#cwe-22

共收录 2611 条相关情报。

← 返回所有主题
漏洞预警2026-10-22 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Lib...

CVE-2026-81163

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Imp

历史摘要 · 未重新核验 · NVD

安全公告2026-10-22 发布INFO

Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129

CVE-2026-81163

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Imp

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布LOW

A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go...

CVE-2026-114377

A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the functio

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/p...

CVE-2026-114140

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4

来源摘录 · NVD

安全公告2026-10-21 发布INFO

nbconvert: File write via path traversal in cell output filenames

CVE-2026-114140

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布MEDIUM

A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traver...

CVE-2026-85518

A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validat

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function SaveHandler/SourceHandler of the file internal/handlers/edi...

CVE-2026-114376

A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function Sa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the component Fi...

CVE-2026-114375

A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler o

历史摘要 · 未重新核验 · NVD

安全公告2026-10-21 发布INFO

leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversal

CVE-2026-114377

A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the functio

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-21 发布INFO

leomoon-studios wiki-go API editor.go SourceHandler path traversal

CVE-2026-114376

A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function Sa

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-21 发布INFO

Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix

CVE-2026-112950

## Summary The path traversal fix released for [GHSA-82fw-gwwq-j7x9](https://github.com/vitest-dev/vitest/security/advi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal

CVE-2026-114375

A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler o

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布INFO

The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package names consist ...

CVE-2026-105945

The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by usin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布MEDIUM

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installati...

CVE-2026-92205

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote a

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, the Storybook develo...

CVE-2026-114126

Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19,

历史摘要 · 未重新核验 · NVD

安全公告2026-10-21 发布INFO

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

CVE-2026-114125

**Summary:** A malicious website may be able to cause unauthorized file changes in a developer’s project while an affect

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布MEDIUM

Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImage that allows authenticated users to overwrite other user...

CVE-2026-114402

Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImag

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by supplying encoded traversal sequences to DELETE /api/v1/ba...

CVE-2026-114399

Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by s

来源摘录 · NVD

安全公告2026-10-21 发布INFO

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the...

CVE-2026-113743

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write...

CVE-2026-114109

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the script

历史摘要 · 未重新核验 · GitHub Advisory