#cwe-22

共收录 2626 条相关情报。

← 返回所有主题

漏洞预警2026-09-21 发布INFO

NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 ...

CVE-2026-61647

NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-09-21 发布INFO

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, the GET /api/transcribe/:id and POST /api/transcribe/:i...

CVE-2026-59816

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-21 发布INFO

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, Joplin accepts synchronized resource metadat...

CVE-2026-49453

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-22

漏洞预警2026-09-21 发布INFO

web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file()/write_file() (applications/admin/controllers/webservice...

CVE-2026-79318

web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file(

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-21 发布HIGH

A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient...

CVE-2026-15801

A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-09-21 发布MEDIUM

nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the requested name onto that directory and r...

CVE-2026-94185

nvm 通过把请求的版本号或别名当作 $NVM_DIR/alias 目录下的文件名来解析。在 0.40.8 之前，nvm_alias() 只是把请求的名称直接拼接到该目录路径后读取文件，完全没有做“结果必须仍位于 alias 目录内”的包含

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

安全公告2026-09-20 发布INFO

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides...

CVE-2026-94049

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides of the file packages/cli

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

安全公告2026-09-20 发布INFO

A vulnerability was identified in 03-lovepreetSingh MCP up to...

CVE-2026-94044

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affec

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

安全公告2026-09-20 发布INFO

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is...

CVE-2026-94046

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_sni

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

漏洞预警2026-09-20 发布INFO

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlP...

CVE-2026-94049

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides of the file packages/cli

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-20 发布INFO

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_snippet of the file getFileSnippet.ts of the component MCP T...

CVE-2026-94046

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_sni

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-20 发布INFO

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function create_file of the file app/api/mcp/route...

CVE-2026-94044

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affec

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-09-20 发布INFO

0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal

CVE-2026-94046

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_sni

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

安全公告2026-09-20 发布INFO

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to...

CVE-2026-94037

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affe

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

漏洞预警2026-09-20 发布INFO

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of t...

CVE-2026-94037

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affe

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-09-20 发布INFO

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that...

CVE-2026-93992

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-09-20 发布INFO

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin...

CVE-2026-93988

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

漏洞预警2026-09-19 发布HIGH

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attack...

CVE-2026-93992

CVE-2026-93992 是披露于 Gopeed 下载器（版本至 2.0.0-beta.3，含该 beta 版本）中的一个路径穿越（目录穿越）漏洞，问题出在其归档文件解压（archive extraction）逻辑上。Gopeed 是一

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-19 发布INFO

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. A...

CVE-2026-93988

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows a

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-09-19 发布INFO

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the...

CVE-2026-93986

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allow

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low