#cwe-23

共收录 169 条相关情报。

← 返回所有主题
漏洞预警2026-07-09 发布INFO

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippets/*filepath route handler serveSnippets in kernel/server/serve.go joins a single-decod...

CVE-2026-59832

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippets/*filepath route handler ser

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

Mockoon provides way to design and run mock APIs. Prior to 9.7.0, a FILE response whose filePath embeds request data is confined by getSafeFilePath in packages/commons-server/sr...

CVE-2026-59149

Mockoon provides way to design and run mock APIs. Prior to 9.7.0, a FILE response whose filePath embeds request data is

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

CVE-2026-59149

Mockoon provides way to design and run mock APIs. Prior to 9.7.0, a FILE response whose filePath embeds request data is

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-09 发布INFO

LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator creden...

CVE-2026-61343

LibreBooking's email template editor save action passes the submitted template name directly into the destination file p

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

LibreBooking path traversal

CVE-2026-61343

LibreBooking's email template editor save action passes the submitted template name directly into the destination file p

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This...

CVE-2026-8650

Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Tr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-08 发布INFO

Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

CVE-2026-8650

Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Tr

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when...

CVE-2026-59996

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs betwee

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-08 发布INFO

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...

CVE-2026-59995

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is u

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-08 发布INFO

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

CVE-2026-59996

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs betwee

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

CVE-2026-59995

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布HIGH

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allo...

CVE-2026-14476

A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitiz

来源摘录 · NVD

漏洞预警2026-07-07 发布INFO

Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. This issue affects MicroRealEstate: t...

CVE-2026-57871

Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attacker with administrative privileges can exploit a path trav...

CVE-2025-53829

ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attack

历史摘要 · 未重新核验 · NVD

安全公告2026-07-03 发布INFO

Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose...

CVE-2026-58522

Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-03 发布INFO

Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...

CVE-2026-57988

Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a networ

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-03 发布INFO

Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

CVE-2026-58522

Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-03 发布INFO

Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-57988

Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a networ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip` archives using the `ZipFile.extractall()` meth...

CVE-2026-8387

A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extract

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up to 0.15.3 ...

CVE-2026-44948

A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up

历史摘要 · 未重新核验 · NVD