#cwe-426
共收录 101 条相关情报。
← 返回所有主题 漏洞预警2026-07-14 发布INFO
CVE-2026-48346
Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the conte
历史摘要 · 未重新核验 · NVD
安全公告2026-07-13 发布INFO
CVE-2026-15515
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown process
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-13 发布INFO
CVE-2026-15515
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown process
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-08 发布INFO
CVE-2026-49145
App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc.
ack searches up th
历史摘要 · 未重新核验 · NVD
安全公告2026-07-08 发布INFO
CVE-2026-49145
App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc.
ack searches up th
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-07-06 发布INFO
CVE-2026-6901
Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL.
This issue affects APROL: before R 4.4-01P
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-29 发布INFO
CVE-2026-57919
PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DA
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-26 发布INFO
CVE-2026-46710
Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege esc
历史摘要 · 未重新核验 · NVD
安全公告2026-06-18 发布INFO
CVE-2026-53865
### Summary
Workspace-derived service PATH could influence trash command selection. In affected versions, a workspace-d
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-18 发布INFO
CVE-2026-53858
### Summary
Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots. In affected versions, a wo
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-18 发布INFO
CVE-2026-53846
### Summary
Workspace .env npm_execpath could influence bundled runtime dependency install. In affected versions, a wor
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-16 发布INFO
CVE-2026-53865
OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-der
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-16 发布INFO
CVE-2026-53858
OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY c
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-16 发布INFO
CVE-2026-53846
OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-16 发布INFO
CVE-2026-53842
OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influ
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-16 发布INFO
CVE-2026-53865
OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-der
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-16 发布INFO
CVE-2026-53858
OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-16 发布INFO
CVE-2026-53846
OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-16 发布INFO
CVE-2026-53842
OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influ
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-12 发布INFO
CVE-2026-54055
Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability ex
历史摘要 · 未重新核验 · NVD