PT-2019-7747 · WordPress · Neosense Theme

Name of the Vulnerable Software and Affected Versions: Neosense theme versions prior to 1.8 for WordPress Description: The issue concerns an unrestricted file upload in the qquploader component of the Neosense theme. This allows for potential security risks due to the lack of restrictions on file...

BlockDev Sp. Z o.o: UNRESTRICTED FILE UPLOAD AT chat.makerdao.com

Uploading any file types to the company chat...

CVE-2019-13976

eGain Chat 15.0.3 allows unrestricted file upload...

CVE-2019-13976

eGain Chat 15.0.3 allows unrestricted file upload...

CVE-2019-13976

eGain Chat 15.0.3 allows unrestricted file upload...

CVE-2019-13976

CVE-2019-13976 : In eGain Chat 15.0.3, an unrestricted file upload vulnerability is present. The vulnerability affects the product/component as stated, with CVSSv2/3 base scores indicating HIGH to CRITICAL impact (network-based with low attack complexity and no authentication). The available docu...

CVE-2019-3960

CVE-2019-3960 affects WallacePOS 1.4.3. Affected component: web-based WallacePOS uploads allowing unrestricted file upload of dangerous types. Root cause per sources: remote, authenticated attacker can upload a malicious PHP file and execute arbitrary code. Impact per documents: arbitrary code ex...

CVE-2019-1010123

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via...

Design/Logic Flaw

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via...

CVE-2019-1010123

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via...

CVE-2019-1010062

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

PT-2019-4363 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.836 Description: The issue is related to a cwpsrv-xxx cookie that allows a normal user to upload a session file to the /tmp directory and use it to gain root user privileges. This is due to an unrestricted file...

CVE-2019-7257

Linear eMerge E3-Series devices allow Unrestricted File Upload...

CVE-2019-7257

Linear eMerge E3-Series devices allow Unrestricted File Upload...

Unrestricted file upload

Linear eMerge E3-Series devices allow Unrestricted File Upload...

CVE-2019-7257

Linear eMerge E3-Series devices allow Unrestricted File Upload...

Unrestricted file upload

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload...

PT-2019-18487 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Unrestricted File Upload. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

Mail.ru: Unrestricted File Upload To Xss Stored [ https://ideas.browser.mail.ru/ ]

Stored XSS in https://ideas.browser.mail.ru/ ideas.browser.mail.ru belongs to extended scope...

HPE Intelligent Management Center (IMC) Remote Code Execution Vulnerability (CNVD-2019-23765)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A FileUploadServlet unrestricted file upload remote code execution vulnerability exists in HPE Intelligent...