#cwe-22
共收录 2626 条相关情报。
← 返回所有主题 漏洞预警2026-09-19 发布INFO
CVE-2026-93986
rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allow
历史摘要 · 未重新核验 · NVD
安全公告2026-09-19 发布INFO
CVE-2026-93986
rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allow
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-18 发布INFO
CVE-2026-84086
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-18 发布INFO
CVE-2026-82896
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-18 发布INFO
CVE-2026-85272
Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-84086
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-82896
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2017-20284
Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthen
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-63445
Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoint
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-62278
LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authen
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-63445
### Impact
When Perses is using the file system database, on the list endpoints, the project value is bound from the re
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-18 发布INFO
CVE-2026-63445
Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoint
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-18 发布INFO
CVE-2026-62278
LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authen
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-18 发布INFO
CVE-2025-14753
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-40536
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-40535
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synolo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-21822
HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handl
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-16777
The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin for WordPress is vulnerable to
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-14323
The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-70200
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize
历史摘要 · 未重新核验 · GitHub Advisory