CWE-434 · Unrestricted Upload of File with Dangerous Type (page 28)
Page 28 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0477 | High | 8.8 | 2023-03-13 | The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.16 includes an AJAX endpoint that allows any user with at least Author privileges to… |
CVE-2023-23328 | High | 8.8 | 2023-03-10 | A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially craf… |
CVE-2023-1328 | Medium | 4.7 | 2023-03-10 | A vulnerability was found in Guizhou 115cms 4.2. It has been classified as problematic. Affected is an unknown function of the file /admin/content/index. The m… |
CVE-2023-27164 | Medium | 4.8 | 2023-03-10 | An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file. |
CVE-2023-1313 | High | 8.8 | 2023-03-10 | Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1. |
CVE-2023-1303 | Medium | 6.3 | 2023-03-09 | A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component S… |
CVE-2021-33352 | Critical | 9.8 | 2023-03-08 | An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the t… |
CVE-2023-22890 | High | 7.5 | 2023-03-08 | SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of s… |
CVE-2015-10087 | Medium | 6.3 | 2023-03-07 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and classified as problematic. Affected by t… |
CVE-2021-4330 | High | 8.8 | 2023-03-07 | The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads due to insufficient validation of file… |
CVE-2023-26949 | Critical | 9.8 | 2023-03-06 | An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PH… |
CVE-2023-1185 | Medium | 4.7 | 2023-03-06 | A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The m… |
CVE-2023-1184 | Medium | 4.7 | 2023-03-06 | A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionality of the file ad… |
CVE-2023-25402 | High | 7.5 | 2023-03-03 | CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload. |
CVE-2023-20009 | Medium | 6.5 | 2023-03-01 | A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authen… |
CVE-2023-24045 | Medium | 6.5 | 2023-03-01 | In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specifying the target username in a download r… |
CVE-2023-24249 | High | 7.2 | 2023-02-27 | An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2023-26762 | High | 8.8 | 2023-02-27 | Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability. |
CVE-2021-35290 | High | 7.2 | 2023-02-24 | File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /admin/main/mod-blog page. |
CVE-2021-33224 | Critical | 9.8 | 2023-02-24 | File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file. |
CVE-2023-24317 | High | 8.1 | 2023-02-23 | Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component edit_organizer.php. |
CVE-2022-39983 | Critical | 9.8 | 2023-02-22 | File upload vulnerability in Pro Gamma Instant Developer RD3 22.5 r23, r30, and possibly earlier versions, allows attackers to execute arbitrary code. |
CVE-2022-41217 | Critical | 9.8 | 2023-02-22 | Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE b… |
CVE-2022-2883 | High | 7.5 | 2023-02-22 | In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service |
CVE-2023-0943 | Medium | 4.7 | 2023-02-21 | A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function save_set… |
CVE-2023-0918 | Medium | 6.3 | 2023-02-19 | A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file a… |
CVE-2021-35261 | Critical | 9.8 | 2023-02-17 | File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the… |
CVE-2023-22937 | Medium | 4.3 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extens… |
CVE-2023-24530 | High | 8.4 | 2023-02-14 | SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed… |
CVE-2023-23851 | Medium | 5.4 | 2023-02-14 | SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without t… |
CVE-2023-24646 | Critical | 9.8 | 2023-02-13 | An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a craft… |
CVE-2023-0255 | High | 8.8 | 2023-02-13 | The Enable Media Replace WordPress plugin before 4.0.2 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP… |
CVE-2023-0783 | Medium | 4.7 | 2023-02-11 | A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file /ecshop/admin/template.php of the compo… |
CVE-2022-45527 | Critical | 9.8 | 2023-02-08 | File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to directly upload malicious files to the c… |
CVE-2023-24202 | Critical | 9.8 | 2023-02-06 | Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php. |
CVE-2023-23937 | High | 8.2 | 2023-02-03 | Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. The upload functionality for updating user pro… |
CVE-2021-36426 | High | 8.8 | 2023-02-03 | File Upload vulnerability in phpwcms 1.9.25 allows remote attackers to run arbitrary code via crafted file upload to include/inc_lib/general.inc.php. |
CVE-2022-48079 | Critical | 9.8 | 2023-02-02 | Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execute arbitrary code via uploading a craft… |
CVE-2023-0651 | Medium | 6.3 | 2023-02-02 | A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manip… |
CVE-2022-46604 | High | 8.8 | 2023-02-02 | An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanism and upload a crafted PHP file, leadin… |
CVE-2023-23135 | High | 7.2 | 2023-02-01 | An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file. |
CVE-2023-24610 | High | 8.8 | 2023-02-01 | NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. Th… |
CVE-2022-42971 | Critical | 9.8 | 2023-02-01 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JS… |
CVE-2023-0587 | Critical | 9.1 | 2023-02-01 | A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /o… |
CVE-2022-47769 | Critical | 9.8 | 2023-02-01 | An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files in the web root o… |
CVE-2022-47854 | Critical | 9.8 | 2023-01-31 | i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php. |
CVE-2022-48006 | Critical | 9.8 | 2023-01-30 | An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via… |
CVE-2022-43979 | Medium | 5.9 | 2023-01-27 | There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that the user has inserted… |
CVE-2021-41231 | High | 7.2 | 2023-01-27 | OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, an administrator with the permissions to upload files via DataFlow and to create… |
CVE-2022-48008 | Critical | 9.8 | 2023-01-27 | An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2023-0455 | High | 8.8 | 2023-01-26 | Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta. |
CVE-2022-47615 | Critical | 9.3 | 2023-01-26 | Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. |
CVE-2022-47042 | High | 8.8 | 2023-01-26 | MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do. |
CVE-2022-40037 | Critical | 9.8 | 2023-01-26 | An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile. |
CVE-2022-40035 | High | 8.8 | 2023-01-26 | File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList… |
CVE-2022-3478 | Medium | 4.3 | 2023-01-26 | An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions sta… |
CVE-2023-22726 | High | 8.0 | 2023-01-20 | act is a project which allows for local running of github actions. The artifact server that stores artifacts from Github Action runs does not sanitize path inp… |
CVE-2023-23607 | Critical | 9.8 | 2023-01-20 | erohtar/Dasherr is a dashboard for self-hosted services. In affected versions unrestricted file upload allows any unauthenticated user to execute arbitrary cod… |
CVE-2021-26642 | High | 8.8 | 2023-01-20 | When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient ve… |
CVE-2023-20040 | Medium | 5.5 | 2023-01-20 | A vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to cause a denial of service… |
CVE-2022-47766 | High | 8.8 | 2023-01-19 | PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability. |
CVE-2022-46660 | High | 7.5 | 2023-01-18 | An unauthorized user could alter or write files with full control over the path and content of the file. |
CVE-2023-22851 | High | 7.2 | 2023-01-14 | Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an admin because of an unserialize call. |
CVE-2022-42287 | Medium | 6.0 | 2023-01-13 | NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which ma… |
CVE-2023-0257 | Medium | 4.7 | 2023-01-12 | A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2022-46610 | High | 8.8 | 2023-01-10 | 72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitr… |
CVE-2022-44036 | High | 7.2 | 2023-01-03 | In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execution. NOTE… |
CVE-2022-43436 | High | 8.8 | 2023-01-03 | The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upl… |
CVE-2022-48194 | High | 8.8 | 2022-12-30 | TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a cr… |
CVE-2022-45427 | High | 7.2 | 2022-12-27 | Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific craf… |
CVE-2022-4732 | High | 7.2 | 2022-12-27 | Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2. |
CVE-2022-45896 | Critical | 9.8 | 2022-12-25 | Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload2.ashx can be used… |
CVE-2022-4665 | High | 8.8 | 2022-12-23 | Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6. |
CVE-2022-46493 | Critical | 9.8 | 2022-12-22 | Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img. |
CVE-2022-45415 | High | 7.8 | 2022-12-22 | When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with that exten… |
CVE-2022-34483 | High | 8.8 | 2022-12-22 | An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable ex… |
CVE-2022-34482 | High | 8.8 | 2022-12-22 | An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable ex… |
CVE-2022-0517 | High | 7.8 | 2022-12-22 | Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitr… |
CVE-2022-46102 | Critical | 9.8 | 2022-12-22 | AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php |
CVE-2022-45966 | Critical | 9.8 | 2022-12-22 | here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5. |
CVE-2022-46020 | Critical | 9.8 | 2022-12-20 | WBCE CMS v1.5.4 can implement getshell by modifying the upload file type. |
CVE-2022-46135 | High | 7.2 | 2022-12-16 | In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the… |
CVE-2022-45338 | High | 7.8 | 2022-12-15 | An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267SP13 and Exact Synergy Enterprise 500 b… |
CVE-2020-20588 | High | 8.8 | 2022-12-15 | File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload t… |
CVE-2022-4506 | High | 8.8 | 2022-12-15 | Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-41267 | Critical | 9.9 | 2022-12-13 | SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Business Objects server… |
CVE-2022-45275 | High | 7.2 | 2022-12-12 | An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=save_settings of Dynamic Transaction Queuing System v1.0 allows attackers to execute a… |
CVE-2022-3912 | High | 7.5 | 2022-12-12 | The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated… |
CVE-2022-45968 | High | 8.8 | 2022-12-12 | Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protected one). |
CVE-2022-45759 | High | 8.8 | 2022-12-12 | SENS v1.0 has a file upload vulnerability. |
CVE-2022-46828 | Medium | 5.2 | 2022-12-08 | In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible. |
CVE-2022-45009 | High | 7.2 | 2022-12-07 | Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/classes/SystemSettings.php?f=update_setti… |
CVE-2022-45359 | Critical | 9.8 | 2022-12-06 | Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress. |
CVE-2022-45548 | High | 8.8 | 2022-12-06 | AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. |
CVE-2022-44289 | High | 8.8 | 2022-12-06 | Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell. |
CVE-2022-45912 | High | 7.2 | 2022-12-05 | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUploader by an authenticated admin user. An… |
CVE-2022-45771 | High | 8.8 | 2022-12-05 | An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file. |
CVE-2022-4276 | Medium | 6.3 | 2022-12-03 | A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php… |
CVE-2022-4273 | High | 7.3 | 2022-12-03 | A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown proce… |
CVE-2022-4272 | Medium | 6.3 | 2022-12-03 | A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/sav… |