Lucene search
+L

1412 matches found

Positive Technologies
Positive Technologies
added 2024/02/28 12:0 a.m.6 views

PT-2024-14879 · Mollie · Mollie Payments For Woocommerce

Name of the Vulnerable Software and Affected Versions: Mollie Payments for WooCommerce versions prior to 7.3.12 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Mollie Payments for WooCommerce plugin. Recommendations: For versions prior to...

9.1CVSS9.1AI score0.00603EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/02/27 12:0 a.m.10 views

PT-2024-18433 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: freescout-helpdesk/freescout affected versions not specified Description: The issue is related to the unrestricted upload of files with dangerous types. This could potentially allow an attacker to upload malicious files, leading to various...

6.1CVSS6.4AI score0.00383EPSS
Exploits1References8
CNNVD
CNNVD
added 2024/02/27 12:0 a.m.8 views

freescout Code Issue Vulnerability

freescout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework. A code issue vulnerability exists in freescout that stems from allowing unlimited uploads of dangerous types of files...

6.1CVSS7.2AI score0.00383EPSS
Exploits1References2
OSV
OSV
added 2024/02/26 4:27 p.m.6 views

CVE-2024-25909

Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2...

8.8CVSS5.8AI score0.00643EPSS
Exploits0References1
OSV
OSV
added 2024/02/26 4:27 p.m.7 views

CVE-2024-25913

Unrestricted Upload of File with Dangerous Type vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2...

9.8CVSS7.3AI score0.0063EPSS
Exploits0References1
OSV
OSV
added 2024/02/26 4:27 p.m.7 views

CVE-2024-25925

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

9.8CVSS7.3AI score0.0063EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/02/26 12:0 a.m.6 views

PT-2024-21218 · WordPress · Woocommerce Checkout Field Editor

Name of the Vulnerable Software and Affected Versions: WooCommerce Easy Checkout Field Editor, Fees & Discounts versions n/a through 3.5.12 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the specified versions of WooCommerce Easy Checkout...

10CVSS9.1AI score0.0063EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/02/26 12:0 a.m.8 views

WordPress Plugin WP Media folder Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

9.9CVSS7.2AI score0.00643EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/26 12:0 a.m.4 views

flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version 2.33, which stems from an unrestricted upload of dangerously typed files allowed in updatesetting.php...

6.5CVSS7.2AI score0.00585EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/02/26 12:0 a.m.9 views

PT-2024-20510 · Bplugins Llc · Icons Font Loader

Name of the Vulnerable Software and Affected Versions: bPlugins LLC Icons Font Loader versions 1.1.4 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Icons Font Loader. This allows for the upload of files with potentially...

7.2CVSS9.6AI score0.00603EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/02/26 12:0 a.m.6 views

PT-2024-21205 · Skymoonlabs · Skymoonlabs Moveto

Name of the Vulnerable Software and Affected Versions: Skymoonlabs MoveTo versions n/a through 6.2 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects Skymoonlabs MoveTo. This allows for the upload of files with potentially dangerous types withou...

10CVSS9.3AI score0.0063EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/02/26 12:0 a.m.5 views

WordPress Plugin Moveto Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

10CVSS7.2AI score0.0063EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/26 12:0 a.m.7 views

WordPress Plugin Icons Font Loader Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

7.2CVSS7.1AI score0.00603EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/26 12:0 a.m.10 views

The vulnerability of the core.mediamanager component in the SCHLIX CMS content management system allows a hacker to execute arbitrary code.

The vulnerability of the core.mediamanager component in the SCHLIX CMS content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.3CVSS7.5AI score0.01158EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/20 12:0 a.m.15 views

The vulnerability of the file loading function of the corporate cloud storage system HGiga OAKlouds allows a attacker to execute arbitrary code.

The vulnerability of the file loading function of the corporate cloud storage system HGiga OAKlouds relates to the unlimited loading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted file...

10CVSS8.2AI score0.00942EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/02/09 6:15 p.m.2 views

DEBIAN-CVE-2023-50386

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.8CVSS7.5AI score0.8384EPSS
Exploits4References1
ATTACKERKB
ATTACKERKB
added 2024/02/02 1:15 p.m.4 views

CVE-2023-6675

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5...

9.8CVSS7.3AI score0.00579EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/02/02 1:15 p.m.5 views

CVE-2023-6675

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server.This issue affects CyberMath: from v.1.4 before v.1.5...

9.8CVSS5.8AI score0.00579EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2024/01/27 6:51 p.m.56 views

Exploit for Unrestricted Upload of File with Dangerous Type in Ispyconnect Agent_Dvr

CVE-2024-22515: File Upload Vulnerability in Agent DVR Inf...

8.8CVSS9.1AI score0.01198EPSS
Exploits1
OSV
OSV
added 2024/01/24 12:15 p.m.4 views

CVE-2024-22135

Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.3...

7.2CVSS5.8AI score0.00525EPSS
Exploits0References1
Rows per page
Query Builder