#cwe-22

共收录 2626 条相关情报。

← 返回所有主题
漏洞预警2026-09-19 发布INFO

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers c...

CVE-2026-93986

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allow

历史摘要 · 未重新核验 · NVD

安全公告2026-09-19 发布INFO

rclone before 1.75.1 Path Traversal via Directory Listing Names

CVE-2026-93986

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allow

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...

CVE-2026-84086

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse...

CVE-2026-82896

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/lib/extract_archive.py uses _is_bad_pa...

CVE-2026-85272

Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.

CVE-2026-84086

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability.

CVE-2026-82896

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthenticated attackers to read arbitrary files by supplying a ...

CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-con...

CVE-2026-63445

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoint

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authenticated non-administrative users could reach HandleTransl...

CVE-2026-62278

LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authen

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

Perses's unvalidated project parameter enables filesystem path traversal

CVE-2026-63445

### Impact When Perses is using the file system database, on the list endpoints, the project value is bound from the re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Perses: Unvalidated project parameter enables filesystem path traversal

CVE-2026-63445

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoint

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

LubeLogger: Path Traversal in HandleTranslationFileUpload Allows Authenticated Users to Write Files Outside Data Directory

CVE-2026-62278

LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authen

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" seq...

CVE-2025-14753

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-7...

CVE-2026-40536

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2...

CVE-2026-40535

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synolo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to rea...

CVE-2026-21822

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including...

CVE-2026-16777

The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin for WordPress is vulnerable to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.8.5 via the 'mockup...

CVE-2026-14323

The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic...

CVE-2026-70200

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize

历史摘要 · 未重新核验 · GitHub Advisory