Lucene search
+L

14875 matches found

OpenVAS
OpenVAS
added 2023/02/01 12:00 a.m.77 views

LimeSurvey <= 5.4.15 Multiple Vulnerabilities

LimeSurvey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:limesurvey:limesurvey";...

9.8CVSS7.6AI score0.01267EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2023/02/01 12:00 a.m.38 views

CVE-2023-23135

An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file...

7.5AI score0.01034EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/02/01 12:00 a.m.5 views

CVE-2023-23135

An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file...

7.3AI score0.01034EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/02/01 12:00 a.m.10 views

Serenissima Informatica Fast Checkin 代码问题漏洞

Serenissima Informatica Fast Checkin is an application from Serenissima, Inc. A security vulnerability exists in Serenissima Informatica Fast Checkin version 1.0, which originates from a vulnerability that allows an unauthenticated attacker to access the server via the web shell by uploading...

9.8CVSS8.6AI score0.01072EPSS
SaveExploits1References3
NVD
NVD
added 2023/01/31 6:15 p.m.43 views

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

9.8CVSS9.5AI score0.00888EPSS
SaveExploits1References2
Prion
Prion
added 2023/01/31 6:15 p.m.22 views

Design/Logic Flaw

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

7.5CVSS9.3AI score0.00888EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/01/31 12:00 a.m.12 views

i-librarian 代码问题漏洞

i-librarian is an online service from Martin Kucej Personal Developer that will organize your PDF files and office document collections. A security vulnerability exists in i-librarian version 4.10, which stems from an arbitrary file upload vulnerability in ajaxsupplement.php...

9.8CVSS8.5AI score0.00888EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/01/31 12:00 a.m.42 views

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

9.7AI score0.00888EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/01/31 12:00 a.m.14 views

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

9.5AI score0.00888EPSS
SaveExploits1References2
CVE
CVE
added 2023/01/31 12:00 a.m.75 views

CVE-2022-47854

CVE-2022-47854 affects i-librarian 4.10 and involves an Arbitrary file upload vulnerability in ajaxsupplement.php . The incident is categorized as a high‑impact issue (CVSS v3.1: 9.8, Critical, Network attack vector, no user interaction). Root cause details are not fully disclosed in the connecte...

9.8CVSS9.3AI score0.00888EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/01/31 12:00 a.m.20 views

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

9.8CVSS9.4AI score
SaveExploits0References4
NVD
NVD
added 2023/01/30 10:15 p.m.28 views

CVE-2022-48006

An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php...

9.8CVSS9.6AI score0.00935EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/01/30 8:31 p.m.42 views

CVE-2022-4395 Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE...

9.9AI score0.17569EPSS
SaveExploits3References1
Cvelist
Cvelist
added 2023/01/30 12:00 a.m.42 views

CVE-2022-48006

An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php...

9.8AI score0.00935EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/30 12:00 a.m.24 views

CVE-2022-48006

An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php...

9.8CVSS9.6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/01/30 12:00 a.m.15 views

CVE-2022-48006

An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php...

9.8AI score0.00935EPSS
SaveExploits1References1
NVD
NVD
added 2023/01/27 6:15 p.m.32 views

CVE-2022-48008

An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS9.6AI score0.01267EPSS
SaveExploits1References1
Prion
Prion
added 2023/01/27 6:15 p.m.18 views

Design/Logic Flaw

An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file...

7.5CVSS9.6AI score0.01267EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2023/01/27 12:00 a.m.16 views

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

Software JS Help Desk – Best Help Desk & Support Plugin Type Plugin Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A2: Broken Authentication Classification Arbitrary File Upload CVE CVE-2022-46839 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 21f585ae6afa Credi...

10CVSS6.6AI score0.00827EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/01/27 12:00 a.m.42 views

CVE-2022-48008

An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file...

9.8AI score0.01267EPSS
SaveExploits1References1
Rows per page
Query Builder