#cwe-22

共收录 2700 条相关情报。

漏洞预警2026-08-22 发布INFO

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers c...

CVE-2026-62384

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-22 发布INFO

nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attackers can p...

CVE-2026-62383

nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-22 发布INFO

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the corpus root with crubadan_code, the column-0 value read fr...

CVE-2026-71514

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the c

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-22 发布INFO

SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed direc...

CVE-2026-60084

SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoin

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-21 发布LOW

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM (`internal/cluster/raft/fsm.go:applyRegisterFile`) accepts att...

CVE-2026-48105

CVE-2026-48105 影响 Arc Enterprise（Arc 是一个开源的、SQL 原生时序数据库，用于遥测数据）。在版本 26.06.1 之前，Arc Enterprise 的 Raft 状态机（FSM）在 `internal

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-345 #cwe-913

漏洞预警2026-08-21 发布HIGH

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read...

CVE-2026-47735

CVE-2026-47735 是 Arc 时间序列数据库中一个严重的输入验证绕过漏洞。Arc 允许用户执行 SQL 查询，但其验证机制存在缺陷：仅使用简单的正则表达式黑名单阻止了 `read_parquet(` 和 `arc_partiti

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200 #cwe-918

漏洞预警2026-08-21 发布INFO

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 until 0.45.0, Atlantis does not consistently validate user-...

CVE-2026-64679

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 un

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-08-21 发布INFO

Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.0.4, Terragrunt trusts paths decoded from a ...

CVE-2026-45099

Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-21 发布INFO

Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirecto...

CVE-2026-44517

Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/typ

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-08-21 发布INFO

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation

CVE-2026-64679

### Summary Atlantis versions `>= 0.19.8` and `< 0.45.0` did not consistently validate user-controlled `workspace` value

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-22 #cwe-73 #severity:high

安全公告2026-08-21 发布INFO

In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from...

CVE-2026-49114

In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_da

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

漏洞预警2026-08-21 发布INFO

Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, the readFile, pathExists, isDir, and matchPaths template functions in in...

CVE-2026-71493

Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, the readFile, p

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

漏洞预警2026-08-21 发布INFO

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle wi...

CVE-2026-62677

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authe

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-21 发布INFO

In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writing without 'O_NOF...

CVE-2026-49114

In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_da

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59 #cwe-367

安全公告2026-08-21 发布INFO

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent...

CVE-2026-77814

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.starts

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-08-21 发布INFO

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery...

CVE-2026-76611

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

漏洞预警2026-08-21 发布INFO

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator. A ...

CVE-2026-77814

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.starts

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-21 发布INFO

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66.

CVE-2026-76611

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-21 发布INFO

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-based pa...

CVE-2026-75115

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Files

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-21 发布INFO

The filestore backend in pkg/object/file.go, used for file:// stores and as a common juicefs sync destination, derived every operation's target from path(key), which returned ei...

CVE-2026-77763

The filestore backend in pkg/object/file.go, used for file:// stores and as a common juicefs sync destination, derived e

历史摘要 · 未重新核验 · NVD

#cve #cwe-22