#cwe-23

共收录 169 条相关情报。

漏洞预警2026-06-04 发布MEDIUM

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.

CVE-2026-48681

CVE-2026-48681 是 OpenStack Ironic 组件中的目录遍历漏洞，影响 35.0.2 之前的所有版本。攻击者可以通过上传特制的 ISO 镜像，在裸机部署过程中触发路径遍历，导致任意文件覆盖。由于 Ironic 通常运

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-06-02 发布INFO

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_server/ser...

CVE-2026-5422

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-29 发布INFO

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system f...

CVE-2026-10074

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to explo

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-29 发布INFO

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary sys...

CVE-2026-10073

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-29 发布INFO

Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. T...

CVE-2026-8326

Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitra

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-29 发布INFO

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the ...

CVE-2025-41280

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-29 发布INFO

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unau...

CVE-2025-41271

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hos

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-29 发布INFO

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remo...

CVE-2025-41268

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

安全公告2026-05-27 发布INFO

A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path...

CVE-2026-8361

A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-23 #severity:high

漏洞预警2026-05-27 发布INFO

A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome

CVE-2026-8361

A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-26 发布INFO

Algernon is a small self-contained pure-Go web server. Prior to 1.17.8, when algernon is started with --domain (or --letsencrypt, which silently turns on --domain at engine/flag...

CVE-2026-48126

Algernon is a small self-contained pure-Go web server. Prior to 1.17.8, when algernon is started with --domain (or --let

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23 #cwe-644

安全公告2026-05-21 发布INFO

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the...

CVE-2026-8134

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTempl

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-23 #severity:critical

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An...

CVE-2026-8134

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTempl

历史摘要 · 未重新核验 · NVD

#cve #cwe-23 #cwe-98 #cwe-434

漏洞预警2026-05-21 发布INFO

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious co...

CVE-2026-34926

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker t

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-20 发布INFO

XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to read configuration files by using URLs such as http://loc...

CVE-2026-23734

XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

安全公告2026-05-19 发布INFO

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is...

CVE-2026-8073

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file del

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-23 #severity:high

漏洞预警2026-05-19 发布INFO

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation and missin...

CVE-2026-8073

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file del

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-18 发布INFO

Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal REST API by...

CVE-2026-41948

Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate reque

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-05-12 发布INFO

Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

CVE-2026-41612

Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-23

安全公告2026-05-09 发布INFO

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS...

CVE-2026-8209

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-23 #severity:medium