#cwe-22

共收录 2701 条相关情报。

漏洞预警2026-08-01 发布INFO

The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in versions up to, and including, 9.2.3. This is du...

CVE-2026-15450

The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path trav

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-08-01 发布INFO

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation...

CVE-2026-15006

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vuln

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-22 #severity:high

漏洞预警2026-08-01 发布HIGH

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and ...

CVE-2026-15006

CVE-2026-15006 是 WordPress 插件“Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation”中的

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-31 发布MEDIUM

gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read an...

CVE-2026-54785

CVE-2026-54785 影响 gemini-bridge 这款轻量级 MCP（Model Context Protocol）服务器，其作用是通过官方 CLI 将 AI 代理连接到 Google 的 Gemini AI 服务。在版本 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

安全公告2026-07-31 发布INFO

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files

CVE-2026-54910

### Summary The `subtitlesHandler` endpoint (`GET /api/media/subtitles`) accepts two user-controlled query parameters:

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-22 #cwe-23 #severity:high

安全公告2026-07-31 发布INFO

guard-livereload has a directory traversal vulnerability

CVE-2016-1000305

The vulnerability allows remote attackers to read arbitrary files on the server by exploiting improper path validation i

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rubygems #cwe-22 #severity:medium

安全公告2026-07-31 发布INFO

gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

CVE-2026-54785

### Summary `consult_gemini_with_files` in **inline mode** read any file path supplied in the `files` argument without c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #cwe-200 #severity:medium

漏洞预警2026-07-31 发布INFO

Copier is a library and CLI app for rendering project templates. From 9.5.0 through 9.16.0, percent-encoded parent-directory segments or encoded path separators in a template UR...

CVE-2026-62999

Copier is a library and CLI app for rendering project templates. From 9.5.0 through 9.16.0, percent-encoded parent-direc

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-180

漏洞预警2026-07-31 发布INFO

Contao is an Open Source CMS. In versions 5.7.0 through 5.7.6, an authenticated backend user who can access one job can request an attachment identifier containing ../ segments ...

CVE-2026-55825

Contao is an Open Source CMS. In versions 5.7.0 through 5.7.6, an authenticated backend user who can access one job can

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-31 发布INFO

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path segments after its root-boundary validation, allowing tr...

CVE-2026-53502

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-07-31 发布INFO

Thumbor has path traversal via post-validation URL decoding bypass in file_loader

CVE-2026-53502

The file_loader performs `unquote()` on the file path AFTER the `abspath() + startswith()` security check. An attacker c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #severity:high

安全公告2026-07-31 发布INFO

Thumbor has path traversal via post-validation URL decoding bypass in file_loader

CVE-2026-53502

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

安全公告2026-07-31 发布INFO

Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)

CVE-2026-12072

### Summary A path-traversal vulnerability in `NKJPCorpusReader` allows an attacker who can influence the `fileids

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #severity:high

安全公告2026-07-31 发布INFO

Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)

CVE-2026-12074

### Summary `FramenetCorpusReader.frame(name)` interpolates a caller-supplied frame name into an XML file path that is r

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #severity:high

漏洞预警2026-07-31 发布INFO

The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.l...

CVE-2026-62391

The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-27

漏洞预警2026-07-31 发布INFO

Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker with permission to rename a note, or access to folder opera...

CVE-2026-44615

Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker wi

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-07-31 发布INFO

Path traversal in NotebookRepo note and folder path composition

CVE-2026-44615

Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker wi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

漏洞预警2026-07-31 发布INFO

CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move() without a second argument uses the client-provided filename without sanitization, all...

CVE-2026-63222

CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move() without a second argument us

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-31 发布INFO

ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_paths.get_annotated_filepath and exists_annotated_filepath jo...

CVE-2026-56673

ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_path

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-31 发布INFO

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_preview in app/model_manager.py joins an unrestricted filename...

CVE-2026-56671

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_previ

历史摘要 · 未重新核验 · NVD

#cve #cwe-22