Lucene search
+L

46372 matches found

RedhatCVE
RedhatCVE
added 2026/04/20 7:22 p.m.11 views

CVE-2026-6518

The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arbitrary file upload and remote code execution in all versions up to, and including, 4.1.16 via the cmpthemeupdateinstall AJAX action. This is due to the function only checking for the publishpages...

8.8CVSS6.6AI score0.00867EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/20 6:31 p.m.10 views

EUVD-2026-23854

Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media upload and rename permissions to execute arbitrary JavaScript by bypassing MIME type validation and renaming uploaded files to executable extensions. Attackers can prepend a GIF8...

5.4CVSS6.2AI score0.00281EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/04/20 5:26 p.m.9 views

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload due to concatenating tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. An attacker can cause unintended files to be installed by supplying a specially crafted archi...

5CVSS5.3AI score0.00144EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/20 4:23 p.m.36 views

CVE-2026-40488 OpenMage LTS has Customer File Upload Extension Blocklist Bypass that Leads to Remote Code Execution

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, the product custom option file upload in OpenMage LTS uses an incomplete...

8.7CVSS0.00691EPSS
SaveExploits1References1
CVE
CVE
added 2026/04/20 4:23 p.m.39 views

CVE-2026-40488

OpenMage LTS (Magento LTS) before 20.17.0 uses an incomplete blocklist (forbidden_extensions = php,exe) for custom option file uploads. This can be bypassed by using alternative PHP executable extensions such as .phtml, .phar, .php3, .php4, .php5, .php7, and .pht, allowing files to be uploaded to...

8.8CVSS6AI score0.00691EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/20 4:23 p.m.4 views

CVE-2026-40488 OpenMage LTS has Customer File Upload Extension Blocklist Bypass that Leads to Remote Code Execution

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, the product custom option file upload in OpenMage LTS uses an incomplete...

8.7CVSS6AI score0.00691EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/04/20 3:31 p.m.9 views

EUVD-2026-23859

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process...

9.3CVSS6.1AI score0.1985EPSS
SaveExploits4References2
CVE
CVE
added 2026/04/20 2:30 p.m.27 views

CVE-2026-6650

Z-BlogPHP 1.7.5 contains a vulnerability in the App::UnPack function of /zb_users/plugin/AppCentre/app_upload.php (ZBA File Handler) that allows unrestricted file upload. Impact is described as unrestricted upload with network/remote initiation; exploitation is publicly available per the CVE entr...

5.8CVSS5.4AI score0.00223EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/20 2:16 p.m.7 views

CVE-2026-4048

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process...

8.4CVSS0.02132EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/20 1:36 p.m.23 views

CVE-2026-4048

CVE-2026-4048 : OS Command Injection RCE in Progress LoadMaster family (LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF UI). An authenticated attacker with high-level permissions (e.g., “All”) can execute arbitrary commands by exploiting unsanitized input in a cust...

8.4CVSS6.4AI score0.02132EPSS
SaveExploits0References1Affected Software3
ATTACKERKB
ATTACKERKB
added 2026/04/20 1:36 p.m.5 views

CVE-2026-4048

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process...

9.3CVSS6.1AI score0.1985EPSS
SaveExploits4References2Affected Software4
Patchstack
Patchstack
added 2026/04/20 10:34 a.m.13 views

WordPress Kids Online Store theme <= 0.8.9 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Kids Online Store versions = 0.8.9...

5.8AI score0.00273EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/04/20 10:33 a.m.8 views

WordPress Charity Zone theme <= 1.1.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Charity Zone versions = 1.1.1...

5.8AI score0.00434EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/04/20 10:33 a.m.10 views

WordPress Kids Gift Shop theme <= 0.5.4 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Kids Gift Shop versions = 0.5.4...

5.8AI score0.00434EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/04/20 10:33 a.m.15 views

WordPress Ecommerce Zone theme <= 0.9.7 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Ecommerce Zone versions = 0.9.7...

5.8AI score0.00434EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/04/20 10:32 a.m.10 views

WordPress Restaurant Zone theme <= 0.7.8 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Restaurant Zone versions = 0.7.8...

5.8AI score0.00434EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/04/20 10:29 a.m.11 views

WordPress Webenvo theme <= 0.0.6 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Denver Jackson in WordPress Theme Webenvo versions = 0.0.6...

5.8AI score0.00448EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2026/04/20 9:30 a.m.10 views

EUVD-2026-23811

A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the file FileTool.java of the component File Upload Endpoint. The manipulation of the argument Type results in path traversal. The attack may be launched remotely. The exploit has...

6.5CVSS5.3AI score0.00346EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/04/20 9:30 a.m.8 views

EUVD-2026-23787

A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangoblog/settings.py of the component File Upload Endpoint. Performing a manipulation of the argument SECRETKEY results in use of hard-coded cryptographic key . Remote exploitation o...

3.1CVSS4.9AI score0.00248EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/20 9:16 a.m.14 views

CVE-2026-6620

A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the file FileTool.java of the component File Upload Endpoint. The manipulation of the argument Type results in path traversal. The attack may be launched remotely. The exploit has...

6.5CVSS0.00346EPSS
SaveExploits0References4
Rows per page
Query Builder