CWE-434 · Unrestricted Upload of File with Dangerous Type (page 35)
Page 35 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-19303 | High | 7.8 | 2021-08-03 | An arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to execute arbitrary code via a crafted file. |
CVE-2020-19302 | Critical | 9.8 | 2021-08-03 | An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes… |
CVE-2021-36623 | Critical | 9.8 | 2021-08-03 | Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE. |
CVE-2021-36622 | Critical | 9.8 | 2021-08-03 | Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile… |
CVE-2021-25200 | Critical | 9.8 | 2021-07-30 | Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\… |
CVE-2021-36741 | High | 8.8 | 2021-07-29 | An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a re… |
CVE-2021-37444 | High | 8.8 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a Z… |
CVE-2021-25208 | Critical | 9.8 | 2021-07-23 | Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepa… |
CVE-2021-25206 | Critical | 9.8 | 2021-07-23 | Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Produc… |
CVE-2021-25203 | Critical | 9.8 | 2021-07-23 | Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CMSsite-master\admin\includes\admin_… |
CVE-2021-25207 | Critical | 9.8 | 2021-07-23 | Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate… |
CVE-2021-25211 | Critical | 9.8 | 2021-07-22 | Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\p… |
CVE-2021-25210 | Critical | 9.8 | 2021-07-22 | Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to manage_… |
CVE-2021-34619 | High | 8.8 | 2021-07-21 | The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2… |
CVE-2021-35963 | Critical | 9.8 | 2021-07-19 | The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated attackers… |
CVE-2021-29699 | Medium | 6.8 | 2021-07-15 | IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an us… |
CVE-2021-36121 | High | 8.8 | 2021-07-13 | An issue was discovered in Echo ShareCare 8.15.5. The file-upload feature in Access/DownloadFeed_Mnt/FileUpload_Upd.cfm is susceptible to an unrestricted uploa… |
CVE-2021-30118 | Critical | 9.8 | 2021-07-09 | An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management (RMM) 9.5.4.2149 and subsequent… |
CVE-2021-28931 | High | 8.8 | 2021-07-07 | Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file upl… |
CVE-2021-32538 | Critical | 9.8 | 2021-07-07 | ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrary files without loggin… |
CVE-2021-34624 | Critical | 9.8 | 2021-07-07 | A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users… |
CVE-2021-34623 | Critical | 9.8 | 2021-07-07 | A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possible for use… |
CVE-2020-22249 | Critical | 9.8 | 2021-07-06 | Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the plugin zip file, Uploading a malicious p… |
CVE-2021-20104 | High | 8.1 | 2021-06-29 | Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded with forms th… |
CVE-2021-34427 | Critical | 9.8 | 2021-06-25 | In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir)… |
CVE-2021-34074 | Critical | 9.8 | 2021-06-25 | PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a relative path… |
CVE-2020-21786 | Critical | 9.8 | 2021-06-24 | In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php. |
CVE-2020-21787 | Critical | 9.8 | 2021-06-24 | CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php. |
CVE-2021-28976 | High | 7.2 | 2021-06-23 | Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess. |
CVE-2010-1433 | Critical | 9.8 | 2021-06-21 | Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An at… |
CVE-2021-24376 | Critical | 9.8 | 2021-06-21 | The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archive via the "Import Settings" feature, af… |
CVE-2021-24370 | Critical | 9.8 | 2021-06-21 | The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution. |
CVE-2020-19510 | Critical | 9.8 | 2021-06-21 | Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php. |
CVE-2020-36388 | High | 8.8 | 2021-06-17 | In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR archive. |
CVE-2013-20002 | Critical | 9.8 | 2021-06-17 | Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax… |
CVE-2021-32243 | High | 8.8 | 2021-06-16 | FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated). |
CVE-2021-34551 | High | 8.1 | 2021-06-16 | PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname. |
CVE-2020-35760 | Critical | 9.8 | 2021-06-16 | bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files (ex: php files). |
CVE-2021-27489 | High | 8.8 | 2021-06-16 | ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacke… |
CVE-2021-34128 | High | 8.8 | 2021-06-15 | LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a… |
CVE-2020-7864 | High | 7.8 | 2021-06-15 | Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: Raonwiz DEXT5Editor… |
CVE-2021-23394 | High | 8.1 | 2021-06-13 | The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies i… |
CVE-2021-26828 | High | 8.8 | 2021-06-11 | OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit… |
CVE-2021-26473 | Critical | 9.8 | 2021-06-08 | In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to write arbitra… |
CVE-2021-3277 | High | 7.2 | 2021-06-07 | Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in custom-includes com… |
CVE-2020-36141 | High | 8.8 | 2021-06-04 | BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header. |
CVE-2021-32661 | Medium | 6.8 | 2021-06-03 | Backstage is an open platform for building developer portals. In versions of Backstage's Techdocs Plugin (`@backstage/plugin-techdocs`) prior to 0.9.5, a malic… |
CVE-2021-32660 | Medium | 6.8 | 2021-06-03 | Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In versions of `@ba… |
CVE-2020-21005 | Medium | 6.5 | 2021-06-03 | WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the… |
CVE-2020-35442 | Critical | 9.8 | 2021-06-02 | FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background via Front/lib/Action/FindexAction.class… |
CVE-2021-29092 | High | 8.8 | 2021-06-01 | Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authentic… |
CVE-2021-24311 | High | 8.8 | 2021-06-01 | The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated… |
CVE-2021-31703 | Critical | 9.8 | 2021-05-29 | Frontier ichris through 5.18 allows users to upload malicious executable files that might later be downloaded and run by any client user. |
CVE-2020-26678 | High | 8.8 | 2021-05-26 | vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile pic… |
CVE-2020-23765 | High | 7.2 | 2021-05-21 | A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrato… |
CVE-2021-32630 | Critical | 9.6 | 2021-05-20 | Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.0.4, there is an authenticated RCE… |
CVE-2021-27459 | Critical | 9.8 | 2021-05-20 | A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated file… |
CVE-2021-20721 | Critical | 9.8 | 2021-05-20 | KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code… |
CVE-2021-32622 | Medium | 4.2 | 2021-05-17 | Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file pre… |
CVE-2020-18166 | Critical | 9.8 | 2021-05-14 | Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "… |
CVE-2021-24284 | Critical | 9.8 | 2021-05-14 | The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zip… |
CVE-2020-28063 | Critical | 9.8 | 2021-05-13 | A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell. |
CVE-2020-20092 | Critical | 9.8 | 2021-05-13 | File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after… |
CVE-2020-23790 | Critical | 9.8 | 2021-05-12 | An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5. |
CVE-2021-32089 | Critical | 9.8 | 2021-05-11 | An issue was discovered on Zebra (formerly Motorola Solutions) Fixed RFID Reader FX9500 devices. An unauthenticated attacker can upload arbitrary files to the… |
CVE-2021-31207 | Medium | 6.6 | 2021-05-11 | Microsoft Exchange Server Security Feature Bypass Vulnerability |
CVE-2021-27618 | Medium | 4.9 | 2021-05-11 | The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not check the file type extension of the… |
CVE-2021-29022 | Medium | 5.3 | 2021-05-10 | In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory. |
CVE-2021-32094 | High | 8.8 | 2021-05-07 | U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files. |
CVE-2021-31737 | Critical | 9.8 | 2021-05-06 | emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php. |
CVE-2021-24254 | High | 7.2 | 2021-05-06 | The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary… |
CVE-2021-24253 | High | 8.8 | 2021-05-06 | The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-ty… |
CVE-2021-24252 | High | 7.2 | 2021-05-06 | The Event Banner WordPress plugin through 1.3 does not verify the uploaded image file, allowing admin accounts to upload arbitrary files, such as .exe, .php, o… |
CVE-2021-24248 | High | 7.2 | 2021-05-06 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding cer… |
CVE-2021-24236 | Critical | 9.8 | 2021-05-06 | The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dange… |
CVE-2020-19113 | Critical | 9.8 | 2021-05-06 | Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution. |
CVE-2020-23083 | Critical | 9.8 | 2021-05-03 | Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the comp… |
CVE-2020-21452 | Critical | 9.8 | 2021-04-29 | An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious code via /Interface/DevManage/EC.php?cmd=u… |
CVE-2021-24240 | Critical | 9.8 | 2021-04-22 | The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an u… |
CVE-2021-30209 | Medium | 6.5 | 2021-04-15 | Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background without any security verification, which may… |
CVE-2020-29592 | Critical | 9.8 | 2021-04-14 | An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE HTML editor's file upload allows an at… |
CVE-2021-23280 | High | 8.0 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to… |
CVE-2021-24224 | High | 8.8 | 2021-04-12 | The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in… |
CVE-2021-24223 | Critical | 9.8 | 2021-04-12 | The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be u… |
CVE-2021-24222 | Critical | 9.8 | 2021-04-12 | The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the [formCadastro] is embed. The form allows… |
CVE-2021-24220 | Critical | 9.1 | 2021-04-12 | Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme… |
CVE-2021-20022 | High | 7.2 | 2021-04-09 | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. |
CVE-2021-29641 | High | 8.8 | 2021-04-07 | Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file t… |
CVE-2021-28173 | Critical | 9.8 | 2021-04-06 | The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files w… |
CVE-2021-30149 | Critical | 9.8 | 2021-04-06 | Composr 10.0.36 allows upload and execution of PHP files. |
CVE-2021-24212 | Critical | 9.8 | 2021-04-05 | The WooCommerce Help Scout WordPress plugin before 2.9.1 (https://woocommerce.com/products/woocommerce-help-scout/) allows unauthenticated users to upload any… |
CVE-2021-24171 | Critical | 9.8 | 2021-04-05 | The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php. It was possible to bypass t… |
CVE-2021-24160 | High | 8.8 | 2021-04-05 | In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extrac… |
CVE-2021-24155 | High | 7.2 | 2021-04-05 | The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extensio… |
CVE-2020-21585 | Critical | 9.8 | 2021-04-02 | Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module. |
CVE-2021-23001 | Medium | 4.3 | 2021-03-31 | On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, t… |
CVE-2020-28173 | High | 7.2 | 2021-03-31 | Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using… |
CVE-2020-19642 | Medium | 6.2 | 2021-03-30 | An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' fi… |
CVE-2021-27274 | Critical | 9.8 | 2021-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Authentic… |
CVE-2021-26597 | Medium | 6.5 | 2021-03-25 | An issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the NOKIA NetAct Web Page, can visit the Site Configuration Tool web site section… |