#cwe-22

共收录 2626 条相关情报。

漏洞预警2026-09-08 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.

CVE-2026-69445

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an au

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-08 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-62801

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthori

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-08 发布INFO

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style ...

CVE-2026-74239

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-08 发布INFO

CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.

CVE-2026-77104

CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved main

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-08 发布INFO

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index ...

CVE-2026-77091

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-08 发布INFO

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outsi...

CVE-2026-74859

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-09-08 发布INFO

knowns before 0.30.0 fails to validate import names in the import routes, allowing...

CVE-2026-86542

knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write fi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-09-08 发布INFO

knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing...

CVE-2026-86439

knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, creat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-09-08 发布INFO

knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace()...

CVE-2026-86541

knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows att

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-09-08 发布INFO

knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates...

CVE-2026-86538

knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that al

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

漏洞预警2026-09-07 发布INFO

knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write files outside the imports directory. Attackers can supply t...

CVE-2026-86542

knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-07 发布INFO

knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows attackers to overwrite arbitrary files outside the project r...

CVE-2026-86541

knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows att

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-07 发布INFO

knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that allows unauthenticated attackers to read arbitrary files. A...

CVE-2026-86538

knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that al

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-07 发布INFO

knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and delete files outside the project directo...

CVE-2026-86439

knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, creat

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-07 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows P...

CVE-2026-6377

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Tec

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Dire...

CVE-2026-80131

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Dire...

CVE-2026-80129

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-07 发布INFO

The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary ...

CVE-2026-78043

The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trust

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-09-05 发布INFO

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a...

CVE-2026-67281

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

漏洞预警2026-09-05 发布INFO

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for...

CVE-2026-67281

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-824