#cwe-26

共收录 7 条相关情报。

← 返回所有主题
漏洞预警2026-10-23 发布HIGH

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functio...

CVE-2026-112904

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.

来源摘录 · NVD

漏洞预警2026-10-02 发布INFO

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parse_request function...

CVE-2026-15896

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up

历史摘要 · 未重新核验 · NVD

安全公告2026-10-02 发布INFO

Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter

CVE-2026-15896

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-19 发布INFO

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could move files that the user account runni...

CVE-2026-76317

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET /api/sftp/uploadF...

CVE-2026-46747

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker c...

CVE-2026-42196

django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerabl

历史摘要 · 未重新核验 · NVD

安全公告2026-05-05 发布INFO

django-s3file is vulnerable to relative path traversal

CVE-2026-42196

### Impact `S3FileMiddleware` is vulnerable to relative path traversal attacks, where an attacker can use a modified req

历史摘要 · 未重新核验 · GitHub Advisory