

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An at...

CVE-2026-34689

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabi

历史摘要 · 未重新核验 · NVD

#cve#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

CVE-2026-77246

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-200#cwe-22#cwe-441
安全公告2026-09-22 发布INFO

MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport

CVE-2026-77248

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22#cwe-306
安全公告2026-09-22 发布INFO

MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

CVE-2026-77259

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22#cwe-552
安全公告2026-09-22 发布INFO

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)

CVE-2026-77269

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call

CVE-2026-77266

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, up

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

CVE-2026-77255

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22#cwe-441
漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd...

CVE-2026-77271

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, va

历史摘要 · 未重新核验 · NVD

#cve#cwe-22#cwe-94
漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira and Confluence attachment upload tools treat calle...

CVE-2026-77270

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · NVD

#cve#cwe-22
漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations a...

CVE-2026-77260

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · NVD

#cve#cwe-22
漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachmen...

CVE-2026-77258

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, up

历史摘要 · 未重新核验 · NVD

#cve#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of CVE-2026-27825)

CVE-2026-77262

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files

CVE-2026-77253

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths

CVE-2026-77257

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HT

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)

CVE-2026-77260

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of CVE-2026-27825)

CVE-2026-77271

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, va

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22#cwe-94
安全公告2026-09-22 发布INFO

MCP Atlassian: Arbitrary File Read via Upload Attachment Tools

CVE-2026-77270

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()

CVE-2026-77258

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, up

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
漏洞预警2026-09-22 发布INFO

Lantronix SLC8000 before firmware v9.7.0.5, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability ...

CVE-2026-80156

Lantronix SLC8000 before firmware v9.7.0.5, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB88

历史摘要 · 未重新核验 · NVD

#cve#cwe-22