#cwe-22

共收录 2656 条相关情报。

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of th...

CVE-2026-82954

A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-31 发布INFO

pnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm accepts a scoped path traversal in a tarball dependency's package.json manifest name because pnpm11/resolving/npm-r...

CVE-2026-82393

pnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm accepts a scoped path traversal in a tarball dependency's

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73 #cwe-94

安全公告2026-08-31 发布INFO

Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling

CVE-2026-75594

### TL;DR This vulnerability affects all Kirby sites that are deployed to a server that allows requests for URLs with e

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-22 #severity:high

漏洞预警2026-08-31 发布INFO

pnpm is a package manager. Prior to 10.34.5 and from 11.0.0 until 11.11.0, pnpm parses the package name from attacker-controlled pnpm-lock.yaml packages keys with dp.parse(depPa...

CVE-2026-82392

pnpm is a package manager. Prior to 10.34.5 and from 11.0.0 until 11.11.0, pnpm parses the package name from attacker-co

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-31 发布INFO

A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE_NAME value used by set_file_name() and load_meta_dat...

CVE-2026-79407

A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-31 发布INFO

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms/Media.php allowed Kirby\Cms\Media::t...

CVE-2026-75594

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's medi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-31 发布INFO

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem containment checks i...

CVE-2026-75592

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's medi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-31 发布INFO

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo() without validating en...

CVE-2026-61639

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restor

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-31 发布INFO

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/f...

CVE-2026-53553

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

安全公告2026-08-31 发布INFO

Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

CVE-2026-53553

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability ex

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-22

漏洞预警2026-08-31 发布INFO

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version...

CVE-2026-79743

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate end

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-08-31 发布INFO

MCPHub: Path Traversal via Malicious MCPB Manifest Name

CVE-2026-79743

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate end

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

漏洞预警2026-08-31 发布INFO

In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent, suggestFileContent, and the replacement and state helpe...

CVE-2026-82217

In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-31 发布INFO

Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote attacker to read files from the web application, including files under WEB-INF t...

CVE-2026-70449

Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote attacker to read files

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-31 发布INFO

ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to r...

CVE-2026-82877

ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-08-31 发布INFO

ILIAS before 9.22 Arbitrary File Read via SOAP addFile

CVE-2026-82877

ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the function unlink of the file app/Http/Controllers/Admin/ImageLibraryController.php ...

CVE-2026-82665

A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the function unlink of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-08-31 发布INFO

A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of...

CVE-2026-82603

A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?ac

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

安全公告2026-08-31 发布INFO

A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the...

CVE-2026-82599

A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function unlink of the file /

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

漏洞预警2026-08-31 发布INFO

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allows writing attacker-controlled bytes to arbitrary paths o...

CVE-2026-82673

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-22