Browse CVEs

CRITICAL 9.8 CVE-2023-41637 An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code vi… Realgimm No fix yet Fix from $2,3002023-08-31 HIGH 8.8 CVE-2023-41638 An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code… Realgimm No fix yet Fix from $1,9502023-08-31 CRITICAL 9.8 CVE-2023-4596EPSS 13% The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to t… Forminator after 1.24.6 Fix from $2,3002023-08-30 CRITICAL 9.8 CVE-2020-18912 An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog.php. Ear No fix yet Fix from $2,3002023-08-29 HIGH 7.2 CVE-2023-40825 An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list. Perfreeblog No fix yet Fix from $1,9502023-08-28 CRITICAL 9.8 CVE-2023-38029 Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. … Adm 100 Firmware Mitigation only Fix from $2,3002023-08-28 CRITICAL 9.8 CVE-2023-4559 A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui. Affected by this issue is some unknown functionality of the… Laiketui Mitigation only Fix from $2,3002023-08-27 CRITICAL 9.8 CVE-2023-32757 e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without … U Office Force Mitigation only Fix from $2,3002023-08-25 HIGH 7.2 CVE-2023-24517 Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this … Pandora Fms after 767 Fix from $1,9502023-08-22 HIGH 8.8 CVE-2023-38836EPSS 74% File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks. Boidcms Mitigation only Fix from $1,9502023-08-21 HIGH 8.8 CVE-2023-4409 A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue is some unknown functionality.… Nbs\&happysoftwechat No fix yet Fix from $1,9502023-08-18 CRITICAL 9.8 CVE-2023-39970 Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution. Acymailing Starter after 8.5.0 Fix from $2,3002023-08-17 HIGH 7.2 CVE-2023-31946 File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the… Online Travel Agency System No fix yet Fix from $1,9502023-08-17 HIGH 7.2 CVE-2023-31941 File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the… Online Travel Agency System No fix yet Fix from $1,9502023-08-17 CRITICAL 9.8 CVE-2023-39115EPSS 8% install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document. Complete Online Matrimonial Website System Script No fix yet Fix from $2,3002023-08-16 CRITICAL 9.8 CVE-2023-38915 File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function. Easyadmin8 No fix yet Fix from $2,3002023-08-15 MEDIUM 6.5 CVE-2023-28480 An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform allows users to define new User Defined Functions (UDFs) from C/C++ c… Tigergraph No fix yet Fix from $1,6002023-08-14 MEDIUM 6.5 CVE-2023-28482 An issue was discovered in Tigergraph Enterprise 3.7.0. A single TigerGraph instance can host multiple graphs that are accessed by multiple different… Tigergraph No fix yet Fix from $1,6002023-08-14 CRITICAL 9.8 CVE-2020-36082 File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshe… Bloofoxcms No fix yet Fix from $2,3002023-08-11 CRITICAL 9.8 CVE-2023-32562EPSS 46% An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve… Avalanche 6.4.1+ Fix from $2,3002023-08-10 CRITICAL 9.8 CVE-2023-32564EPSS 44% An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve… Avalanche 6.4.1+ Fix from $2,3002023-08-10 CRITICAL 9.8 CVE-2023-39776 A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file. Ticket Support Script Mitigation only Fix from $2,3002023-08-10 HIGH 8.8 CVE-2023-4243 The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, … Full Customer after 2.2.3 Fix from $1,9502023-08-09 CRITICAL 9.8 CVE-2023-4186 A vulnerability was found in SourceCodester Pharmacy Management System 1.0. It has been declared as critical. Affected by this vulnerability is an un… Pharmacy Management System No fix yet Fix from $2,3002023-08-06 HIGH 7.2 CVE-2020-23564 File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php. Semcms No fix yet Fix from $1,9502023-08-05 CRITICAL 9.8 CVE-2023-39346 LinuxASMCallGraph is software for drawing the call graph of the programming code. Linux ASMCallGraph before commit 20dba06bd1a3cf260612d4f21547c25002… Linuxasmcallgraph 2022-02-08+ Fix from $2,3002023-08-04 HIGH 8.8 CVE-2023-4159 Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3. Omeka S 4.0.3+ Fix from $1,9502023-08-04 HIGH 7.2 CVE-2023-38947 An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a cr… Wbce Cms No fix yet Fix from $1,9502023-08-03 HIGH 8.8 CVE-2023-36298 DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE). Dedecms No fix yet Fix from $1,9502023-08-03 HIGH 8.8 CVE-2023-36299 A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and options-general parameters in in… Typecho Patch available Fix from $1,9502023-08-03