461 matches found
"502 Bad Gateway" error within Citrix Insight Services (CIS)
After logging in Citrix Insight Services site and clicking Tools-Upload Data, "502 Bad Gateway" error is shown as below...
CVE-2023-32562
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove code execution. Fixed in version 6.4.1...
PT-2023-27986 · Omeka · Omeka-S
Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.3 Description: The issue concerns an unrestricted upload of a file with a dangerous type. Recommendations: For versions prior to 4.0.3, update to version 4.0.3 or later to resolve the issue...
PT-2023-25012 · Woffice · Office
Name of the Vulnerable Software and Affected Versions: eoffice versions prior to 9.5 Description: An arbitrary file upload issue allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For versions prior to 9.5, update to version 9.5 or later to resolve the issue...
CVE-2020-20718
File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the savefile parameter...
WordPress plugin Unlimited Elements For Elementor 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
PT-2023-24977 · Unknown · Jeecg-Boot
Name of the Vulnerable Software and Affected Versions: jjeecg-boot version 3.5.0 Description: The issue concerns an unauthorized arbitrary file upload in the /jeecg-boot/jmreport/upload interface. This allows for potential malicious file uploads without proper authorization. Recommendations: For...
CVE-2023-29128
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1. The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacke...
PT-2023-19816 · Unknown · Sunnet Ctms
Name of the Vulnerable Software and Affected Versions: SUNNET CTMS affected versions not specified Description: The issue is related to a path traversal vulnerability within the file uploading function of SUNNET CTMS. This allows an authenticated remote attacker with general user privileges to...
CVE-2023-30266
CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...
PT-2023-22616 · Cltphp · Cltphp
Name of the Vulnerable Software and Affected Versions: CLTPHP versions 6.0 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types. Recommendations: For versions 6.0 and earlier, at the moment, there is no information about a newer version that contains...
CVE-2022-4769
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name...
PT-2023-21718 · Dataease · Dataease
Name of the Vulnerable Software and Affected Versions: Dataease versions prior to 1.18.5 Description: The issue concerns the file upload interface in Dataease, where permissions are not properly checked, allowing users who are not logged in to upload files directly to the background. Additionally...
PT-2023-19146 · Awsm Innovations · Awsm Innovations Embed Any Document – Embed Pdf
Name of the Vulnerable Software and Affected Versions: Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin versions = 2.7.1 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. It...
PT-2023-16202 · Akuvox · Akuvox E11
Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue allows an attacker to upload a file to the device by changing the extension of a malicious file to an accepted file type, as the device does not ensure that a file extension is...
PT-2023-20983 · Halo · Halo
Name of the Vulnerable Software and Affected Versions: Halo versions up to 1.6.1 Description: The issue allows attackers to execute arbitrary code via a crafted .md file due to an arbitrary file upload vulnerability. Recommendations: For versions up to 1.6.1, update to a version later than 1.6.1 ...
CVE-2021-33224
File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file...
CVE-2021-26642 XpressEngine file upload vulnerability
When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient verification of the file. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is...
PT-2023-12103 · Unknown · Xpressengine
Name of the Vulnerable Software and Affected Versions: XpressEngine affected versions not specified Description: The issue arises from insufficient verification of uploaded files, allowing a remote attacker to upload arbitrary files and potentially execute arbitrary code on the server hosting the...