Lucene search
+L

47718 matches found

Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.13 views

PT-2026-72147

Name of the Vulnerable Software and Affected Versions MaxUpload – Big File Uploads – Increase Maximum File Upload Size versions prior to 1.4.1 Description An arbitrary file upload issue exists in the handle upload function. A filename-validation mismatch occurs because extension and MIME checks a...

8.8CVSS5.9AI score0.0058EPSS
SaveExploits0References11
NVD
NVD
added 2026/08/14 6:17 p.m.12 views

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

8.8CVSS0.01068EPSS
SaveExploits2References1
NVD
NVD
added 2026/08/14 6:17 p.m.17 views

CVE-2026-19681

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...

9.9CVSS0.07801EPSS
SaveExploits4References1
EUVD
EUVD
added 2026/08/14 5:45 p.m.15 views

EUVD-2026-58745

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...

9.4CVSS5.9AI score0.07801EPSS
SaveExploits4References1
ATTACKERKB
ATTACKERKB
added 2026/08/14 5:45 p.m.11 views

CVE-2026-19681

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...

5.8AI score0.07801EPSS
SaveExploits4References2
Vulnrichment
Vulnrichment
added 2026/08/14 5:45 p.m.13 views

CVE-2026-19681 Command Injection

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...

9.9CVSS5.8AI score0.07801EPSS
SaveExploits4References1
Cvelist
Cvelist
added 2026/08/14 5:45 p.m.35 views

CVE-2026-19681 Command Injection

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...

9.9CVSS0.07801EPSS
SaveExploits4References1
CVE
CVE
added 2026/08/14 5:45 p.m.82 views

CVE-2026-19681

CVE-2026-19681 is an authenticated command-injection vulnerability in Security Center tied to file upload processing. The issue could allow arbitrary OS command execution after uploading a crafted file, with impact on confidentiality, integrity, and availability reported as High. Tenable’s adviso...

9.9CVSS5.8AI score0.07801EPSS
SaveExploits4References1Affected Software1
EUVD
EUVD
added 2026/08/14 5:35 p.m.7 views

EUVD-2026-58741

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

8.7CVSS5.4AI score0.01068EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2026/08/14 5:35 p.m.34 views

CVE-2026-19679 Improper Input Validation

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

8.8CVSS0.01068EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2026/08/14 5:35 p.m.10 views

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

5.3AI score0.01068EPSS
SaveExploits2References2
CVE
CVE
added 2026/08/14 5:35 p.m.43 views

CVE-2026-19679

Affects Security Center; CVE-2026-19679 is described as an input validation issue in the file-upload handling where insufficient sanitization of filenames could contribute to a downstream command injection. Tenable’s advisory for Security Center version 6.9.0 notes fixes that upgrade core compone...

8.8CVSS5.3AI score0.01068EPSS
SaveExploits2References1Affected Software1
NVD
NVD
added 2026/08/14 5:17 p.m.6 views

CVE-2026-19839

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function savedoctor of the file /savefile.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...

5.8CVSS0.00227EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/14 4:15 p.m.9 views

EUVD-2026-58713

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function savedoctor of the file /savefile.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...

5.1CVSS5.1AI score0.00227EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/08/14 3:39 p.m.9 views

CVE-2026-66271

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

7.2CVSS5.4AI score0.00522EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/14 3:36 p.m.8 views

CVE-2026-66270

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

5.4AI score0.00423EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/14 3:36 p.m.10 views

CVE-2026-66270

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

7.2CVSS5.4AI score0.00423EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/14 3:36 p.m.39 views

CVE-2026-66270

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

7.2CVSS0.00423EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/14 3:36 p.m.8 views

EUVD-2026-58687

Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

7.2CVSS5.5AI score0.00423EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/14 3:36 p.m.24 views

CVE-2026-66270

Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 are affected by an Unrestricted Upload of File with Dangerous Type vulnerability. A high-privileged attacker with remote access could exploit this to achieve Remote Code Execution. The affected component is the WMS upload handling (versi...

7.2CVSS5.4AI score0.00423EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder