#cwe-426

共收录 101 条相关情报。

← 返回所有主题
漏洞预警2026-07-14 发布INFO

Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir...

CVE-2026-48346

Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the conte

历史摘要 · 未重新核验 · NVD

安全公告2026-07-13 发布INFO

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue...

CVE-2026-15515

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown process

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-13 发布INFO

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk...

CVE-2026-15515

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown process

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up the directory hierarchy from the current directory for a pr...

CVE-2026-49145

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up th

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc

CVE-2026-49145

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up th

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-06 发布INFO

Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.

CVE-2026-6901

Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants GENERIC_READ and GENERIC_WRITE permissions...

CVE-2026-57919

PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DA

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege escalation vulnerability in the installer. During installati...

CVE-2026-46710

Notepad++ is a free and open-source source code editor. From 8.9.4 until 8.9.6, Notepad++ contains a local privilege esc

历史摘要 · 未重新核验 · NVD

安全公告2026-06-18 发布INFO

OpenClaw: Workspace-derived service PATH could influence trash command selection

CVE-2026-53865

### Summary Workspace-derived service PATH could influence trash command selection. In affected versions, a workspace-d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-18 发布INFO

OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots

CVE-2026-53858

### Summary Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots. In affected versions, a wo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-18 发布INFO

OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install

CVE-2026-53846

### Summary Workspace .env npm_execpath could influence bundled runtime dependency install. In affected versions, a wor

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-16 发布INFO

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution...

CVE-2026-53865

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-der

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-16 发布INFO

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace...

CVE-2026-53858

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-16 发布INFO

OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that...

CVE-2026-53846

OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-16 发布INFO

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing...

CVE-2026-53842

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influ

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-16 发布INFO

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-derived service paths to influence trash command selection. ...

CVE-2026-53865

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-der

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots. Attacker...

CVE-2026-53858

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files to override the npm_execpath configuration used for bund...

CVE-2026-53846

OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influence Python runtime selection through CLOUDSDK_PYTHON dur...

CVE-2026-53842

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child ...

CVE-2026-54055

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability ex

历史摘要 · 未重新核验 · NVD