共收录 2701 条相关情报。
← 返回所有主题CVE-2026-64966
ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor priv
CVE-2026-64963
A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when
CVE-2026-77068
n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-s
CVE-2026-76832
Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to re
CVE-2026-76369
In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Auto
CVE-2026-76357
In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the
CVE-2026-76359
In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal F
CVE-2026-76358
In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation
CVE-2026-76832
Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to re
CVE-2026-76369
In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Auto
CVE-2026-76359
In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal F
CVE-2026-76358
In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation
CVE-2026-76357
In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the
CVE-2026-76337
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could read JavaScript fi
CVE-2026-76576
A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownloa
CVE-2026-18849
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker w
CVE-2026-63188
### Summary `@logto/tunnel` serves custom sign-in experience files from the `--experience-path` directory. When the tun
CVE-2026-75593
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. P
CVE-2026-63188
Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 0.3.9, the Logto Tunnel npm package
CVE-2026-16888
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a pat