共收录 2739 条相关情报。
← 返回所有主题CVE-2026-48310
Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'
CVE-2026-47429
Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used isFile
CVE-2026-53486
The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files an
CVE-2026-47429
Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used isFile
CVE-2026-50006
## Summary Anyquery's `server` mode does not disable or restrict native SQLite disk manipulation commands. Unauthenticat
CVE-2026-54250
#### Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files contai
CVE-2026-15700
A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of th
CVE-2026-59839
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0
CVE-2026-15392
DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The co
CVE-2026-57856
Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() meth
CVE-2026-57856
Cockpit CMS 是一个内容管理系统，其Bucket文件存储API（/system/buckets/api）存在路径遍历漏洞。漏洞位于 modules/System/Controller/Buckets.php 的 api() 方法中
CVE-2026-57856
Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() meth
CVE-2026-26396
OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/applicati
CVE-2026-49970
Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows a
CVE-2026-26396
OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/applicati
CVE-2026-61505
Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, permitting a remote unauthentica
CVE-2026-54065
## Summary Path Traversal to Arbitrary File Deletion in the Edit Comment admin function. An authenticated administrator
CVE-2026-61505
Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, permitting a remote unauthentica
CVE-2026-57815
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-O
CVE-2026-57709
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For