#cwe-22

共收录 2701 条相关情报。

漏洞预警2026-08-18 发布INFO

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-scheduled-backup IPC handler in src/ipc/storage.js takes se...

CVE-2026-52875

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-sc

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-08-18 发布INFO

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.5.0, the downloadSubtitleFile utility in src/ipc/downloads.js, reached throu...

CVE-2026-52872

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.5.0, the downloadSu

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-08-18 发布INFO

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename par...

CVE-2026-50186

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and Windows Presentation Foundation applications. Prior to version 148.0.90, CefSharp/Schem...

CVE-2026-48796

CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and Windows Presentation Foundatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make i...

CVE-2026-47699

Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

安全公告2026-08-18 发布INFO

linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

CVE-2026-73974

## Summary Every Linuxfabrik check plugin that supports the shared `--test` argument (routed through `lib.lftest.test()`

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #cwe-269 #severity:medium

安全公告2026-08-18 发布INFO

moby/go-archive: Crafted tar archive can write outside the extraction directory

CVE-2026-17106

### Summary The tar extraction routines in `moby/go-archive` (`Unpack`, `UnpackLayer`, `Untar`/`UntarUncompressed`, and

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-22 #cwe-59 #severity:high

漏洞预警2026-08-18 发布INFO

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy stateless terminal command execution path in custom_components/...

CVE-2026-53457

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy statel

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-08-18 发布INFO

MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

CVE-2026-55224

## Path Traversal via Unsanitized Identifier in Plugin Install/Uninstall ### Summary The app-store plugin service conca

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-22 #severity:high

漏洞预警2026-08-18 发布INFO

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service.

CVE-2026-47627

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A succes

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped ...

CVE-2026-74044

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause denial of service by enrolling an agent with a dot-sequen...

CVE-2026-74038

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

MobSF is a mobile application security testing tool used. Prior to 4.5.1, find_icon_path_zip in mobsf/StaticAnalyzer/views/android/icon_analysis.py uses the Android manifest and...

CVE-2026-68922

MobSF is a mobile application security testing tool used. Prior to 4.5.1, find_icon_path_zip in mobsf/StaticAnalyzer/vie

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonicalize symlinks before reading files. Attackers can create ...

CVE-2026-75914

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool that fails to canonica

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malic...

CVE-2026-75859

CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct paths under ~/.trivy/plugins without confining plugin names ...

CVE-2026-63328

Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct pat

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions.

CVE-2026-73383

Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.

CVE-2026-73181

Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-18 发布INFO

SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryInfo) trusts file and directory names ...

CVE-2026-48798

SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, Dire

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73

漏洞预警2026-08-18 发布INFO

DataEase is an open source data visualization and analysis tool. Versions prior to 2.10.23 have a path traversal vulnerability. The root cause is that on Windows, the `FILE_SEPA...

CVE-2026-45532

DataEase is an open source data visualization and analysis tool. Versions prior to 2.10.23 have a path traversal vulnera

历史摘要 · 未重新核验 · NVD

#cve #cwe-22