#cwe-22

共收录 2701 条相关情报。

← 返回所有主题

漏洞预警2026-08-11 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.

CVE-2026-65768

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system r...

CVE-2026-48446

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Arbitrary file syst...

CVE-2026-48442

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an esca

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys issued to tenants a...

CVE-2026-73079

Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-441

漏洞预警2026-08-11 发布INFO

The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org's dat...

CVE-2026-18640

The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT perm

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakness in the ensurePathIsContained function of the Local fil...

CVE-2026-72783

Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakne

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布HIGH

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool. A crafted search pattern can bypass the ba...

CVE-2026-72773

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (searc

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布MEDIUM

n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations that allows authenticated users to bypass repository-...

CVE-2026-72770

n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operati

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file dele...

CVE-2026-72604

A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete ar

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem ...

CVE-2026-72602

A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validation of an input parameter. A local user...

CVE-2026-33922

A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to in

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attac...

CVE-2026-66777

SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. D

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-11 发布INFO

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Expl...

CVE-2026-44763

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-08-10 发布INFO

Sucuri Security WordPress plugin through version 2.7.3 contains a path traversal vulnerability in...

CVE-2026-73033

Sucuri Security WordPress plugin through version 2.7.3 contains a path traversal vulnerability in the pageIntegritySubmi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-08-10 发布INFO

unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the...

CVE-2026-73030

unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory func

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

安全公告2026-08-10 发布INFO

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in...

CVE-2026-69112

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_chec

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

安全公告2026-08-10 发布INFO

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive contai

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

漏洞预警2026-08-10 发布INFO

Sucuri Security WordPress plugin through version 2.7.3 contains a path traversal vulnerability in the pageIntegritySubmission() method in src/integrity.lib.php that allows authe...

CVE-2026-73033

Sucuri Security WordPress plugin through version 2.7.3 contains a path traversal vulnerability in the pageIntegritySubmi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-10 发布INFO

unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, all...

CVE-2026-73030

unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory func

历史摘要 · 未重新核验 · NVD

#cve #cwe-22