Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:22"
1,024 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-47699 |
medium | 6.4 | 0.0029 | 2026-08-18 | Confidential Containers Guest Components provides guest tools and components for confidential contai | |
CVE-2026-106491 |
medium | 6.4 | 0.0027 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugi | |
CVE-2026-113491 |
medium | 6.4 | 0.0025 | 2026-10-24 | The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before | |
CVE-2026-34664 |
medium | 6.3 | 0.0018 | 2026-05-12 | Substance3D - Designer versions 15.1.0 and earlier are affected by an Improper Limitation of a Pathn | |
CVE-2026-52756 |
medium | 6.3 | 0.0046 | 2026-06-10 | Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServer that ac | |
CVE-2026-13748 |
medium | 6.3 | 0.0019 | 2026-06-29 | Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitra | |
CVE-2026-18953 |
medium | 6.3 | 0.0018 | 2026-08-05 | Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awsla | |
CVE-2026-67286 |
medium | 6.3 | 0.0052 | 2026-08-12 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in S | |
CVE-2026-72814 |
medium | 6.3 | 0.0047 | 2026-08-14 | The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerabi | |
CVE-2026-77156 |
medium | 6.3 | 0.0035 | 2026-10-22 | Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux an | |
CVE-2026-113576 |
medium | 6.3 | — | 2026-10-29 | Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory | |
CVE-2026-44301 |
medium | 6.2 | 0.0027 | 2026-05-12 | Hugo is a static site generator. From 0.43 to before 0.161.0, when building a Hugo site that uses No | |
CVE-2026-65712 |
medium | 6.2 | 0.0019 | 2026-07-23 | Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN ve | |
CVE-2026-54785 |
medium | 6.2 | 0.0019 | 2026-07-31 | gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official | |
CVE-2026-57208 |
medium | 6.2 | 0.0038 | 2026-10-23 | Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path tra | |
CVE-2026-85518 |
medium | 6.1 | 0.0045 | 2026-10-21 | A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does | |
CVE-2026-29050 |
medium | 6.1 | 0.0014 | 2026-04-24 | melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 a | |
CVE-2026-35254 |
medium | 6.1 | 0.0015 | 2026-05-06 | Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions t | |
CVE-2026-12479 |
medium | 6.1 | 0.0036 | 2026-06-22 | A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskI | |
CVE-2026-53766 |
medium | 6.1 | 0.0012 | 2026-06-24 | Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agent control and inspect a live C | |
CVE-2026-59820 |
medium | 6.1 | 0.0059 | 2026-07-08 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83. | |
CVE-2026-58413 |
medium | 6.1 | 0.0019 | 2026-07-20 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentMa | |
CVE-2026-47121 |
medium | 6.1 | 0.0034 | 2026-07-21 | Sparkle is a software update framework for macOS. Prior to version 2.9.2, `Autoupdate/SUBinaryDeltaA | |
CVE-2026-66492 |
medium | 6.1 | 0.0056 | 2026-08-07 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper | |
CVE-2026-73851 |
medium | 6.1 | 0.0227 | 2026-08-17 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who co | |
CVE-2026-92205 |
medium | 6.1 | 0.0031 | 2026-10-21 | BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerabi | |
CVE-2024-21753 |
medium | 6.0 | 0.0080 | 2024-09-10 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo | |
CVE-2026-4619 |
medium | 6.0 | 0.0033 | 2026-03-27 | Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any | |
CVE-2026-3087 |
medium | 6.0 | 0.0055 | 2026-04-27 | If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive | |
CVE-2026-22677 |
medium | 6.0 | 0.0038 | 2026-05-13 | Hermes WebUI prior to 0.51.44 contains a path traversal vulnerability in the session import endpoint | |
CVE-2026-49465 |
medium | 6.0 | 0.0054 | 2026-06-23 | n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authen | |
CVE-2026-58173 |
medium | 6.0 | 0.0045 | 2026-06-30 | Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write fi | |
CVE-2026-65698 |
medium | 6.0 | 0.0047 | 2026-07-23 | Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that a | |
CVE-2026-66004 |
medium | 6.0 | 0.0030 | 2026-07-24 | BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_a | |
CVE-2026-105265 |
medium | 6.0 | 0.0039 | 2026-10-22 | A vulnerability exists in the the time zone parameter and does not properly validate user input, whi | |
CVE-2026-111978 |
medium | 6.0 | 0.0028 | 2026-10-25 | The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename bef | |
CVE-2026-112950 |
medium | 5.9 | 0.0054 | 2026-10-20 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 4.1.11 until | |
CVE-2026-116171 |
medium | 5.9 | 0.0048 | 2026-10-25 | SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath be | |
CVE-2026-108140 |
medium | 5.9 | 0.0036 | 2026-10-27 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the | |
CVE-2026-108141 |
medium | 5.9 | 0.0036 | 2026-10-27 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the | |
CVE-2026-118680 |
medium | 5.9 | 0.0046 | 2026-10-28 | SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT device-namespace aliases, bypassing | |
CVE-2026-118654 |
medium | 5.9 | 0.0035 | 2026-10-28 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot | |
CVE-2026-46724 |
medium | 5.9 | 0.0040 | 2026-05-19 | The file indexer does not normalize the configured directory path. A backend user with permission to | |
CVE-2026-54286 |
medium | 5.9 | 0.0043 | 2026-06-22 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12. | |
CVE-2026-59924 |
medium | 5.9 | 0.0046 | 2026-07-08 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Include.parse() join | |
CVE-2026-54590 |
medium | 5.9 | 0.0034 | 2026-07-08 | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the | |
CVE-2026-47429 |
medium | 5.9 | 0.0088 | 2026-07-14 | Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on | |
CVE-2026-50558 |
medium | 5.9 | 0.0037 | 2026-07-29 | Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior t | |
CVE-2026-66755 |
medium | 5.9 | 0.0063 | 2026-07-30 | Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 thr | |
CVE-2026-64677 |
medium | 5.9 | 0.0102 | 2026-08-06 | Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local |