#cwe-22

共收录 2738 条相关情报。

漏洞预警2026-07-20 发布INFO

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped file access under a configured sandbox `basePath`, but its p...

CVE-2026-58481

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23

漏洞预警2026-07-20 发布INFO

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recursively collects files using `_collectBackupFiles()`. `_c...

CVE-2026-58414

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recu

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-59

漏洞预警2026-07-20 发布INFO

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.b...

CVE-2026-58413

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, b

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23

漏洞预警2026-07-20 发布INFO

WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the `whatsapp-bridge` HTTP...

CVE-2026-46555

WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp mes

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-306 #cwe-346

漏洞预警2026-07-20 发布INFO

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and fram...

CVE-2026-32820

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-07-20 发布INFO

WhatsApp MCP: Unauthenticated bridge API allows message sending and arbitrary file exfiltration

CVE-2026-46555

WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp mes

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-306 #cwe-346

安全公告2026-07-20 发布INFO

Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

CVE-2026-58484

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.listBackups()`

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-73

安全公告2026-07-20 发布INFO

Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory

CVE-2026-58481

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped fil

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-23

安全公告2026-07-20 发布INFO

Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

CVE-2026-58414

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recu

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-59

安全公告2026-07-20 发布INFO

EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data

CVE-2026-58413

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, b

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-23

漏洞预警2026-07-20 发布INFO

Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted `.onetoc2` table-of-contents file can cause `...

CVE-2026-46671

Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciou

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-20 发布INFO

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http <base-url> <out-dir> sub-command downloads every message from a remote ...

CVE-2026-45711

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http sub-command

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-829

安全公告2026-07-20 发布INFO

Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory

CVE-2026-46671

Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciou

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

漏洞预警2026-07-20 发布INFO

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the `subtitlesHandler` endpoint (`GET /api/media/subtitles`) accepts two user-co...

CVE-2026-54910

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the `subtitlesHandler`

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23

漏洞预警2026-07-20 发布INFO

A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory tr...

CVE-2026-12701

A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

安全公告2026-07-20 发布INFO

Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs

CVE-2026-45711

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http sub-command

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-829

安全公告2026-07-20 发布INFO

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files

CVE-2026-54910

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the `subtitlesHandler`

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-23

漏洞预警2026-07-20 发布INFO

SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OWNER roles to read files acc...

CVE-2026-63739

SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows da

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-20 发布INFO

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthentica...

CVE-2026-12898

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value be

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-19 发布INFO

A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin Fil...

CVE-2026-16219

A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManag

历史摘要 · 未重新核验 · NVD

#cve #cwe-22