exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths. Attackers can supply arbitrary file ...

CVE-2026-78208

CVE-2026-78208 是 npm 包 exceljs-hardened 中存在的路径遍历漏洞，影响 5.0.0 之前的所有版本。该漏洞位于 Workbook.addImage() 函数中，该函数在处理图片文件路径时未进行充分的校验，

历史摘要 · 未重新核验 · NVD

NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root ...

CVE-2026-62385

NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that all

历史摘要 · 未重新核验 · NVD

Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network w...

CVE-2026-49360

Recce 是一个用于增强 dbt（数据构建工具）代码审查的数据验证工具。在版本 1.50.0 之前，如果 OSS 服务器部署将 recce server 暴露给不受信任的网络且未启用认证，攻击者可通过查询运行 API 执行未经认证的 SQ

历史摘要 · 未重新核验 · NVD

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 until 0.45.0, Atlantis does not consistently validate user-...

CVE-2026-64679

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 un

历史摘要 · 未重新核验 · NVD

Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation

CVE-2026-64679

### Summary Atlantis versions `>= 0.19.8` and `< 0.45.0` did not consistently validate user-controlled `workspace` value

历史摘要 · 未重新核验 · GitHub Advisory

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse re...

CVE-2026-54134

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custo

历史摘要 · 未重新核验 · NVD

Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a `metadata.yaml` symlink pointing to an arbitrary host path allows...

CVE-2026-63343

Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a `metadat

历史摘要 · 未重新核验 · NVD

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary...

CVE-2026-48753

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vuln

历史摘要 · 未重新核验 · NVD

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files...

CVE-2026-48752

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance b

历史摘要 · 未重新核验 · NVD

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/instances/$name/exec` endpoint stores the output of the c...

CVE-2026-48750

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/

历史摘要 · 未重新核验 · NVD

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possi...

CVE-2026-48749

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used t

历史摘要 · 未重新核验 · NVD

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrar...

CVE-2026-76158

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v

历史摘要 · 未重新核验 · NVD

NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

## Executive Summary Two vulnerabilities were identified and chained to achieve authenticated remote code execution Th

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient valid...

CVE-2026-77176

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection,

来源摘录 · NVD

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input.

CVE-2026-16926

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper

历史摘要 · 未重新核验 · NVD

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command hi...

CVE-2025-36398

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authe

历史摘要 · 未重新核验 · NVD

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

### Summary `claude-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.

历史摘要 · 未重新核验 · GitHub Advisory

faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

### Summary `faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.resolve

历史摘要 · 未重新核验 · GitHub Advisory

grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools

### Summary Several `grok-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion +

历史摘要 · 未重新核验 · GitHub Advisory

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 and 5.0.0-beta3, the non-merged branch of process_files_fro...

CVE-2026-49441

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 an

历史摘要 · 未重新核验 · NVD