CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

202 matches found

CVE-2026-52101

An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go...

Exploits0References2

Nuclei•added 2026/02/04 7:0 a.m.•15 views

Unauthenticated Arbitrary Plugin Upload in Alone Theme

The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the aloneimportpackinstallplugin function in all versions up to, and including, 7.8.3. id: CVE-2025-5394 info: name: Unauthenticated Arbitra...

9.8CVSS6.2AI score0.47529EPSS

Exploits3References2

RedhatCVE•added 2026/01/09 11:28 a.m.•7 views

CVE-2021-33523

MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the underlying host. This occurs in com.idsscheer.ppmmashup.business.jdbc.DriverUploadController...

7.2CVSS7.5AI score0.01775EPSS

Exploits0References1

RedhatCVE•added 2026/01/07 9:30 a.m.•9 views

CVE-2019-16700

The slubevents aka SLUB: Event Registration extension through 3.0.2 for TYPO3 allows uploading of arbitrary files to the webserver. For versions 1.2.2 and below, this results in Remote Code Execution. In versions later than 1.2.2, this can result in Denial of Service, since the web space can be...

9.8CVSS7.4AI score0.02528EPSS

Exploits0References1

RedhatCVE•added 2026/01/07 9:18 a.m.•22 views

CVE-2025-1555

A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. This vulnerability affects the function saveImage. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the publ...

7.5CVSS6.7AI score0.0065EPSS

Exploits0References1