Lucene search
+L

1510 matches found

Cvelist
Cvelist
added 2023/08/04 5:17 p.m.42 views

CVE-2023-4159 Unrestricted Upload of File with Dangerous Type in omeka/omeka-s

Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3...

9.9CVSS9AI score0.00995EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/04 5:17 p.m.29 views

CVE-2023-4159 Unrestricted Upload of File with Dangerous Type in omeka/omeka-s

Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3...

9.9CVSS9.3AI score
SaveExploits0References4
attackerkb
attackerkb
added 2023/08/01 5:15 p.m.8 views

CVE-2023-33493

An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer ajaxmanager module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions...

9.8CVSS5.8AI score0.00888EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/01 5:15 p.m.8 views

CVE-2023-33493

An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer ajaxmanager module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions...

9.8CVSS5.8AI score0.00888EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/01 5:15 p.m.19 views

Unrestricted file upload

An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer ajaxmanager module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions...

7.5CVSS9.4AI score0.00888EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/01 12:00 a.m.10 views

PT-2023-24363 · Prestashop +1 · Ajaxmanager File/Database Explorer +1

Name of the Vulnerable Software and Affected Versions: PrestaShop versions through 2.3.0 Description: The issue allows remote attackers to upload dangerous files without restrictions due to an Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database...

9.8CVSS9.3AI score0.00888EPSS
SaveExploits0References3
OSV
OSV
added 2023/07/30 8:15 a.m.12 views

CVE-2023-32225

Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...

7.2CVSS5.8AI score0.00649EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/30 12:00 a.m.14 views

Sysaid Technologies Sysaid 代码问题漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. A security vulnerability exists in Sysaid Technologies Sysaid versions prior to 23.2.14 b18, which stems from a malicious user with administrative privileges may be able to upload dangerous...

9.8CVSS7AI score0.00649EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/07/21 6:02 a.m.10 views

GBrowse vulnerable to unrestricted upload of files with dangerous types

Overview GBrowse provided by Generic Model Organism Database Project is a web-based genome browser. GBrowse allows the users to upload their own data in several file formats see "GBrowse User Uploads". The affected versions of GBrowse accept files with any formats uploaded CWE-434, and place them...

9.8CVSS7.8AI score0.0111EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/07/21 12:00 a.m.10 views

PT-2023-4092 · Gbrowse · Gbrowse

Name of the Vulnerable Software and Affected Versions: GBrowse affected versions not specified Description: The issue allows for the upload of files with any format, which are then placed in an area accessible through unauthenticated web requests. This enables anyone who can upload files through...

9.8CVSS9.8AI score0.0111EPSS
SaveExploits0References15
OSV
OSV
added 2023/07/20 3:15 a.m.10 views

CVE-2023-37289

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...

9.8CVSS5.9AI score0.00928EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/20 12:00 a.m.7 views

PT-2023-25886 · Unknown · Infodoc Document On-Line Submission/Approval System

Name of the Vulnerable Software and Affected Versions: InfoDoc Document On-line Submission and Approval System versions 22547, 22567 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type in the file uploading function. This allows an unauthenticated remote attack...

9.8CVSS9.5AI score0.00928EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.11 views

The vulnerability of the software file loading function in OMICARD EDM ITPison allows a perpetrator to execute arbitrary commands.

The vulnerability of the software file loading function in OMICARD EDM ITPison involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS8.1AI score0.00928EPSS
SaveExploits0References3
Prion
Prion
added 2023/07/16 1:15 a.m.29 views

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10...

5.8CVSS6.9AI score0.01008EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/07/16 12:00 a.m.20 views

Admidio 代码问题漏洞

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A code issue vulnerability exists in versions prior to admidio 4.2.10 that stems from not limiting the number of uploads of dangero...

7.2CVSS6.7AI score0.01008EPSS
SaveExploits1References3
OSV
OSV
added 2023/06/30 9:11 p.m.24 views

CVE-2023-3491 Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling

Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3...

8CVSS8.1AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/06/30 9:11 p.m.14 views

CVE-2023-3491 Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling

Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3...

8CVSS6.8AI score0.00889EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/06/30 12:00 a.m.13 views

fossbilling 代码问题漏洞

fossbilling is a free open source solution for efficient billing and customer management. A code issue vulnerability exists in versions prior to fossbilling 0.5.3 that stems from the unrestricted upload of dangerous types of files...

8.8CVSS7.7AI score0.00889EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2023/06/24 7:28 p.m.19 views

Exploit for Unrestricted Upload of File with Dangerous Type in Tecrail Responsive_Filemanager

CVE-2022-44276-PoC PoC for Responsive Filemanager 9.12.0...

9.8CVSS7.4AI score0.02302EPSS
SaveExploits2
attackerkb
attackerkb
added 2023/06/16 2:31 a.m.7 views

CVE-2023-32752

L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt servi...

9.8CVSS7.5AI score0.00942EPSS
SaveExploits0References2
Rows per page
Query Builder