#cwe-73

共收录 423 条相关情报。

← 返回所有主题
漏洞预警2026-08-19 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, DistributedAPI.send_tmp_file() in framewor...

CVE-2026-48162

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. Thi...

CVE-2026-20358

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team ha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated save-waterf...

CVE-2026-53451

Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-f...

CVE-2026-76217

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

phpMyFAQ before 4.1.7 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an <...

CVE-2026-76210

phpMyFAQ before 4.1.7 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker wit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-scheduled-backup IPC handler in src/ipc/storage.js takes se...

CVE-2026-52875

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-sc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.5.0, the downloadSubtitleFile utility in src/ipc/downloads.js, reached throu...

CVE-2026-52872

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.5.0, the downloadSu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布CRITICAL

CodeWhale versions >= 0.3.27 and < 0.8.64 (published as deepseek-tui >= 0.3.27 and < 0.8.41 on npm and 0.3.27 through 0.8.41 on crates.io, and as codewhale / codewhale-tui >= 0....

CVE-2026-75913

CodeWhale versions >= 0.3.27 and = 0.3.27 and = 0.8.41 and < 0.8.64) contain an argument injection vulnerability in the

来源摘录 · NVD

漏洞预警2026-08-18 发布INFO

SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryInfo) trusts file and directory names ...

CVE-2026-48798

SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, Dire

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.

CVE-2026-18751

External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

grav-plugin-api (getgrav/grav-plugin-api) versions >= 1.0.0-beta.10 and <= 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy() method. An incomplet...

CVE-2026-75830

grav-plugin-api (getgrav/grav-plugin-api) versions >= 1.0.0-beta.10 and <= 1.0.14 contain a path traversal vulnerability

历史摘要 · 未重新核验 · NVD

安全公告2026-08-17 发布INFO

uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability

CVE-2026-55062

### Summary Path Traversal vulnerability in hook filename handling allows attackers to access and manipulate arbitrary f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code...

CVE-2026-17184

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

External control of file name or path vulnerability in Johnson Controls Airwall allows : File...

CVE-2026-34492

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-14 发布INFO

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1.

CVE-2026-34492

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path.

CVE-2026-17184

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control o

历史摘要 · 未重新核验 · NVD

安全公告2026-08-14 发布INFO

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated...

CVE-2026-72842

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload,...

CVE-2026-72841

luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated user

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-13 发布INFO

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authori...

CVE-2026-72842

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files out...

CVE-2026-72841

luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated user

历史摘要 · 未重新核验 · NVD