CWE-61 类弱点 146 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-61 属于路径遍历类漏洞，指程序在处理文件路径时未充分验证符号链接的目标位置。攻击者通常通过构造指向系统敏感文件的恶意符号链接，诱导程序读取或修改非预期控制域内的文件，从而获取敏感数据或提升权限。开发者应避免直接信任用户输入的路径，在访问文件前严格校验符号链接指向，确保其位于预期的安全目录范围内，或禁用符号链接解析以消除风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-54867 | youki 安全漏洞 — youki | 7.0 | High | 2025-08-14 |
| CVE-2025-55345 | OpenAI Codex CLI 安全漏洞 | 8.8 | High | 2025-08-13 |
| CVE-2025-5468 | Ivanti多款产品 安全漏洞 — Connect Secure | 5.5 | Medium | 2025-08-12 |
| CVE-2025-36564 | Dell Encryption Admin Utilities 安全漏洞 — Encryption Admin Utilities | 7.8 | High | 2025-06-03 |
| CVE-2025-23394 | openSUSE Tumbleweed cyrus-imapd 安全漏洞 — openSUSE Tumbleweed | 8.4AI | High AI | 2025-05-26 |
| CVE-2025-43853 | WebAssembly Micro Runtime 安全漏洞 — wasm-micro-runtime | 6.5AI | Medium AI | 2025-05-15 |
| CVE-2025-1079 | Google Web Designer 安全漏洞 — Web Designer | 7.8 | High | 2025-05-12 |
| CVE-2025-30485 | Century Systems FutureNet NXR和Century Systems FutureNet VXR 安全漏洞 — FutureNet NXR-1420 | 7.2 | - | 2025-04-03 |
| CVE-2025-3048 | AWS SAM CLI 安全漏洞 — AWS Serverless Application Model Command Line Interface | 6.5 | Medium | 2025-03-31 |
| CVE-2025-3047 | AWS SAM CLI 安全漏洞 — AWS Serverless Application Model Command Line Interface | 6.5 | Medium | 2025-03-31 |
| CVE-2025-24832 | Acronis Backup plugin for cPanel & WHM (Linux)和Acronis Backup extension for Plesk (Linux) 安全漏洞 — Acronis Backup plugin for cPanel & WHM | 8.8 | - | 2025-02-27 |
| CVE-2024-45418 | Zoom Workplace 安全漏洞 — Zoom Apps for macOS | 5.4 | Medium | 2025-02-25 |
| CVE-2025-22480 | Dell SupportAssist OS Recovery 安全漏洞 — Dell SupportAssist OS Recovery | 7.0 | High | 2025-02-13 |
| CVE-2025-24886 | DOJO 安全漏洞 — dojo | 7.7 | High | 2025-01-30 |
| CVE-2024-52535 | Dell SupportAssist Client 安全漏洞 — SupportAssist for Home PCs | 7.1 | High | 2024-12-25 |
| CVE-2024-47515 | Pagure 安全漏洞 | 8.1 | High | 2024-12-24 |
| CVE-2024-54148 | Gogs 安全漏洞 — gogs | 8.8 | - | 2024-12-23 |
| CVE-2024-47480 | Dell Inventory Collector 安全漏洞 — Inventory Collector Client | 7.8 | High | 2024-12-18 |
| CVE-2024-52542 | Dell AppSync Server 安全漏洞 — AppSync | 4.4 | Medium | 2024-12-17 |
| CVE-2024-52537 | Dell Client Platform 安全漏洞 — Dell Client Platform BIOS | 6.3 | Medium | 2024-12-11 |
| CVE-2024-54661 | socat 安全漏洞 — socat | 9.1 | - | 2024-12-04 |
| CVE-2023-20091 | Cisco RoomOS Software和Cisco TelePresence Collaboration Endpoint Software 安全漏洞 — Cisco TelePresence Endpoint Software (TC/CE) | 5.1 | Medium | 2024-11-15 |
| CVE-2023-20092 | Cisco RoomOS Software和Cisco TelePresence Collaboration Endpoint Software 安全漏洞 — Cisco RoomOS Software | 4.4 | Medium | 2024-11-15 |
| CVE-2023-20093 | Cisco TelePresence Collaboration Endpoint和Cisco RoomOS 安全漏洞 — Cisco RoomOS Software | 4.4 | Medium | 2024-11-15 |
| CVE-2024-34015 | Acronis Backup plugin for cPanel & WHM (Linux) 安全漏洞 — Acronis Backup plugin for cPanel & WHM | 6.5 | - | 2024-11-11 |
| CVE-2024-34014 | Acronis多款产品 安全漏洞 — Acronis Backup plugin for cPanel & WHM | 8.8 | - | 2024-11-11 |
| CVE-2024-0134 | NVIDIA Container Toolkit 安全漏洞 — NVIDIA Container Toolkit | 4.1 | Medium | 2024-11-05 |
| CVE-2024-39578 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS | 6.3 | Medium | 2024-08-31 |
| CVE-2024-42367 | aiohttp 安全漏洞 — aiohttp | 4.8 | Medium | 2024-08-09 |
| CVE-2024-28189 | Judge0 CE 安全漏洞 — judge0 | 10.0 | Critical | 2024-04-18 |
CWE-61 是常见的弱点类别，本平台收录该类弱点关联的 146 条 CVE 漏洞。