A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin Fil...

CVE-2026-16219

A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManag

历史摘要 · 未重新核验 · NVD

Croogo CMS Admin File Manager FileManager.php isEditable path traversal

CVE-2026-16219

A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManag

历史摘要 · 未重新核验 · OSV.dev

SurrealDB versions before 2.2.2 contain a local file read vulnerability in the DEFINE ANALYZER statement that allows authenticated users to read arbitrary files on the file syst...

CVE-2025-71394

SurrealDB versions before 2.2.2 contain a local file read vulnerability in the DEFINE ANALYZER statement that allows aut

来源摘录 · NVD

@hapi/inert provides static file and directory handlers for hapi.js. From 4.0.0 to 7.1.0, @hapi/inert serves static files from a directory configured with path in the directory ...

CVE-2026-48049

CVE-2026-48049 是 hapi.js 生态中静态文件服务模块 @hapi/inert 的一个路径遍历漏洞，影响版本 4.0.0 至 7.1.0（不含 7.1.1 修复版本）。该模块的 directory 和 file 处理器通过

历史摘要 · 未重新核验 · NVD

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files...

CVE-2026-8859

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations

历史摘要 · 未重新核验 · GitHub Advisory

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow...

CVE-2026-7667

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacke

历史摘要 · 未重新核验 · GitHub Advisory

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files...

CVE-2026-7872

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing

历史摘要 · 未重新核验 · GitHub Advisory

PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs

Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs Repo

历史摘要 · 未重新核验 · GitHub Advisory

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest compon...

CVE-2026-8859

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations

历史摘要 · 未重新核验 · NVD

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing key and forge authentication tokens for any user.

CVE-2026-7872

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing

历史摘要 · 未重新核验 · NVD

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content...

CVE-2026-7667

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacke

历史摘要 · 未重新核验 · NVD

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but ...

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 vali

历史摘要 · 未重新核验 · NVD

Prompty: Arbitrary file read via file reference expansion

CVE-2026-53598

## Summary Prompty loaders expanded `${file:...}` references in `.prompty` frontmatter without enforcing that the resolv

历史摘要 · 未重新核验 · GitHub Advisory

mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath

CVE-2026-54561

### Impact `context_import` passed the caller-supplied `filePath` directly to `fs.readFileSync` with no path confinemen

历史摘要 · 未重新核验 · GitHub Advisory

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, Async...

CVE-2026-45309

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on to

历史摘要 · 未重新核验 · NVD

AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username

CVE-2026-45309

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on to

历史摘要 · 未重新核验 · OSV.dev

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker with code execution inside a Dependabot updater container to write files to ar...

CVE-2026-15343

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker with code execution i

来源摘录 · NVD

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.0.13 via the 'f...

CVE-2026-15457

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversa

历史摘要 · 未重新核验 · NVD

The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_tmp_name' parame...

CVE-2026-15160

The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and incl

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob...

CVE-2026-62229

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lowe

历史摘要 · 未重新核验 · GitHub Advisory