#cwe-22

共收录 2701 条相关情报。

漏洞预警2026-08-10 发布INFO

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.235, a malicious SFTP server can return a backslash traversal filename through entry.name. In ...

CVE-2026-72903

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.235, a malicious SFTP server can retu

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-10 发布INFO

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weigh...

CVE-2026-69112

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_chec

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-10 发布INFO

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated admi...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive contai

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-10 发布INFO

Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19.1 and all 1.x versions contain an unauthenticated path t...

CVE-2026-47754

Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-862

漏洞预警2026-08-10 发布INFO

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.

CVE-2026-15059

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traver

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

漏洞预警2026-08-10 发布INFO

A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to read and download arbitrary files from the server. The lib/xapi.js fil...

CVE-2026-72572

A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to read and down

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-10 发布INFO

A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handle...

CVE-2026-72571

A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an unauthenticated remote attacker t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-10 发布INFO

A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directo...

CVE-2026-72569

A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to d

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-10 发布INFO

An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arbitrary files with ...

CVE-2026-72567

An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated rem

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-10 发布INFO

GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames opti...

CVE-2026-66484

GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar arch

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-08-10 发布INFO

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs...

CVE-2026-19370

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSyn

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

安全公告2026-08-10 发布INFO

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected...

CVE-2026-19372

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

安全公告2026-08-10 发布INFO

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function...

CVE-2026-19371

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the fil

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

漏洞预警2026-08-09 发布INFO

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts ...

CVE-2026-19372

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-09 发布MEDIUM

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image....

CVE-2026-19371

CVE-2026-19371 被识别于 Nikolaibibo 开发的 claude-comfyui-mcp 组件 1.0.0 版本中。该组件用于将 Claude 与 ComfyUI 工作流集成，其中涉及图片上传功能。漏洞位于 src/to

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-09 发布INFO

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component g...

CVE-2026-19370

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSyn

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-08-09 发布INFO

A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an...

CVE-2026-19365

A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the fil

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

安全公告2026-08-09 发布INFO

A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of...

CVE-2026-19366

A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/inse

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:low

安全公告2026-08-09 发布INFO

A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some unknown...

CVE-2026-19368

A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some unknown functionality of the fil

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:medium

漏洞预警2026-08-09 发布LOW

A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some unknown functionality of the file src/handlers/unified-gemini.ts of the component gemini_...

CVE-2026-19368

CVE-2026-19368 是影响 PV-Bhat gemsuite-mcp 1.0.0 的一个路径遍历漏洞。该漏洞位于项目的 src/handlers/unified-gemini.ts 文件中，涉及 gemini_search、gem

历史摘要 · 未重新核验 · NVD

#cve #cwe-22