#cwe-24

共收录 24 条相关情报。

← 返回所有主题
漏洞预警2026-05-27 发布INFO

Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. This occurs in mailboxes/detachall.cgi.

CVE-2026-49103

Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. Thi

历史摘要 · 未重新核验 · NVD

安全公告2026-05-26 发布INFO

XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin

CVE-2026-48047

### Impact A potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar extension in

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the i...

CVE-2026-22810

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

@joplin/onenote-converter: Path traversal in OneNote importer allows overwriting arbitrary files

CVE-2026-22810

### Summary A path traversal vulnerability in the OneNote importer allows overwriting arbitrary files on disk. ### Deta

历史摘要 · 未重新核验 · GitHub Advisory