#cwe-22

共收录 2626 条相关情报。

← 返回所有主题

安全公告2026-09-11 发布INFO

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

CVE-2026-59149

## Summary A `FILE` response whose `filePath` embeds request data (e.g. `"/srv/public/{{queryParam 'name'}}"`, the docu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-22 #cwe-23 #severity:medium

漏洞预警2026-09-11 发布INFO

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once ...

CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

漏洞预警2026-09-11 发布INFO

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user app...

CVE-2026-87984

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or over

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-11 发布INFO

An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted...

CVE-2026-87983

An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspac

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-11 发布INFO

a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product.

CVE-2026-87727

a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-11 发布INFO

The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via the upload_file_remove() AJAX handler. The plugin stores t...

CVE-2026-19991

The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-09-11 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause...

CVE-2026-82100

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:critical

安全公告2026-09-11 发布INFO

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress...

CVE-2026-77807

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-09-11 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to...

CVE-2026-86087

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted r

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

安全公告2026-09-11 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute...

CVE-2026-84889

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-09-11 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create...

CVE-2026-80424

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:critical

安全公告2026-09-11 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain...

CVE-2026-81554

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-09-11 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...

CVE-2026-81551

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write to or delet

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-09-11 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...

CVE-2026-81540

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belon

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

漏洞预警2026-09-11 发布INFO

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, a...

CVE-2026-77807

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-09-10 发布INFO

rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

CVE-2026-88014

### Summary `backend/archive` mounts a zip file as a browsable, syncable rclone `Fs` (e.g. `rclone lsf :zip:downloaded.z

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-22 #severity:medium

安全公告2026-09-10 发布INFO

rclone: source object names can escape the configured root on upload

CVE-2026-88046

### Summary Multiple backends, when given a specially crafted object to copy, can escape the backend confinement. | Ba

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-22 #severity:medium

漏洞预警2026-09-10 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system.

CVE-2026-86087

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted r

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.

CVE-2026-84889

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

CVE-2026-82100

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due

历史摘要 · 未重新核验 · NVD

#cve #cwe-22