#cwe-22

共收录 2656 条相关情报。

漏洞预警2026-09-02 发布INFO

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by defa...

CVE-2026-52832

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard e

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-09-02 发布INFO

DSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability)

CVE-2026-49831

DSpace open source software is a repository application which provides durable access to digital resources. Prior to ver

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

安全公告2026-09-02 发布INFO

Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

CVE-2026-52832

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard e

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

漏洞预警2026-09-02 发布INFO

Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, whi...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-02 发布INFO

A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on jobs that publish Allure report results to read arbitrar...

CVE-2026-84669

A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-02 发布INFO

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an...

CVE-2026-84667

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data bi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-02 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Elastic Maps Server can lead to information disclosure via Path Traversal (CAPEC-126)....

CVE-2026-78602

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Elastic Maps Server can lead

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-02 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthorized deletion of internal resources v...

CVE-2026-78599

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-02 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthorized deletion of resources via Path T...

CVE-2026-78591

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-02 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthorized deletion of privileged resources...

CVE-2026-78590

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-02 发布INFO

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is retur...

CVE-2026-18672

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEdit

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-02 发布INFO

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_submission_files fun...

CVE-2026-78657

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficien

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-09-02 发布INFO

A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This...

CVE-2026-84442

A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This vulnerability affects the functio