CWE-434 · Unrestricted Upload of File with Dangerous Type (page 40)
Page 40 of 43 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7268 | Critical | 10.0 | 2019-07-02 | Linear eMerge 50P/5000P devices allow Unauthenticated File Upload. |
CVE-2019-4292 | High | 8.8 | 2019-07-02 | IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable… |
CVE-2019-7274 | Critical | 9.8 | 2019-07-01 | Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root. |
CVE-2019-7669 | High | 8.8 | 2019-07-01 | Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to up… |
CVE-2019-13082 | Critical | 9.8 | 2019-06-30 | Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature. It extracts a ZIP archive before checking… |
CVE-2019-12744 | High | 7.5 | 2019-06-20 | SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a different vulnerability than CVE-2018-12940. |
CVE-2019-9842 | High | 7.2 | 2019-06-14 | madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk… |
CVE-2019-10959 | Critical | 10.0 | 2019-06-13 | BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not impact the latest firmwa… |
CVE-2019-7838 | Critical | 9.8 | 2019-06-12 | ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerability. Successful exp… |
CVE-2019-4069 | High | 8.8 | 2019-06-07 | IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker to upload malicious content. IBM X-Forc… |
CVE-2019-4056 | Medium | 4.3 | 2019-06-06 | IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files. IBM X-Force ID… |
CVE-2019-9189 | High | 8.8 | 2019-06-05 | Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller… |
CVE-2019-9642 | Critical | 9.8 | 2019-06-05 | An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possible to evaluate malicious PHP code by pl… |
CVE-2019-1861 | High | 7.2 | 2019-06-05 | A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code. Th… |
CVE-2019-5357 | High | 8.8 | 2019-06-05 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. |
CVE-2019-12548 | High | 8.8 | 2019-06-03 | Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo. |
CVE-2019-11185 | Critical | 9.8 | 2019-06-03 | The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability. This results from an incomplete patch for CVE… |
CVE-2019-12377 | Critical | 9.8 | 2019-06-03 | A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 allows arbitrary… |
CVE-2019-7816 | Critical | 9.8 | 2019-05-24 | ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. Successful explo… |
CVE-2016-10758 | High | 8.8 | 2019-05-24 | PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the image_name paramet… |
CVE-2016-10752 | Critical | 9.8 | 2019-05-24 | serendipity_moveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless fil… |
CVE-2016-10751 | High | 7.2 | 2019-05-24 | osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administra… |
CVE-2018-19612 | High | 8.8 | 2019-05-24 | The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code. |
CVE-2019-12150 | Critical | 9.8 | 2019-05-24 | Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted). The attacker must… |
CVE-2017-11561 | Medium | 6.5 | 2019-05-23 | An issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any file they want to share in the "Group Chat" or "Alarm" sectio… |
CVE-2019-6513 | Medium | 5.4 | 2019-05-21 | An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extens… |
CVE-2019-12185 | High | 8.8 | 2019-05-20 | eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An… |
CVE-2019-12170 | High | 8.8 | 2019-05-17 | ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload.php (aka backup) component. This may result in remote command ex… |
CVE-2019-11887 | Critical | 9.8 | 2019-05-17 | SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code execution. |
CVE-2019-12099 | High | 8.8 | 2019-05-14 | In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_fileinput.php and i… |
CVE-2019-8404 | Medium | 6.5 | 2019-05-14 | An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafted product image during the creation of a… |
CVE-2019-10869 | High | 8.1 | 2019-05-07 | Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an… |
CVE-2018-4063 | High | 8.8 | 2019-05-06 | An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP r… |
CVE-2019-11807 | High | 7.5 | 2019-05-06 | The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=update_attachment_wccm wccm_defau… |
CVE-2019-11615 | High | 8.8 | 2019-04-30 | /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdo… |
CVE-2019-11568 | High | 8.8 | 2019-04-27 | An issue was discovered in AikCms v2.0. There is a File upload vulnerability, as demonstrated by an admin/page/system/nav.php request with PHP code in a .php f… |
CVE-2019-8992 | High | 8.8 | 2019-04-24 | The administrative server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveM… |
CVE-2019-9951 | Critical | 9.8 | 2019-04-24 | Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My… |
CVE-2019-11447 | High | 8.8 | 2019-04-22 | An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_f… |
CVE-2019-11446 | High | 8.8 | 2019-04-22 | An issue was discovered in ATutor through 2.2.4. It allows the user to run commands on the server with the teacher user privilege. The Upload Files section in… |
CVE-2019-11445 | High | 7.2 | 2019-04-22 | OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home directory of the sit… |
CVE-2019-11401 | High | 7.2 | 2019-04-22 | A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extens… |
CVE-2019-11377 | High | 8.8 | 2019-04-20 | wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_… |
CVE-2019-11344 | Critical | 9.8 | 2019-04-19 | data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler x-httpd-php for a… |
CVE-2019-11223 | Critical | 9.8 | 2019-04-18 | An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading… |
CVE-2018-19453 | High | 8.8 | 2019-04-10 | Kentico CMS before 11.0.45 allows unrestricted upload of a file with a dangerous type. |
CVE-2019-4013 | Critical | 9.0 | 2019-04-10 | IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code executio… |
CVE-2019-3940 | Critical | 9.8 | 2019-04-09 | Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to… |
CVE-2019-11028 | High | 8.8 | 2019-04-09 | GAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to upload any file type to the server via the "Documents" area. T… |
CVE-2019-10478 | High | 7.2 | 2019-04-05 | An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. An unrestricted file upload vulnerability in the Front Circle Controller glyto… |
CVE-2019-3489 | High | 7.5 | 2019-04-01 | An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured t… |
CVE-2019-10652 | High | 7.2 | 2019-03-30 | An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature. |
CVE-2019-10647 | Critical | 9.8 | 2019-03-30 | ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the plugins/ueditor/php/controller.php?action=catchimage source[]… |
CVE-2019-10276 | Critical | 9.8 | 2019-03-29 | Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg c… |
CVE-2019-10012 | High | 7.5 | 2019-03-25 | Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and usi… |
CVE-2019-3495 | High | 8.8 | 2019-03-21 | An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an a… |
CVE-2018-20526 | Critical | 9.8 | 2019-03-21 | Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php. |
CVE-2018-19514 | Critical | 9.8 | 2019-03-21 | In Webgalamb through 7.0, an arbitrary code execution vulnerability could be exploited remotely without authentication. Exploitation requires authentication by… |
CVE-2019-9825 | Critical | 9.8 | 2019-03-14 | FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file e… |
CVE-2019-9692 | Medium | 6.5 | 2019-03-11 | class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, o… |
CVE-2019-9185 | High | 8.8 | 2019-03-07 | Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously u… |
CVE-2018-17418 | High | 7.2 | 2019-03-07 | Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugi… |
CVE-2019-9623 | Critical | 9.8 | 2019-03-07 | Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload_handler.php. |
CVE-2019-9617 | High | 8.8 | 2019-03-06 | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for exam… |
CVE-2019-9613 | High | 7.2 | 2019-03-06 | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for exam… |
CVE-2019-9612 | High | 8.8 | 2019-03-06 | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for exam… |
CVE-2019-9609 | High | 8.8 | 2019-03-06 | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for exam… |
CVE-2019-9608 | High | 8.8 | 2019-03-06 | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for exam… |
CVE-2019-9581 | High | 8.8 | 2019-03-06 | phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, bec… |
CVE-2019-9572 | High | 7.2 | 2019-03-05 | SchoolCMS version 2.3.1 allows file upload via the theme upload feature at admin.php?m=admin&c=theme&a=upload by using the .zip extension along with the _Stati… |
CVE-2019-9181 | High | 7.2 | 2019-02-26 | SchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c=site&a=save by using the .jpg extension, changing the Content-Typ… |
CVE-2018-20063 | High | 8.8 | 2019-02-25 | An issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File" vulnerability exists in the image-upload form (available in the descrip… |
CVE-2019-9050 | High | 7.2 | 2019-02-23 | An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a ZIP archive, which is… |
CVE-2019-9042 | High | 7.2 | 2019-02-23 | An issue was discovered in Sitemagic CMS v4.4. In the index.php?SMExt=SMFiles URI, the user can upload a .php file to execute arbitrary code, as demonstrated b… |
CVE-2019-8942 | High | 8.8 | 2019-02-20 | WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, su… |
CVE-2019-8933 | High | 8.8 | 2019-02-19 | In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this fi… |
CVE-2019-8433 | High | 7.5 | 2019-02-18 | JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file. |
CVE-2019-8394 | Medium | 6.5 | 2019-02-17 | Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization. |
CVE-2019-8362 | High | 7.5 | 2019-02-16 | DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php, as demonstrated by a dede/album_edit.php?dopost=save&formzip… |
CVE-2019-0259 | Critical | 9.8 | 2019-02-15 | SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script files) without proper file format valida… |
CVE-2019-7721 | High | 7.5 | 2019-02-11 | lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters. |
CVE-2019-7684 | Critical | 9.8 | 2019-02-09 | inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. The vulnerable code location is com.inxedu.os.common.control… |
CVE-2019-6139 | Critical | 9.8 | 2019-02-07 | Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnera… |
CVE-2019-0017 | Medium | 6.5 | 2019-01-15 | The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images o… |
CVE-2018-1969 | Critical | 9.0 | 2019-01-14 | IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's… |
CVE-2018-16169 | High | 8.8 | 2019-01-09 | Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors. |
CVE-2019-5009 | High | 7.2 | 2019-01-04 | Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size… |
CVE-2018-20166 | High | 8.8 | 2019-01-02 | A file-upload vulnerability exists in Rukovoditel 2.3.1. index.php?module=configuration/save allows the user to upload a background image, and mishandles exten… |
CVE-2018-5204 | Critical | 9.8 | 2018-12-28 | ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary fi… |
CVE-2018-15333 | Medium | 5.5 | 2018-12-28 | On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download… |
CVE-2018-7836 | Critical | 9.8 | 2018-12-24 | An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and exe… |
CVE-2018-1000839 | High | 8.8 | 2018-12-20 | LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear… |
CVE-2018-1000811 | High | 8.8 | 2018-12-20 | bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Comma… |
CVE-2018-19789 | Medium | 5.3 | 2018-12-18 | An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1… |
CVE-2018-6152 | Critical | 9.6 | 2018-12-04 | The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0… |
CVE-2018-16097 | Medium | 6.5 | 2018-11-30 | LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due t… |
CVE-2018-16093 | Medium | 6.5 | 2018-11-30 | In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a back… |
CVE-2018-15537 | High | 8.8 | 2018-11-29 | Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP req… |
CVE-2018-19692 | Critical | 9.8 | 2018-11-29 | An issue was discovered in tp5cms through 2017-05-25. admin.php/upload/picture.html allows remote attackers to execute arbitrary PHP code by uploading a .php f… |
CVE-2018-17936 | Critical | 9.8 | 2018-11-27 | NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which… |