CWE-434 · Unrestricted Upload of File with Dangerous Type (page 37)
Page 37 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-21564 | High | 8.8 | 2020-09-30 | An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?actio… |
CVE-2020-19672 | Critical | 9.8 | 2020-09-30 | Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the… |
CVE-2020-25149 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25145 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25144 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25136 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25134 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25133 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-12843 | Critical | 9.8 | 2020-09-24 | ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used. |
CVE-2020-12837 | High | 7.5 | 2020-09-24 | ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used. |
CVE-2019-1888 | High | 7.2 | 2020-09-23 | A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to uplo… |
CVE-2020-25515 | High | 7.8 | 2020-09-22 | Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books > New Book , http://<site>/lms/index.php?page=books. |
CVE-2020-15839 | Medium | 6.5 | 2020-09-22 | Liferay Portal before 7.3.3, and Liferay DXP 7.1 before fix pack 18 and 7.2 before fix pack 6, does not restrict the size of a multipart/form-data POST action… |
CVE-2020-14022 | High | 8.8 | 2020-09-22 | Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) from a file. It is p… |
CVE-2020-4620 | High | 8.8 | 2020-09-22 | IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions… |
CVE-2020-25790 | High | 7.2 | 2020-09-19 | Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the signi… |
CVE-2020-15189 | Medium | 6.8 | 2020-09-18 | SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload. Cross-Site Scripting(XSS) vulnerability that was used in C… |
CVE-2020-25733 | High | 7.5 | 2020-09-18 | webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types. |
CVE-2020-13260 | Medium | 6.1 | 2020-09-17 | A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated attacker to upload a JavaScript file, w… |
CVE-2020-23828 | Critical | 9.8 | 2020-09-15 | A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution (RCE) on the hosting web… |
CVE-2020-4703 | High | 8.0 | 2020-09-15 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute a… |
CVE-2020-10228 | High | 8.8 | 2020-09-14 | A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution. |
CVE-2020-25287 | High | 7.2 | 2020-09-13 | Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an admin/admin_ed… |
CVE-2020-25213 | Critical | 10.0 | 2020-09-09 | The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsaf… |
CVE-2020-24199 | Critical | 9.8 | 2020-09-09 | Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code executi… |
CVE-2020-24195 | Critical | 9.1 | 2020-09-09 | An Arbitrary File Upload in the Upload Image component in Sourcecodester Online Bike Rental v1.0 allows authenticated administrator to conduct remote code exec… |
CVE-2020-6288 | Medium | 5.3 | 2020-09-09 | SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) allows an attacker with edit document rights to upload any file (includin… |
CVE-2020-24986 | High | 7.2 | 2020-09-04 | Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site… |
CVE-2020-14008 | High | 7.2 | 2020-09-04 | Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to re… |
CVE-2020-25042 | High | 7.2 | 2020-09-03 | An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a… |
CVE-2020-24948 | High | 7.2 | 2020-09-03 | The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege use… |
CVE-2020-14209 | High | 8.8 | 2020-09-02 | Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar f… |
CVE-2020-23829 | High | 8.8 | 2020-09-01 | interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve… |
CVE-2020-24203 | Critical | 9.8 | 2020-08-27 | Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows… |
CVE-2020-24202 | Critical | 9.8 | 2020-08-27 | File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers… |
CVE-2020-24196 | High | 7.2 | 2020-08-27 | An Arbitrary File Upload in Vehicle Image Upload in Online Bike Rental v1.0 allows authenticated admin to conduct remote code execution. |
CVE-2020-23972 | High | 7.5 | 2020-08-27 | In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload… |
CVE-2020-15645 | High | 8.8 | 2020-08-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is… |
CVE-2020-24186 | Critical | 10.0 | 2020-08-24 | A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any… |
CVE-2020-22722 | High | 7.8 | 2020-08-14 | Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain… |
CVE-2020-22721 | High | 7.8 | 2020-08-14 | A File Upload Vulnerability in PNotes - Andrey Gruber PNotes.NET v3.8.1.2 allows a local attacker to execute arbitrary code via the Miscellaneous " External Pr… |
CVE-2020-17462 | High | 7.8 | 2020-08-14 | CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798. |
CVE-2020-7302 | Medium | 5.4 | 2020-08-13 | Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload mal… |
CVE-2020-6293 | Medium | 6.5 | 2020-08-12 | SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to upload a malicious file and also to access, modi… |
CVE-2020-15649 | Medium | 5.5 | 2020-08-10 | Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files… |
CVE-2020-17452 | High | 7.2 | 2020-08-09 | flatCore before 1.5.7 allows upload and execution of a .php file by an admin. |
CVE-2020-14488 | High | 8.8 | 2020-07-29 | OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the s… |
CVE-2020-11476 | High | 7.2 | 2020-07-28 | Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file. |
CVE-2020-9309 | High | 8.8 | 2020-07-15 | Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TX… |
CVE-2020-14066 | High | 8.8 | 2020-07-15 | IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access. |
CVE-2020-14065 | Medium | 6.5 | 2020-07-15 | IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space. |
CVE-2020-12854 | High | 8.8 | 2020-07-15 | A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a… |
CVE-2020-1469 | High | 7.5 | 2020-07-14 | A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial of Service Vulnerability'. |
CVE-2019-20897 | Medium | 6.5 | 2020-07-13 | The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG… |
CVE-2020-8181 | Medium | 4.3 | 2020-07-10 | A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. |
CVE-2020-13994 | High | 8.8 | 2020-07-09 | An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the server via a ticket because of improper ac… |
CVE-2020-13443 | High | 8.8 | 2020-06-24 | ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft… |
CVE-2020-13887 | High | 8.8 | 2020-06-22 | documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder. |
CVE-2020-8162 | High | 7.5 | 2020-06-19 | A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Conten… |
CVE-2020-12005 | High | 7.5 | 2020-06-15 | FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 1… |
CVE-2020-4470 | High | 8.0 | 2020-06-15 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute a… |
CVE-2020-14067 | Critical | 9.8 | 2020-06-15 | The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP c… |
CVE-2019-15123 | High | 7.2 | 2020-06-12 | The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious… |
CVE-2020-13855 | High | 7.2 | 2020-06-11 | Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature. |
CVE-2020-13852 | High | 7.2 | 2020-06-11 | Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature. |
CVE-2020-12800 | Critical | 9.8 | 2020-06-08 | The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting… |
CVE-2018-21244 | Critical | 9.8 | 2020-06-04 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-… |
CVE-2018-21243 | Medium | 6.5 | 2020-06-04 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used. |
CVE-2020-12846 | High | 8.0 | 2020-06-03 | Zimbra before 8.8.15 Patch 10 and 9.x before 9.0.0 Patch 3 allows remote code execution via an avatar file. There is potential abuse of /service/upload servlet… |
CVE-2020-12675 | High | 8.8 | 2020-05-29 | The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation… |
CVE-2020-13442 | Critical | 9.8 | 2020-05-25 | A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP file via dext5handler.jsp handler becaus… |
CVE-2020-13384 | High | 8.8 | 2020-05-22 | Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=filesmanager because, for example, .php fil… |
CVE-2020-1112 | Critical | 9.9 | 2020-05-21 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content… |
CVE-2020-1102 | High | 8.8 | 2020-05-21 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-1024 | High | 8.8 | 2020-05-21 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-1023 | High | 8.8 | 2020-05-21 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-12828 | Critical | 9.8 | 2020-05-21 | An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Bindin… |
CVE-2020-13241 | High | 7.8 | 2020-05-20 | Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with t… |
CVE-2020-11807 | High | 7.8 | 2020-05-19 | Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrary PHP code (and som… |
CVE-2020-12255 | High | 8.8 | 2020-05-18 | rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a file upload by chec… |
CVE-2020-13128 | High | 7.5 | 2020-05-18 | An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thr… |
CVE-2020-13126 | Critical | 9.9 | 2020-05-17 | An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An att… |
CVE-2020-5577 | High | 8.8 | 2020-05-14 | Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7)… |
CVE-2020-11108 | High | 8.8 | 2020-05-11 | The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing… |
CVE-2020-5880 | High | 7.1 | 2020-04-30 | Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary files on the BIG-IP system, bypassing t… |
CVE-2020-11943 | High | 8.8 | 2020-04-29 | An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload. |
CVE-2020-12252 | Medium | 6.2 | 2020-04-29 | An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file… |
CVE-2020-11817 | Critical | 9.8 | 2020-04-27 | In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As a result of that, an attacker can exec… |
CVE-2020-12077 | High | 8.8 | 2020-04-23 | The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capability checks), leadi… |
CVE-2020-7055 | Critical | 9.9 | 2020-04-22 | An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code… |
CVE-2020-11011 | Critical | 9.9 | 2020-04-22 | In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arbitrary code. This is patched in version… |
CVE-2020-10569 | Critical | 9.8 | 2020-04-21 | SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access t… |
CVE-2020-11815 | Critical | 9.8 | 2020-04-16 | In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value. As a result of that, an attacker can execute a… |
CVE-2020-11811 | Critical | 9.8 | 2020-04-16 | In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After… |
CVE-2020-9280 | High | 7.5 | 2020-04-15 | In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This a… |
CVE-2020-0974 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0971 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0932 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0931 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2020-0929 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |