Lucene search
K

211 matches found

NVD
NVD
added 2020/01/03 9:15 p.m.11 views

CVE-2014-8516

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

10CVSS9.7AI score0.82704EPSS
Exploits7References4
Prion
Prion
added 2020/01/03 8:15 p.m.14 views

Unrestricted file upload

Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified...

7.5CVSS8.1AI score0.04136EPSS
Exploits4References2Affected Software1
CVE
CVE
added 2020/01/03 8:8 p.m.156 views

CVE-2014-8516

CVE-2014-8516 concerns Visual Mining NetCharts Server. The connected sources describe an unrestricted file upload vulnerability in the NetCharts Server web interface that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via u...

10CVSS9.6AI score0.82704EPSS
Exploits7References4Affected Software1
Cvelist
Cvelist
added 2020/01/03 8:8 p.m.13 views

CVE-2014-8516

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

9.7AI score0.82704EPSS
Exploits7References4
Prion
Prion
added 2019/11/22 7:15 p.m.12 views

Unrestricted file upload

Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload...

6CVSS7.7AI score0.01746EPSS
Exploits6References3Affected Software1
NVD
NVD
added 2019/04/18 6:29 p.m.8 views

CVE-2019-11223

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8CVSS9.7AI score0.44046EPSS
Exploits1References4
Prion
Prion
added 2019/04/18 6:29 p.m.7 views

Unrestricted file upload

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

7.5CVSS9.7AI score0.44046EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2019/04/18 5:8 p.m.13 views

CVE-2019-11223

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8AI score0.44046EPSS
Exploits1References4
NVD
NVD
added 2018/07/31 2:29 p.m.13 views

CVE-2018-12940

Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to...

8.8CVSS7.6AI score0.01798EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/07/31 2:0 p.m.11 views

CVE-2018-12940

Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to...

7.6AI score0.01798EPSS
Exploits0References2
CNVD
CNVD
added 2018/05/21 12:0 a.m.1 views

PhpCollab Arbitrary Code Execution Vulnerability

phpCollab is a Chinese plug-in support for project development management software . An arbitrary code execution vulnerability exists in PhpCollab. An attacker can execute arbitrary code by uploading a file with an executable extension...

8.8CVSS9AI score0.86913EPSS
Exploits9References1
Prion
Prion
added 2018/05/16 2:29 p.m.14 views

Unrestricted file upload

Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the tmp directory under the document...

6.5CVSS8.7AI score0.00607EPSS
Exploits2References1Affected Software1
Prion
Prion
added 2018/03/09 8:29 p.m.17 views

Unrestricted file upload

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

7.5CVSS8.3AI score0.01754EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/03/09 8:29 p.m.11 views

CVE-2014-2592

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8CVSS9.7AI score0.01754EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/03/09 8:0 p.m.14 views

CVE-2014-2592

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8AI score0.01754EPSS
Exploits0References1
CVE
CVE
added 2018/03/09 8:0 p.m.42 views

CVE-2014-2592

The CVE-2014-2592 entry concerns Aruba Web Management portal with an unrestricted file upload vulnerability that could allow remote attackers to execute arbitrary code by uploading a file with an executable extension. The NVD entry confirms a high-severity issue (CVSS v2/9.8 in v3) with network a...

9.8CVSS9.6AI score0.01754EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2017/10/17 3:29 p.m.10 views

Unrestricted file upload

Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in protected/controllers/ProfileController.php in X2Engine X2CRM before 4.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct...

6.5CVSS8.2AI score0.06855EPSS
Exploits0References5Affected Software1
Prion
Prion
added 2017/10/16 6:29 p.m.8 views

Unrestricted file upload

Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in an unspecified directory...

7.5CVSS8.2AI score0.31921EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2017/10/16 6:0 p.m.13 views

CVE-2015-2780

Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in an unspecified directory...

9.7AI score0.31921EPSS
Exploits0References3
Prion
Prion
added 2017/08/07 8:29 p.m.18 views

Unrestricted file upload

Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

6.8CVSS8.2AI score0.03342EPSS
Exploits5References4Affected Software1
Rows per page
Query Builder