Lucene search
K

5334 matches found

NVD
NVD
added 2022/04/25 1:15 p.m.10 views

CVE-2022-28053

Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

8.8CVSS0.00782EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/04/25 12:43 p.m.10 views

CVE-2022-28053

Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.1AI score0.00782EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/04/21 7:4 p.m.15 views

CVE-2022-28440

An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file...

9AI score0.00932EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/04/15 4:36 a.m.15 views

CVE-2021-40386

Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code...

9.9AI score0.02509EPSS
Exploits0References1
CNVD
CNVD
added 2022/04/15 12:0 a.m.25 views

PayloadCMS arbitrary file upload vulnerability

PayloadCMS is a Headless CMS and application framework built using TypeScript, Node.js, React and MongoDB.PayloadCMS is vulnerable to arbitrary file uploads, which can be exploited by attackers to execute arbitrary code via crafted SVG files...

9.8CVSS4.2AI score0.01003EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2022/04/13 12:0 a.m.98 views

Unrestricted Upload of File with Dangerous Type in Strapi

An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file...

9.8CVSS7AI score0.01713EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/04/13 12:0 a.m.16 views

GHSA-FFHQ-G856-9F2P Arbitrary file upload in Ghost

An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file...

9.8CVSS9.5AI score0.04027EPSS
Exploits1References7
NVD
NVD
added 2022/04/12 5:15 p.m.7 views

CVE-2022-27263

An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file...

9.8CVSS0.01713EPSS
Exploits1References2
Prion
Prion
added 2022/04/12 5:15 p.m.16 views

Design/Logic Flaw

An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file...

7.5CVSS9.5AI score0.01003EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2022/04/12 5:15 p.m.13 views

Design/Logic Flaw

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file...

7.5CVSS9.5AI score0.01003EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2022/04/12 5:15 p.m.14 views

Design/Logic Flaw

An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file...

7.5CVSS9.5AI score0.00618EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2022/04/12 4:29 p.m.13 views

CVE-2022-27263

An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file...

9.8AI score0.01713EPSS
Exploits1References2
Check Point Advisories
Check Point Advisories
added 2022/04/12 12:0 a.m.4 views

Adobe Acrobat and Reader Heap-based Buffer Overflow (APSB22-16: CVE-2022-28234)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

9.3CVSS5.6AI score0.0376EPSS
Exploits0
CNVD
CNVD
added 2022/04/12 12:0 a.m.10 views

zbzcms arbitrary file upload vulnerability

zbzcms station helper CMS is a content management website of China station helper CMS zbzcms company. zbzcms version 1.0 has an arbitrary file upload vulnerability, which can be exploited by attackers to execute arbitrary code via specially crafted PHP files...

9.8CVSS4.9AI score0.00944EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/11 7:37 p.m.16 views

CVE-2022-27843

DLL hijacking vulnerability in Kies prior to version 2.6.4.220142 allows attacker to execute abitrary code...

6.2CVSS7.9AI score0.00058EPSS
Exploits0References1
NVD
NVD
added 2022/04/10 9:15 p.m.9 views

CVE-2022-27131

An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS0.00944EPSS
Exploits0References1
NVD
NVD
added 2022/04/10 9:15 p.m.12 views

CVE-2022-27129

An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS0.00944EPSS
Exploits0References1
Prion
Prion
added 2022/04/10 9:15 p.m.13 views

Design/Logic Flaw

An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.5CVSS9.6AI score0.00944EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/04/10 9:15 p.m.10 views

Design/Logic Flaw

An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.5CVSS9.6AI score0.00944EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/10 8:24 p.m.12 views

CVE-2022-27131

An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8AI score0.00944EPSS
Exploits0References1
Rows per page
Query Builder