CWE-434 · Unrestricted Upload of File with Dangerous Type (page 39)
Page 39 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-17403 | High | 8.8 | 2019-11-25 | Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution. |
CVE-2013-6234 | High | 8.0 | 2019-11-22 | Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading… |
CVE-2019-12409 | Critical | 9.8 | 2019-11-18 | The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configura… |
CVE-2019-12271 | Critical | 9.8 | 2019-11-18 | Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is no… |
CVE-2019-19084 | Medium | 4.3 | 2019-11-18 | In Octopus Deploy 3.3.0 through 2019.10.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted package, tri… |
CVE-2019-17058 | Critical | 9.1 | 2019-11-18 | Footy Tipping Software AFL Web Edition 2019 allows arbitrary file upload and resultant remote code execution because a whitelist can be bypassed by an Administ… |
CVE-2019-14467 | High | 7.8 | 2019-11-18 | The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album… |
CVE-2019-18952 | Critical | 9.8 | 2019-11-13 | SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a… |
CVE-2014-1214 | High | 8.8 | 2019-11-13 | views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary fi… |
CVE-2010-4661 | High | 7.8 | 2019-11-13 | udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules. |
CVE-2019-1443 | Medium | 6.5 | 2019-11-12 | An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authentica… |
CVE-2019-12719 | Critical | 9.8 | 2019-11-12 | An issue was discovered in Picture_Manage_mvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e. There is an incorrect access control vulnerability tha… |
CVE-2019-8140 | Medium | 4.9 | 2019-11-06 | An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipu… |
CVE-2019-8114 | High | 7.2 | 2019-11-05 | A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A… |
CVE-2019-8093 | High | 8.8 | 2019-11-05 | An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can leverage file u… |
CVE-2011-1134 | Critical | 9.8 | 2019-11-05 | Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manage… |
CVE-2010-3663 | High | 8.8 | 2019-11-04 | TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which co… |
CVE-2019-17325 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could… |
CVE-2019-18204 | High | 8.8 | 2019-10-30 | Zucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php files in order to achieve code execution. |
CVE-2018-18930 | High | 8.8 | 2019-10-29 | The Tightrope Media Carousel digital signage product 7.0.4.104 contains an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which ca… |
CVE-2019-14451 | Critical | 9.8 | 2019-10-25 | RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. W… |
CVE-2019-18417 | High | 8.8 | 2019-10-24 | Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs… |
CVE-2019-11021 | High | 7.2 | 2019-10-24 | admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution. NOTE: "While inadvertently allowi… |
CVE-2015-9499 | Critical | 9.8 | 2019-10-22 | The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive. |
CVE-2019-16530 | High | 7.2 | 2019-10-21 | Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution. |
CVE-2019-16700 | Critical | 9.8 | 2019-10-16 | The slub_events (aka SLUB: Event Registration) extension through 3.0.2 for TYPO3 allows uploading of arbitrary files to the webserver. For versions 1.2.2 and b… |
CVE-2019-17536 | Medium | 4.9 | 2019-10-13 | Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs t… |
CVE-2019-17490 | High | 8.8 | 2019-10-10 | app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by PHP code (with a… |
CVE-2015-9479 | Critical | 9.8 | 2019-10-10 | The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb… |
CVE-2015-9471 | Critical | 9.8 | 2019-10-10 | The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload. |
CVE-2018-21024 | Critical | 9.8 | 2019-10-08 | licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request. |
CVE-2019-17352 | High | 7.5 | 2019-10-08 | In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload any type of file. Fo… |
CVE-2019-14657 | High | 8.8 | 2019-10-08 | Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directo… |
CVE-2019-14656 | High | 8.8 | 2019-10-08 | Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account (with a password of user) can make… |
CVE-2019-15751 | Critical | 9.8 | 2019-10-07 | An unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to execute arbitrary code by uploading a SCORM file with an executa… |
CVE-2019-15748 | Critical | 9.8 | 2019-10-07 | SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing directly to affected pages. An unauthenticated attacker… |
CVE-2019-17188 | High | 7.2 | 2019-10-04 | An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An attacker can bypass a front-end restri… |
CVE-2019-11655 | High | 8.8 | 2019-10-04 | Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted Upload of File with… |
CVE-2019-15766 | High | 8.8 | 2019-10-03 | The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the… |
CVE-2019-17046 | High | 7.2 | 2019-09-30 | Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page. |
CVE-2019-15862 | High | 7.5 | 2019-09-26 | An issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote attackers to upload files without any extension (even if the a… |
CVE-2019-16720 | High | 7.5 | 2019-09-23 | ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news&action=catchimage, as demonstrated by uploading… |
CVE-2015-9402 | High | 8.8 | 2019-09-20 | The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload. |
CVE-2019-14916 | Medium | 6.5 | 2019-09-20 | An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload. |
CVE-2019-14252 | High | 7.2 | 2019-09-18 | An issue was discovered in the secure portal in Publisure 2.1.2. Once successfully authenticated as an administrator, one is able to inject arbitrary PHP code… |
CVE-2019-15843 | High | 7.4 | 2019-09-18 | A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle attack may… |
CVE-2016-10995 | Critical | 9.8 | 2019-09-18 | The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php. |
CVE-2019-6839 | High | 8.8 | 2019-09-17 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion… |
CVE-2019-15131 | Critical | 9.8 | 2019-09-17 | In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Cod… |
CVE-2019-8371 | High | 7.2 | 2019-09-16 | OpenEMR v5.0.1-6 allows code execution. |
CVE-2016-10959 | Medium | 6.5 | 2019-09-16 | The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php. |
CVE-2016-10958 | High | 7.5 | 2019-09-16 | The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php. |
CVE-2019-16318 | High | 8.8 | 2019-09-14 | In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonstrated by the failur… |
CVE-2016-10955 | Critical | 9.8 | 2019-09-13 | The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking. |
CVE-2016-10954 | Critical | 9.8 | 2019-09-13 | The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload. |
CVE-2019-16192 | Critical | 9.8 | 2019-09-09 | upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management… |
CVE-2019-16131 | High | 8.8 | 2019-09-09 | framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data… |
CVE-2019-13187 | Critical | 9.8 | 2019-09-05 | The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.p… |
CVE-2019-13976 | Critical | 9.8 | 2019-09-04 | eGain Chat 15.0.3 allows unrestricted file upload. |
CVE-2019-15813 | High | 8.8 | 2019-09-04 | Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell. |
CVE-2019-15866 | High | 8.8 | 2019-09-03 | The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider. |
CVE-2017-18592 | High | 7.5 | 2019-08-27 | The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads. |
CVE-2019-15649 | High | 8.8 | 2019-08-27 | The insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has insufficient restrictions on file upload. |
CVE-2019-15524 | Critical | 9.8 | 2019-08-26 | CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execu… |
CVE-2015-9340 | High | 7.5 | 2019-08-22 | The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess… |
CVE-2015-9339 | High | 7.5 | 2019-08-22 | The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files. |
CVE-2015-9338 | High | 7.5 | 2019-08-22 | The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files. |
CVE-2015-9341 | High | 7.5 | 2019-08-22 | The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files. |
CVE-2019-11031 | Critical | 9.8 | 2019-08-22 | Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe. An attacker can upload files with a… |
CVE-2018-18572 | High | 7.2 | 2019-08-22 | osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Because of this filter, script files with certain PHP-related e… |
CVE-2019-15091 | Critical | 9.8 | 2019-08-16 | filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload. |
CVE-2019-14755 | High | 8.8 | 2019-08-15 | The profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a File with a Dangerous Type. |
CVE-2019-5395 | High | 8.8 | 2019-08-09 | A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. |
CVE-2019-14748 | Medium | 5.4 | 2019-08-07 | An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was fo… |
CVE-2019-7930 | High | 7.2 | 2019-08-02 | A file upload restriction bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admi… |
CVE-2019-7912 | High | 7.2 | 2019-08-02 | A file upload filter bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenti… |
CVE-2019-7861 | High | 7.5 | 2019-08-02 | Insufficient server-side validation of user input could allow an attacker to bypass file upload restrictions in Magento 2.1 prior to 2.1.18, Magento 2.2 prior… |
CVE-2017-18435 | High | 7.3 | 2019-08-02 | cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238). |
CVE-2018-20926 | Medium | 6.7 | 2019-08-01 | cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380). |
CVE-2018-20925 | Medium | 6.7 | 2019-08-01 | cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379). |
CVE-2019-3960 | High | 7.2 | 2019-07-31 | Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote, authenticated attacker to execute arbitrary code by uploading a malicious… |
CVE-2015-5601 | High | 8.8 | 2019-07-29 | edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files. |
CVE-2019-10267 | High | 8.8 | 2019-07-26 | An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the… |
CVE-2019-1010209 | High | 7.5 | 2019-07-23 | GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in… |
CVE-2019-1010123 | High | 7.5 | 2019-07-23 | MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and… |
CVE-2019-12326 | High | 7.2 | 2019-07-22 | Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a manipulated ringtone f… |
CVE-2019-13984 | High | 8.8 | 2019-07-19 | Directus 7 API before 2.3.0 does not validate uploaded files. Regardless of the file extension or MIME type, there is a direct link to each uploaded file, acce… |
CVE-2019-13980 | High | 8.8 | 2019-07-19 | In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads/_/originals remote code executi… |
CVE-2019-13979 | High | 8.8 | 2019-07-19 | In Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads/_/originals remote code execution. |
CVE-2019-13973 | Critical | 9.8 | 2019-07-19 | LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used. |
CVE-2019-13359 | High | 7.5 | 2019-07-16 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory… |
CVE-2019-1010062 | Critical | 9.8 | 2019-07-16 | PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/ima… |
CVE-2019-10935 | High | 7.2 | 2019-07-11 | A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC… |
CVE-2019-10930 | High | 7.5 | 2019-07-11 | A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (A… |
CVE-2019-12803 | Critical | 9.8 | 2019-07-10 | In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, the specific upload web module doesn't verify the file extension and type, and an attacker can… |
CVE-2019-0327 | High | 7.2 | 2019-07-10 | SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7… |
CVE-2019-13464 | High | 7.5 | 2019-07-09 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, becau… |
CVE-2019-12971 | Critical | 9.8 | 2019-07-05 | BKS EBK Ethernet-Buskoppler Pro before 3.01 allows Unrestricted Upload of a File with a Dangerous Type. |
CVE-2019-13294 | Critical | 9.8 | 2019-07-04 | AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php do not have session control. Therefore an unauthenticated user… |
CVE-2019-7257 | Critical | 10.0 | 2019-07-02 | Linear eMerge E3-Series devices allow Unrestricted File Upload. |