#cwe-73

共收录 423 条相关情报。

← 返回所有主题

漏洞预警2026-09-08 发布HIGH

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-62804

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.

来源摘录 · NVD

#cve #cwe-73

漏洞预警2026-09-07 发布INFO

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path...

CVE-2026-81830

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted c

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

安全公告2026-09-05 发布INFO

WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows...

CVE-2026-86189

WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to w

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-73 #severity:critical

漏洞预警2026-09-05 发布INFO

WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to write files to arbitrary locations by supplying a caller-c...

CVE-2026-86189

WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to w

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

安全公告2026-09-05 发布INFO

WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php

CVE-2026-86189

WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to w

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-73

安全公告2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...

CVE-2026-80118

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-73 #severity:high

安全公告2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...

CVE-2026-80119

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-73 #severity:high

漏洞预警2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an information disclosure vulnerability in Dir...

CVE-2026-80119

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · NVD

#cve #cwe-73 #cwe-497

漏洞预警2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure ...

CVE-2026-80118

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · NVD

#cve #cwe-73 #cwe-476 #cwe-497

安全公告2026-09-04 发布INFO

CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval

CVE-2026-75913

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rust #npm #cwe-73 #cwe-88 #severity:high

漏洞预警2026-09-04 发布INFO

surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /process routes that accept raw file_path parameters. Attac...

CVE-2026-85687

surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /p

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-09-04 发布INFO

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers ...

CVE-2026-85684

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitiz

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-09-04 发布INFO

Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a ...

CVE-2026-85668

Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POS

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

安全公告2026-09-04 发布INFO

surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server

CVE-2026-85687

surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, and /p

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-73

安全公告2026-09-04 发布INFO

marker through 2.0.0 Path Traversal via upload filename

CVE-2026-85684

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitiz

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-73

安全公告2026-09-04 发布INFO

Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register

CVE-2026-85668

Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POS

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-73

漏洞预警2026-09-04 发布INFO

Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that fails to validate the language code parameter. An authenticated adm...

CVE-2026-85603

Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that fails to v

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-09-04 发布INFO

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before using it in a file deletion routine, allowing administrat...

CVE-2026-82194

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-09-04 发布INFO

The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllable directory path before deleting files within it, allowing unauthen...

CVE-2026-81347

The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllable director

历史摘要 · 未重新核验 · NVD

#cve #cwe-73

漏洞预警2026-09-03 发布INFO

OpenList a file list program that supports multiple storage. Prior to 4.2.3, OpenList's offline-download feature at POST /api/fs/add_offline_download with tool: "SimpleHttp" acc...

CVE-2026-75602

OpenList a file list program that supports multiple storage. Prior to 4.2.3, OpenList's offline-download feature at POST

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73