A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artif
A Local File Inclusion (LFI) vulnerability exists in the '/reinstall_extension' endpoint of the parisneo/lollms-webui ap
NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious
A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write a
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properl
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, the url parameter can be
A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `Agen
All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when ext
Frequently Asked Questions
What is CWE-29?
CWE-29 (CWE-29) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-29?
There are 8 CVE records associated with CWE-29 in our database. Of these, 2 are critical severity, 5 are high severity, and 1 are medium severity.
How can I protect against CWE-29 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-29 using AI-powered security agents.
Detect CWE-29 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-29 vulnerabilities across your infrastructure.
Get Started