Lucene search
K

36 matches found

OSV
OSV
added 2021/05/29 2:15 p.m.1 views

CVE-2021-31703

Frontier ichris through 5.18 allows users to upload malicious executable files that might later be downloaded and run by any client user...

9.8CVSS5.8AI score0.00433EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/05/29 12:0 a.m.1 views

Frontier ichris 代码问题漏洞

Frontier ichris is an application from Frontier Australia. A payroll software. A security vulnerability exists in Frontier ichris version 5.18 that allows users to upload malicious executable files that could later be downloaded and run by any client user. No details of the vulnerability are...

9.8CVSS5.6AI score0.00433EPSS
Exploits0References1
OSV
OSV
added 2021/04/14 3:15 p.m.14 views

CVE-2020-29592

An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE HTML editor's file upload allows an attacker to upload dangerous executables that bypass the file types allowed regardless of the file types allowed list in Media settings...

9.8CVSS9.4AI score0.01344EPSS
Exploits2References2
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.1 views

Matteo Piovanelli Orchard 代码问题漏洞

Matteo Piovanelli Orchard is a Matteo Piovanelli open source application. A free, open source, community-centered content management system built on the ASP.NET MVC platform. A security vulnerability exists in Orchard versions prior to 1.10, which stems from a vulnerability that allows an attacke...

9.8CVSS6.8AI score0.01344EPSS
Exploits1References3
VulnCheck KEV
VulnCheck KEV
added 2020/11/22 12:0 a.m.1 views

VulnCheck KEV: CVE-2015-7571

Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

7.8CVSS7.5AI score0.03342EPSS
Exploits5References1
OSV
OSV
added 2020/08/07 8:15 p.m.0 views

CVE-2020-13376

SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie...

9CVSS5.9AI score
Exploits0References2
OSV
OSV
added 2020/05/17 1:15 a.m.1 views

CVE-2020-13126

An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin is...

9.9CVSS7.1AI score0.67023EPSS
Exploits1References2
VulnCheck KEV
VulnCheck KEV
added 2020/05/17 12:0 a.m.1 views

VulnCheck KEV: CVE-2020-13126

An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin...

9.9CVSS7.2AI score0.67023EPSS
Exploits1References1
OSV
OSV
added 2018/11/15 3:29 p.m.1 views

CVE-2018-0686

Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier allows remote authenticated attackers to upload and execute any executable files via unspecified vectors...

8.8CVSS5.9AI score0.00911EPSS
Exploits0References3
CNVD
CNVD
added 2017/10/26 12:0 a.m.2 views

PRTG Network Monitor Arbitrary Code Execution Vulnerability

Paessler PRTG Network Monitor is a suite of network monitoring software from the German company Paessler. The software provides usage monitoring, packet sniffing, in-depth analysis and concise reports. A security vulnerability exists in PRTG Network Monitor version 17.3.33.2830. The vulnerability...

6.7CVSS7.1AI score0.0058EPSS
Exploits0References1
OSV
OSV
added 2017/10/20 12:29 a.m.0 views

CVE-2017-15651

PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then proceeding in spite of the error message...

6.7CVSS6.1AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2017/03/17 12:0 a.m.4 views

PT-2017-6703 · Qdpm · Qdpm

Name of the Vulnerable Software and Affected Versions: qdPM version 8.3 Description: The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to various pages in qdPM, including myAccount, projects, tasks, tickets, discussions, reports, and...

8.8CVSS8.8AI score0.7292EPSS
Exploits4References8
OSV
OSV
added 2015/10/05 2:59 p.m.2 views

UBUNTU-CVE-2015-7684

Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket, then accessing it via a direct request to the file in files/tmp/...

9CVSS6.1AI score0.01653EPSS
Exploits0References5
VulnCheck KEV
VulnCheck KEV
added 2014/12/30 12:0 a.m.0 views

VulnCheck KEV: CVE-2014-10021

Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/...

7.5CVSS6.2AI score0.78455EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2014/06/19 10:50 a.m.2 views

CVE-2014-2610

Directory traversal vulnerability in the Content Acceleration Pack CAP web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117...

7.1CVSS6.2AI score0.0251EPSS
Exploits0References7
0day.today
0day.today
added 2004/09/12 12:0 a.m.14 views

BlackJumboDog FTP Server 3.6.1 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= BlackJumboDog FTP Server 3.6.1 Remote Buffer Overflow Exploit ============================================================= / 6.9.04|www.Delikon.de|Delikon BlackJumboDog FTP Serv...

7.1AI score
Exploits0
Rows per page
Query Builder