Subscriber Arbitrary File Download in Youzify <= 1.3.7 versions.
CVE-2026-81275
Subscriber Arbitrary File Download in Youzify <= 1.3.7 versions.
#cwe-22
共收录 2626 条相关情报。
← 返回所有主题A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-servic...
CVE-2026-88790
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath o
ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, allowing authenticated users to relocate files from outside...
CVE-2026-64838
ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, al
ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check() ...
CVE-2026-64836
ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error i
proma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversal
CVE-2026-88790
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath o
ICEcoder through 8.1 Path Traversal via oldFileName Parameter
CVE-2026-64838
ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, al
ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement
CVE-2026-64836
ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error i
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This ...
CVE-2026-9166
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab L
Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller tasks lacked directory confinement checks.
CVE-2026-78085
Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 - The gallery mana
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backup_file' parameter parameter...
CVE-2026-18386
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and i
The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the (top-level include) function. Th...
CVE-2026-15019
The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and
Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could...
CVE-2026-88069
Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted ar
Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis
CVE-2026-88069
Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted ar
Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to version 0.9.0 and `py-rattler` prior to version 0.24.0 were vul...
CVE-2026-53956
Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to versio
Rattler vulnerable to package cache path traversal via conda package build string
CVE-2026-53956
Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to versio
Tanium addressed a path traversal vulnerability in Tanium Data Service.
CVE-2026-14505
Tanium addressed a path traversal vulnerability in Tanium Data Service.
Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87023
Tanium addressed a path traversal vulnerability in Comply.
Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87030
Tanium addressed a path traversal vulnerability in Comply.
OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree
### Summary The `@typespec/openapi3` emitter retains the value of a `@versioned` enum member and interpolates it into t
Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory
CVE-2026-84365
### Summary The fix released for CVE-2026-39408 does not cover every traversal sequence. `toSSG()` can still write file