CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Rapid7 Vulnerability Database (full)•added 2021/03/05 12:00 a.m.•3 views

CVE-2021-27964: Unrestricted Upload of File with Dangerous Type

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file...

9.8CVSS8.2AI score0.47519EPSS

SaveExploits5References2

Prion•added 2021/02/01 11:15 p.m.•26 views

Design/Logic Flaw

FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp...

7.5CVSS9.3AI score0.97512EPSS

SaveExploits8References3Affected Software1

Cvelist•added 2021/02/01 10:08 p.m.•71 views

CVE-2021-3378

9.7AI score0.97512EPSS

SaveExploits8References3

Rapid7 Vulnerability Database (full)•added 2021/02/01 12:00 a.m.•4 views

CVE-2021-3378: Unrestricted Upload of File with Dangerous Type

9.8CVSS5.8AI score0.97512EPSS

SaveExploits8References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by