17502 matches found
CVE-2024-51365
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2024-51366
An arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows attackers to execute arbitrary code via uploading a crafted .conf file...
PT-2024-34608
Name of the Vulnerable Software and Affected Versions ModbusMechanic version 3.0 Description The issue allows attackers to execute arbitrary code by uploading a crafted .xml file, exploiting an arbitrary file upload vulnerability. Recommendations For ModbusMechanic version 3.0, at the moment, the...
CVE-2024-51367
An arbitrary file upload vulnerability exists in the BlackBoard Learn learning management system, specifically affecting version 2.0.0.2 and earlier. The flaw resides in the \Users\username.BlackBoard component, where an attacker can execute arbitrary code by uploading a specially crafted .xml fi...
CVE-2024-51364
ModbusMechanic v3.0 and earlier versions are vulnerable to an arbitrary file upload vulnerability. An attacker can achieve arbitrary code execution by uploading a carefully crafted .xml file . A Proof of Concept (PoC) exists for this vulnerability, which is associated with insecure deserializatio...
CVE-2024-51366
The translation memory application OmegaT is impacted by an arbitrary file upload vulnerability in the \Roaming\Omega component, specifically affecting version v6.0.1 and earlier. An attacker can exploit this flaw by uploading a crafted .conf file , which leads to arbitrary code execution . While...
CVE-2024-51364
An arbitrary file upload vulnerability in ModbusMechanic v3.0 allows attackers to execute arbitrary code via uploading a crafted .xml file...
CVE-2024-51364: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in ModbusMechanic v3.0 allows attackers to execute arbitrary code via uploading a crafted .xml file...
CVE-2024-51366: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows attackers to execute arbitrary code via uploading a crafted .conf file...
Blackboard Learn security vulnerabilities
Blackboard Learn is a learning management system from Blackboard, Inc. A security vulnerability exists in Blackboard Learn version 2.0.0.2 and earlier, which stems from an arbitrary file upload vulnerability in the UserSusername.BlackBoard component that allows an attacker to execute arbitrary co...
OmegaT security vulnerabilities
OmegaT is a translation memory application open-sourced by OmegaT. A security vulnerability exists in OmegaT 6.0.1 and earlier versions, which stems from an arbitrary file upload vulnerability in RoamingOmega that allows an attacker to execute arbitrary code by uploading a crafted .conf file...
TRCore DVC File Upload Vulnerability (CNVD-2024-46435)
TRCore DVC is a file insurance system from TRCore China. TRCore DVC suffers from a file upload vulnerability that can be exploited by an attacker to upload arbitrary files to any directory and achieve arbitrary code execution by uploading a webshell...
CVE-2024-51364
An arbitrary file upload vulnerability in ModbusMechanic v3.0 allows attackers to execute arbitrary code via uploading a crafted .xml file...
CVE-2024-51366
An arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows attackers to execute arbitrary code via uploading a crafted .conf file...
CVE-2024-51367
An arbitrary file upload vulnerability in the component \Users\username.BlackBoard of BlackBoard v2.0.0.2 allows attackers to execute arbitrary code via uploading a crafted .xml file...
CVE-2024-51365
CVE-2024-51365 entry is rejected/not used; withdrawn by CNA and not a security issue.
CVE-2024-51367: Improper Control of Generation of Code
An arbitrary file upload vulnerability in the component \Users\username.BlackBoard of BlackBoard v2.0.0.2 allows attackers to execute arbitrary code via uploading a crafted .xml file...
PYSEC-2024-178
Litestar is an Asynchronous Server Gateway Interface ASGI framework. Prior to version 2.13.0, the multipart form parser shipped with litestar expects the entire request body as a single byte string and there is no default limit for the total size of the request body. This allows an attacker to...