#cwe-23

共收录 169 条相关情报。

漏洞预警2026-09-30 发布INFO

A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending...

CVE-2026-13224

A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read o

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23

漏洞预警2026-09-29 发布INFO

A path traversal vulnerability (CWE-22) in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 through 0.5.0 allows an attacker who controls the scan tar...

CVE-2026-102252

A path traversal vulnerability (CWE-22) in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 t

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23

漏洞预警2026-09-29 发布INFO

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbit...

CVE-2026-8066

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-28 发布INFO

A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, ...

CVE-2026-93537

A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push acce

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

安全公告2026-09-28 发布INFO

Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory

CVE-2026-93537

A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push acce

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-23

安全公告2026-09-18 发布INFO

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote...

CVE-2026-93468

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit R

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-23 #severity:high

漏洞预警2026-09-18 发布INFO

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files.

CVE-2026-93468

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit R

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-17 发布INFO

uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with ...

CVE-2026-55062

uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23 #cwe-36 #cwe-73

安全公告2026-09-17 发布INFO

uniget: Path Traversal in Hook Files - Directory Escape Vulnerability

CVE-2026-55062

uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-23 #cwe-36 #cwe-73

漏洞预警2026-09-16 发布INFO

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due ...

CVE-2026-76424

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary f

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-15 发布INFO

GitHacker is a tool that restores Git repositories from exposed .git directories. In 1.1.7 and earlier, add_head_file_tasks parses an attacker-controlled ref path from .git/HEAD...

CVE-2026-50024

GitHacker is a tool that restores Git repositories from exposed .git directories. In 1.1.7 and earlier, add_head_file_ta

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23

安全公告2026-09-11 发布INFO

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

CVE-2026-59149

## Summary A `FILE` response whose `filePath` embeds request data (e.g. `"/srv/public/{{queryParam 'name'}}"`, the docu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-22 #cwe-23 #severity:medium

漏洞预警2026-09-11 发布INFO

Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and direct...

CVE-2026-89065

Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-d

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-10 发布INFO

Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localiz...

CVE-2026-84939

Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary m

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-09 发布INFO

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mai...

CVE-2026-15913

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-08 发布INFO

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All version...

CVE-2026-67367

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged...

CVE-2026-80130

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticat...

CVE-2026-80133

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-07 发布INFO

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target...

CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative pat

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-09-03 发布INFO

Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API. User-controlled identifiers used to create, update, or delete Se...

CVE-2026-85199

Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API. User-co

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23 #cwe-206