Lucene search
+L

225 matches found

NVD
NVD
•added 2020/01/31 11:15 p.m.•25 views

CVE-2014-2025

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

9.8CVSS9.7AI score0.03968EPSS
SaveExploits0References3
Prion
Prion
•added 2020/01/31 11:15 p.m.•30 views

Unrestricted file upload

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

7.5CVSS8.3AI score0.03968EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/31 12:00 a.m.•1 views

CVE-2014-2025: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

9.8CVSS8.8AI score0.03968EPSS
SaveExploits0References2
NVD
NVD
•added 2020/01/03 9:15 p.m.•34 views

CVE-2014-8516

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

10CVSS9.7AI score0.8168EPSS
SaveExploits7References4
Prion
Prion
•added 2020/01/03 8:15 p.m.•26 views

Unrestricted file upload

Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified...

7.5CVSS8.1AI score0.04798EPSS
SaveExploits4References2Affected Software1
Cvelist
Cvelist
•added 2020/01/03 8:08 p.m.•43 views

CVE-2014-8516

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

9.7AI score0.8168EPSS
SaveExploits7References4
CVE
CVE
•added 2020/01/03 8:08 p.m.•183 views

CVE-2014-8516

CVE-2014-8516 concerns Visual Mining NetCharts Server. The connected sources describe an unrestricted file upload vulnerability in the NetCharts Server web interface that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via u...

10CVSS9.6AI score0.8168EPSS
SaveExploits7References4Affected Software1
Prion
Prion
•added 2019/11/22 7:15 p.m.•25 views

Unrestricted file upload

Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload...

6CVSS7.7AI score0.06706EPSS
SaveExploits6References3Affected Software1
Prion
Prion
•added 2019/04/18 6:29 p.m.•15 views

Unrestricted file upload

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

7.5CVSS9.7AI score0.08762EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2019/04/18 6:29 p.m.•21 views

CVE-2019-11223

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8CVSS9.7AI score0.08762EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2019/04/18 5:08 p.m.•29 views

CVE-2019-11223

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8AI score0.08762EPSS
SaveExploits1References4
NVD
NVD
•added 2018/07/31 2:29 p.m.•29 views

CVE-2018-12940

Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to...

8.8CVSS7.6AI score0.02509EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/07/31 2:00 p.m.•38 views

CVE-2018-12940

Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to...

7.6AI score0.02509EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/05/21 12:00 a.m.•80 views

PhpCollab Arbitrary Code Execution Vulnerability

phpCollab is a Chinese plug-in support for project development management software . An arbitrary code execution vulnerability exists in PhpCollab. An attacker can execute arbitrary code by uploading a file with an executable extension...

8.8CVSS9AI score0.96385EPSS
SaveExploits9References1
Prion
Prion
•added 2018/05/16 2:29 p.m.•28 views

Unrestricted file upload

Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the tmp directory under the document...

6.5CVSS8.7AI score0.01202EPSS
SaveExploits2References1Affected Software1
Prion
Prion
•added 2018/03/09 8:29 p.m.•25 views

Unrestricted file upload

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

7.5CVSS8.3AI score0.02261EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/03/09 8:29 p.m.•26 views

CVE-2014-2592

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8CVSS9.7AI score0.02261EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/03/09 8:00 p.m.•36 views

CVE-2014-2592

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

9.8AI score0.02261EPSS
SaveExploits0References1
CVE
CVE
•added 2018/03/09 8:00 p.m.•59 views

CVE-2014-2592

The CVE-2014-2592 entry concerns Aruba Web Management portal with an unrestricted file upload vulnerability that could allow remote attackers to execute arbitrary code by uploading a file with an executable extension. The NVD entry confirms a high-severity issue (CVSS v2/9.8 in v3) with network a...

9.8CVSS9.6AI score0.02261EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2017/10/17 3:29 p.m.•22 views

Unrestricted file upload

Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in protected/controllers/ProfileController.php in X2Engine X2CRM before 4.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct...

6.5CVSS8.2AI score0.02906EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder