Browse CVEs

CRITICAL 9.8 CVE-2023-52221 Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner and Inventory manager.This issue affects Barcode Scanner… Barcode Scanner And Inventory Manager 1.5.2+ Fix from $2,3002024-01-24 HIGH 8.8 CVE-2023-52324 An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installatio… Apex Central Mitigation only Fix from $1,9502024-01-23 HIGH 8.8 CVE-2024-23180 Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ve… A Blog Cms 2.10.50 / 2.11.58+ Fix from $1,9502024-01-23 CRITICAL 9.8 CVE-2024-0783 A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processing of the… Online Admission System No fix yet Fix from $2,3002024-01-22 HIGH 8.8 CVE-2024-22895 DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php. Dedecms No fix yet Fix from $1,9502024-01-22 CRITICAL 9.8 CVE-2023-51924 An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrar… Yonbip Mitigation only Fix from $2,3002024-01-20 CRITICAL 9.8 CVE-2023-51925 An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attack… Yonbip Mitigation only Fix from $2,3002024-01-20 CRITICAL 9.8 CVE-2023-51928 An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attack… Yonbip Mitigation only Fix from $2,3002024-01-20 CRITICAL 9.8 CVE-2021-31314 File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server. Terminal Security System No fix yet Fix from $2,3002024-01-20 CRITICAL 9.8 CVE-2023-27168 An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file. Write Back Manager No fix yet Fix from $2,3002024-01-19 CRITICAL 9.9 CVE-2023-40051 This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases p… Openedge 11.7.18 / 12.2.13+ Fix from $2,3002024-01-18 CRITICAL 9.8 CVE-2024-0648 A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/c… Yunyou Cms after 2.2.6 Fix from $2,3002024-01-17 CRITICAL 9.8 CVE-2024-20272 A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary f… Unity Connection 12.5.1.19017-4 / 14.0.1.14006-5+ Fix from $2,3002024-01-17 CRITICAL 9.8 CVE-2024-0643 Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker… Live Encoder Mitigation only Fix from $2,3002024-01-17 HIGH 8.8 CVE-2023-4536 The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing any authenticated users, such… My Account Page Editor 1.3.2+ Fix from $1,9502024-01-16 HIGH 7.2 CVE-2022-1538 Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary … Theme Demo Import 1.1.1+ Fix from $1,9502024-01-16 CRITICAL 9.8 CVE-2023-50729 Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows… Traccar 5.11+ Fix from $2,3002024-01-15 CRITICAL 9.8 CVE-2024-0505 A vulnerability was found in ZhongFuCheng3y Austin 1.0 and classified as critical. This issue affects the function getFile of the file com/java3y/aus… Austin No fix yet Fix from $2,3002024-01-13 CRITICAL 9.8 CVE-2024-0468 A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an… Fighting Cock Information System Mitigation only Fix from $2,3002024-01-12 MEDIUM 5.4 CVE-2023-51806 File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via a crafted file. Ujcms No fix yet Fix from $1,6002024-01-12 HIGH 7.2 CVE-2023-46474EPSS 21% File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to t… Pmb after 7.5.3 Fix from $1,9502024-01-11 HIGH 8.8 CVE-2023-6979 The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ivole_im… Customer Reviews For Woocommerce after 5.38.9 Fix from $1,9502024-01-11 HIGH 7.2 CVE-2023-6636 The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation o… Greenshift after 7.6.2 Fix from $1,9502024-01-11 HIGH 7.2 CVE-2023-6558 The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on th… Import Export Wordpress Users after 2.4.8 Fix from $1,9502024-01-11 CRITICAL 9.8 CVE-2023-6316 The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' fun… Mw Wp Form after 5.0.1 Fix from $2,3002024-01-11 CRITICAL 9.8 CVE-2023-6220 The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetforms_ajax_for… Piotnet Forms after 1.0.26 Fix from $2,3002024-01-11 HIGH 8.8 CVE-2023-49715 A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. … Avideo No fix yet Fix from $1,9502024-01-10 CRITICAL 9.8 CVE-2020-26629 A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker … Hospital Management System No fix yet Fix from $2,3002024-01-10 CRITICAL 9.8 CVE-2024-0352EPSS 73% A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage … Likeshop after 2.5.7.20210311 Fix from $2,3002024-01-09 CRITICAL 9.0 CVE-2023-50982 Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action in Admin_SmileysController do n… Stud.ip 5.0.9 / 5.1.7+ Fix from $2,3002024-01-08