Design/Logic Flaw

IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341...

CVE-2023-47706 IBM Security Guardium Key Lifecycle Manager file upload

IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341...

PT-2023-29876 · Themify · Themify Ultra

Name of the Vulnerable Software and Affected Versions: Themify Ultra versions through 7.3.5 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects Themify Ultra. No information is provided about the estimated number of potentially affected devices...

PT-2023-22237 · WordPress · Wordpress Job Board/Recruitment Plugin – Jobwp

Name of the Vulnerable Software and Affected Versions: WordPress Job Board and Recruitment Plugin – JobWP versions 2.0 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the WordPress Job Board and Recruitment Plugin – JobWP. No...

PT-2023-24289 · Woocommerce · Automatewoo

Name of the Vulnerable Software and Affected Versions: AutomateWoo versions 4.9.40 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo. This allows for the upload of files with potentially dangerous types,...

PT-2023-19325 · Woorockets · Woorockets Corsa

Name of the Vulnerable Software and Affected Versions: WooRockets Corsa versions 1.5 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability. This allows for the upload of files with potentially dangerous types, which could lead to securit...

PT-2023-20395 · Unknown · Zendrop – Global Dropshipping

Name of the Vulnerable Software and Affected Versions: Zendrop – Global Dropshipping versions 1.0.0 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects Zendrop – Global Dropshipping. This allows for the upload of files with potentiall...

PT-2023-27322 · WordPress · Premio Folders

Name of the Vulnerable Software and Affected Versions: Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager versions n/a through 2.9.2 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Premio Folde...

CVE-2023-47784

Unrestricted Upload of File with Dangerous Type vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a through 6.6.15. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2023-22150 · Unknown · Olive One Click Demo Import

Name of the Vulnerable Software and Affected Versions: Olive One Click Demo Import versions 1.1.1 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Olive One Click Demo Import. There is no information provided about the estimate...

PT-2023-31369 · Unknown · Symbiostock

Name of the Vulnerable Software and Affected Versions: Symbiostock versions n/a through 6.0.0 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Symbiostock software. This allows for the upload of files with potentially dangerous types, posi...

CVE-2023-46263

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remote code execution...

CVE-2023-46264

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution...

Wavelink Avalanche Security Vulnerability

Wavelink Avalanche is a mobile device management system from Wavelink, Inc. in the United States. A security vulnerability exists in Wavelink Avalanche version 6.4.1 and earlier versions, which stems from not limiting the number of uploads of dangerous types of files. An attacker can exploit the...

Wavelink Avalanche Security Vulnerability

Wavelink Avalanche is a mobile device management system from Wavelink, Inc. in the United States. A security vulnerability exists in Wavelink Avalanche version 6.4.1 and prior versions, which stems from not limiting the number of uploads of dangerous types of files. An attacker can exploit the...

CVE-2023-48394

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...

CVE-2023-48376

SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...

PT-2023-30815 · Kaifa Technology · Webitr

Name of the Vulnerable Software and Affected Versions: Kaifa Technology WebITR affected versions not specified Description: The file uploading function in Kaifa Technology WebITR does not restrict the upload of files with dangerous types. A remote attacker with regular user privileges can exploit...

The vulnerability of the SEMCMS_Upfile.php script of the website management system used by SemCms’ foreign trade enterprises allows a hacker to execute arbitrary code.

The vulnerability of the SEMCMSUpfile.php script in the website management system used by SemCms foreign trade enterprises involves unlimited downloading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

VulnCheck KEV: CVE-2023-48777

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1...