CWE-434 · Unrestricted Upload of File with Dangerous Type (page 36)
Page 36 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21357 | High | 8.3 | 2021-03-23 | TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 due to improper input validation, att… |
CVE-2021-21355 | High | 8.6 | 2021-03-23 | TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1, due to the lack of ensuring file ext… |
CVE-2021-21351 | Medium | 5.4 | 2021-03-23 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to… |
CVE-2021-21350 | Medium | 5.3 | 2021-03-23 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac… |
CVE-2021-21347 | Medium | 6.1 | 2021-03-23 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac… |
CVE-2021-21346 | Medium | 6.1 | 2021-03-23 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac… |
CVE-2021-21344 | Medium | 5.3 | 2021-03-23 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac… |
CVE-2021-24145 | High | 7.2 | 2021-03-18 | Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones… |
CVE-2021-24123 | High | 7.2 | 2021-03-18 | Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast… |
CVE-2021-28294 | Critical | 9.8 | 2021-03-16 | Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution… |
CVE-2021-27817 | Critical | 9.8 | 2021-03-15 | A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar where the suffix is JPG, which is upload… |
CVE-2021-28379 | High | 8.8 | 2021-03-15 | web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin. |
CVE-2020-29032 | High | 8.4 | 2021-03-05 | Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on serv… |
CVE-2021-27964 | Critical | 9.8 | 2021-03-05 | SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without… |
CVE-2021-27198 | Critical | 9.8 | 2021-02-26 | An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web s… |
CVE-2020-36079 | High | 7.2 | 2021-02-26 | Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attacker must navigate to the uploader plugin… |
CVE-2021-20659 | High | 8.8 | 2021-02-24 | SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script… |
CVE-2020-7847 | High | 7.4 | 2021-02-23 | The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code executi… |
CVE-2021-3120 | Critical | 9.8 | 2021-02-22 | An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote c… |
CVE-2021-27513 | High | 8.8 | 2021-02-22 | The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside." |
CVE-2021-26809 | Critical | 9.8 | 2021-02-17 | PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php. |
CVE-2021-25780 | High | 7.2 | 2021-02-17 | An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to… |
CVE-2021-22858 | High | 8.8 | 2021-02-17 | Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining use… |
CVE-2020-4955 | High | 8.0 | 2021-02-15 | IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper parameter validatio… |
CVE-2021-21014 | Critical | 9.1 | 2021-02-11 | Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitatio… |
CVE-2020-28871 | Critical | 9.8 | 2021-02-10 | Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload. |
CVE-2021-21131 | Medium | 6.5 | 2021-02-09 | Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra… |
CVE-2021-26918 | Critical | 9.8 | 2021-02-09 | The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the "Send an image when a user joins the server"… |
CVE-2020-25037 | High | 8.2 | 2021-02-02 | UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command. |
CVE-2021-3378 | Critical | 9.8 | 2021-02-01 | FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting… |
CVE-2020-20287 | Critical | 9.8 | 2021-02-01 | Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function's improper judgment of the request parameters, triggers remote code executio… |
CVE-2021-3164 | High | 8.8 | 2021-01-26 | ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an… |
CVE-2021-22698 | High | 7.8 | 2021-01-26 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that coul… |
CVE-2021-22697 | High | 7.8 | 2021-01-26 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that coul… |
CVE-2020-24549 | High | 8.8 | 2021-01-26 | openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server. |
CVE-2020-22643 | High | 7.2 | 2021-01-26 | Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the… |
CVE-2020-26295 | High | 8.7 | 2021-01-21 | OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrator with permission to import/export dat… |
CVE-2020-26285 | High | 8.7 | 2021-01-21 | OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, there is a vulnerability which enables remote code ex… |
CVE-2020-26252 | High | 8.7 | 2021-01-20 | OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vulnerability which enables remote code ex… |
CVE-2020-19364 | High | 8.8 | 2021-01-20 | OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php. |
CVE-2020-29450 | Medium | 6.5 | 2021-01-19 | Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS)… |
CVE-2021-3166 | High | 7.5 | 2021-01-18 | An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firmware update when the filename Settings_… |
CVE-2021-21245 | Critical | 10.0 | 2021-01-15 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet also saves user controlled data (`request.getInputStream()`) t… |
CVE-2019-18643 | Critical | 9.8 | 2021-01-07 | Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application. The only protection mechanism is a fil… |
CVE-2020-36167 | Critical | 9.3 | 2021-01-06 | An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it loads the… |
CVE-2020-4928 | Medium | 6.7 | 2021-01-04 | IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the file extention, the a… |
CVE-2020-35949 | Critical | 10.0 | 2021-01-01 | An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary… |
CVE-2020-35945 | Critical | 9.9 | 2021-01-01 | An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-leve… |
CVE-2020-35797 | Critical | 9.8 | 2020-12-30 | NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker. |
CVE-2020-26286 | High | 7.5 | 2020-12-29 | HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an unauthenticated attacker can upload arbitrary files… |
CVE-2020-35627 | High | 8.8 | 2020-12-28 | Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once… |
CVE-2020-27397 | High | 8.8 | 2020-12-23 | Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code e… |
CVE-2020-35657 | High | 7.2 | 2020-12-23 | Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme to upload a theme ZIP archive containing… |
CVE-2020-35656 | High | 7.2 | 2020-12-23 | Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of admin.php?reqGadget=Components&reqAction=InstallGadg… |
CVE-2020-29447 | Medium | 4.3 | 2020-12-21 | Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the file… |
CVE-2020-26174 | High | 8.8 | 2020-12-18 | tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the filetypes contained in this list. Howe… |
CVE-2020-35489 | Critical | 10.0 | 2020-12-17 | The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may cont… |
CVE-2020-25010 | Critical | 9.8 | 2020-12-17 | An arbitrary code execution vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote… |
CVE-2020-35133 | High | 7.5 | 2020-12-16 | irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at i_view32+0xdb60. |
CVE-2020-29607 | High | 7.2 | 2020-12-16 | A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files"… |
CVE-2020-28072 | High | 7.2 | 2020-12-15 | A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery… |
CVE-2020-26828 | Medium | 6.4 | 2020-12-09 | SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. In some file types… |
CVE-2020-26826 | Medium | 6.5 | 2020-12-09 | Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any file (including script files) without pr… |
CVE-2020-23520 | High | 7.2 | 2020-12-09 | imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality. |
CVE-2020-26255 | Medium | 6.8 | 2020-12-08 | Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.4.5, and Kirby Panel before version 2.5.14 , an editor with full access to the Kirby Panel can upl… |
CVE-2020-29597 | Critical | 9.8 | 2020-12-07 | IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows unauthenticated attackers to upload files… |
CVE-2020-28939 | High | 7.2 | 2020-12-03 | OpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file upload vulnerability. This vulnerability allows authenticated users (with substant… |
CVE-2020-29441 | High | 7.2 | 2020-11-30 | An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An unauthenticated attacker can upload arbitrary files. In some case… |
CVE-2020-25537 | Critical | 9.8 | 2020-11-30 | File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission. |
CVE-2020-13671 | High | 8.8 | 2020-11-20 | Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as… |
CVE-2020-7569 | High | 8.8 | 2020-11-19 | A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an aut… |
CVE-2020-25406 | High | 7.3 | 2020-11-18 | app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files. |
CVE-2020-28130 | Critical | 9.8 | 2020-11-17 | An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution… |
CVE-2020-26553 | Critical | 9.8 | 2020-11-17 | An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree. |
CVE-2020-28136 | High | 8.8 | 2020-11-17 | An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-packag… |
CVE-2020-28140 | Critical | 9.8 | 2020-11-17 | SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php. |
CVE-2020-28688 | High | 8.8 | 2020-11-17 | The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files. |
CVE-2020-28687 | High | 8.8 | 2020-11-17 | The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files. |
CVE-2020-28693 | High | 8.8 | 2020-11-16 | An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by uploading a theme… |
CVE-2020-28692 | High | 7.2 | 2020-11-16 | In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files. |
CVE-2020-13774 | Critical | 9.9 | 2020-11-12 | An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker to gain remote code… |
CVE-2020-27386 | High | 8.8 | 2020-11-12 | An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the Fil… |
CVE-2020-26804 | High | 8.8 | 2020-11-12 | In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users can upload attachments with the shared… |
CVE-2020-26803 | High | 8.8 | 2020-11-12 | In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered from "Unrestricted File Upload" vulnerab… |
CVE-2020-26820 | High | 7.2 | 2020-11-10 | SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, t… |
CVE-2020-23138 | Critical | 9.8 | 2020-11-09 | An unrestricted file upload vulnerability was discovered in the Microweber 1.1.18 admin account page. An attacker can upload PHP code or any extension (eg- .ex… |
CVE-2020-24407 | Critical | 9.1 | 2020-11-09 | Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulner… |
CVE-2020-28328 | High | 8.8 | 2020-11-06 | SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account… |
CVE-2020-27387 | High | 8.8 | 2020-11-05 | An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access to the FileManager) to upload and exec… |
CVE-2020-15277 | High | 7.2 | 2020-10-30 | baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system administrator and uploading an executa… |
CVE-2020-4588 | High | 7.8 | 2020-10-30 | IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution… |
CVE-2020-11486 | Critical | 9.8 | 2020-10-29 | NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker… |
CVE-2020-8260 | High | 7.2 | 2020-10-28 | A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using unco… |
CVE-2020-27956 | Critical | 9.8 | 2020-10-28 | An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via… |
CVE-2020-25483 | Critical | 9.8 | 2020-10-23 | An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server. |
CVE-2020-3436 | High | 8.6 | 2020-10-21 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unaut… |
CVE-2020-26583 | Medium | 6.1 | 2020-10-16 | An issue was discovered in Sage DPW 2020_06_x before 2020_06_002. It allows unauthenticated users to upload JavaScript (in a file) via the expenses claiming fu… |
CVE-2020-26048 | High | 8.8 | 2020-10-05 | The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custo… |
CVE-2020-12715 | High | 8.8 | 2020-09-30 | RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control. |
CVE-2020-15488 | High | 7.5 | 2020-09-30 | Re:Desk 2.3 allows insecure file upload. |