Lucene search
+L

47898 matches found

NVD
NVD
added 2026/01/19 6:16 p.m.13 views

CVE-2025-55251

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS0.00188EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/19 6:16 p.m.11 views

CVE-2025-52660

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS0.00298EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/19 6:16 p.m.14 views

CVE-2025-52660

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS6.2AI score0.00298EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/19 5:49 p.m.8 views

CVE-2025-52660 HCL AION is affected by an Host Header Injection vulnerability

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

2.7CVSS5.9AI score0.00298EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/19 5:49 p.m.11 views

EUVD-2026-3210

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

2.7CVSS5.9AI score0.00298EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/19 5:49 p.m.10 views

CVE-2025-52660

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS5.9AI score0.00298EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/01/19 5:49 p.m.31 views

CVE-2025-52660

HCL AION is affected by an Unrestricted File Upload vulnerability. Connected CNVD records describe an additional host header injection flaw in HCL AION, suggesting improper handling that can enable malicious file uploads and potential code execution or system compromise. The primary CVE entry and...

9.8CVSS5.9AI score0.00298EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/19 5:49 p.m.34 views

CVE-2025-52660 HCL AION is affected by an Host Header Injection vulnerability

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

2.7CVSS0.00298EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/19 5:39 p.m.34 views

CVE-2025-55251

Affected product: HCL AION. Vulnerability: Unrestricted File Upload. Impact statement: potential for unauthorized code execution or system compromise. Metrics (NVD): CVSS v3.1 base score 9.8, CRITICAL; attack vector NETWORK; user interaction NONE; privileges required NONE; confidentiality/integri...

9.8CVSS5.9AI score0.00188EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/01/19 5:39 p.m.14 views

EUVD-2026-3204

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

3.1CVSS5.9AI score0.00188EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/19 5:39 p.m.6 views

CVE-2025-55251 HCL AION is affected by an Unrestricted File Upload vulnerability

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

3.1CVSS5.9AI score0.00188EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/19 5:39 p.m.7 views

CVE-2025-55251

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

9.8CVSS5.9AI score0.00188EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/19 5:39 p.m.38 views

CVE-2025-55251 HCL AION is affected by an Unrestricted File Upload vulnerability

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

3.1CVSS0.00188EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/01/19 11:58 a.m.14 views

WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Mdr in WordPress Plugin Xpro Elementor Addons versions = 1.4.19.1...

9.1CVSS5.4AI score0.00345EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/19 12:00 a.m.29 views

PT-2026-3462

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

3.1CVSS5.9AI score0.00188EPSS
SaveExploits0References2
CNVD
CNVD
added 2026/01/19 12:00 a.m.4 views

News Portal Project file upload vulnerability

News Portal Project is a news portal project developed by PHPGurukul. There is a file upload vulnerability in News Portal Project, which stems from the lack of effective validation for uploaded files in the upload.php file. Attackers can exploit this vulnerability to upload malicious files and...

9.8CVSS6.1AI score0.00539EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/01/19 12:00 a.m.18 views

PT-2026-3461

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise...

2.7CVSS5.9AI score0.00298EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/19 12:00 a.m.11 views

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from a file upload vulnerability that can be exploited by an attacker to upload malicious files leading to arbitrary code execution or system compromise...

9.8CVSS6.3AI score0.00188EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/01/18 5:37 a.m.202 views

Exploit for Code Injection in Iptanus Wordpress_File_Upload

No d...

9.8CVSS7AI score0.01474EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/01/18 2:26 a.m.17 views

CVE-2025-14632

The Filr – Secure document library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via unrestricted file upload in all versions up to, and including, 1.2.11 due to insufficient file type restrictions in the FILRUploader class. This makes it possible for authenticated attackers,...

4.4CVSS5AI score0.00215EPSS
SaveExploits0References1
Rows per page
Query Builder