Lucene search
+L

211 matches found

NVD
NVD
added 2020/01/03 9:15 p.m.26 views

CVE-2014-8516

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

10CVSS9.7AI score0.8168EPSS
SaveExploits7References4
Prion
Prion
added 2020/01/03 8:15 p.m.18 views

Unrestricted file upload

Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified...

7.5CVSS8.1AI score0.04798EPSS
SaveExploits4References2Affected Software1
Cvelist
Cvelist
added 2020/01/03 8:8 p.m.34 views

CVE-2014-8516

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

9.7AI score0.8168EPSS
SaveExploits7References4
CVE
CVE
added 2020/01/03 8:8 p.m.164 views

CVE-2014-8516

CVE-2014-8516 concerns Visual Mining NetCharts Server. The connected sources describe an unrestricted file upload vulnerability in the NetCharts Server web interface that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via u...

10CVSS9.6AI score0.8168EPSS
SaveExploits7References4Affected Software1
Prion
Prion
added 2019/11/22 7:15 p.m.18 views

Unrestricted file upload

Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload...

6CVSS7.7AI score0.06706EPSS
SaveExploits6References3Affected Software1
Prion
Prion
added 2019/04/18 6:29 p.m.10 views

Unrestricted file upload

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

7.5CVSS9.7AI score0.08762EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2019/04/18 6:29 p.m.17 views

CVE-2019-11223

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8CVSS9.7AI score0.08762EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2019/04/18 5:8 p.m.24 views

CVE-2019-11223

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8AI score0.08762EPSS
SaveExploits1References4
NVD
NVD
added 2018/07/31 2:29 p.m.25 views

CVE-2018-12940

Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to...

8.8CVSS7.6AI score0.02509EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/07/31 2:0 p.m.33 views

CVE-2018-12940

Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to...

7.6AI score0.02509EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/05/21 12:0 a.m.68 views

PhpCollab Arbitrary Code Execution Vulnerability

phpCollab is a Chinese plug-in support for project development management software . An arbitrary code execution vulnerability exists in PhpCollab. An attacker can execute arbitrary code by uploading a file with an executable extension...

8.8CVSS9AI score0.96068EPSS
SaveExploits9References1
Prion
Prion
added 2018/05/16 2:29 p.m.23 views

Unrestricted file upload

Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the tmp directory under the document...

6.5CVSS8.7AI score0.0122EPSS
SaveExploits2References1Affected Software1
Prion
Prion
added 2018/03/09 8:29 p.m.22 views

Unrestricted file upload

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

7.5CVSS8.3AI score0.02304EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/03/09 8:29 p.m.22 views

CVE-2014-2592

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8CVSS9.7AI score0.02304EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/09 8:0 p.m.30 views

CVE-2014-2592

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8AI score0.02304EPSS
SaveExploits0References1
CVE
CVE
added 2018/03/09 8:0 p.m.49 views

CVE-2014-2592

The CVE-2014-2592 entry concerns Aruba Web Management portal with an unrestricted file upload vulnerability that could allow remote attackers to execute arbitrary code by uploading a file with an executable extension. The NVD entry confirms a high-severity issue (CVSS v2/9.8 in v3) with network a...

9.8CVSS9.6AI score0.02304EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2017/10/17 3:29 p.m.15 views

Unrestricted file upload

Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in protected/controllers/ProfileController.php in X2Engine X2CRM before 4.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct...

6.5CVSS8.2AI score0.02906EPSS
SaveExploits0References5Affected Software1
Prion
Prion
added 2017/10/16 6:29 p.m.11 views

Unrestricted file upload

Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in an unspecified directory...

7.5CVSS8.2AI score0.15139EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2017/10/16 6:0 p.m.24 views

CVE-2015-2780

Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in an unspecified directory...

9.7AI score0.15139EPSS
SaveExploits1References3
NVD
NVD
added 2017/08/07 8:29 p.m.18 views

CVE-2015-5946

Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension...

7.8CVSS7.7AI score0.01654EPSS
SaveExploits1References3
Rows per page
Query Builder