CVE-2025-31987

HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion...

CVE-2025-31987

HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion...

CVE-2025-31987

HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion...

CVE-2025-31987 HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack

HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion...

CVE-2025-31987 HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack

HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion...

CVE-2025-31987

Summary: CVE-2025-31987 affects HCL Connections Docs. The connected documents describe a vulnerability where improper validation of uploaded documents can cause a denial of service through resource exhaustion. Expected impact is denial of service with high availability impact; CVSS metrics in the...

PT-2025-33417 · Hcl · Hcl Connections Docs

Name of the Vulnerable Software and Affected Versions: HCL Connections Docs affected versions not specified Description: HCL Connections Docs may not properly validate uploaded documents, potentially leading to a denial of service due to resource exhaustion. Recommendations: At the moment, there ...

Frappe Learning 输入验证错误漏洞

Frappe Learning is an easy-to-use open source learning management system from Frappe Open Source. An input validation error vulnerability exists in Frappe Learning version 2.33.0 and earlier, which stems from insufficient cleanup of uploaded SVG files and could lead to the execution of arbitrary...

CVE-2025-54757

Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by a product user, an arbitrary script may be executed on the browser...

Code-Projects Document Management System 代码问题漏洞

Code-Projects Document Management System is an open source document management system from Code-Projects. A code issue vulnerability exists in Code-Projects Document Management System version 1.0, which stems from an incorrect manipulation of the parameter uploadedfile in file/insert.php resultin...

Apache Jena Input Validation Error Vulnerability

Apache Jena is the Apache Software Foundation's open source Java framework for building semantic web and linked data applications. A file path validation vulnerability exists in Apache Jena 5.4.0 and earlier versions, which stems from a failure to validate file access paths in configuration files...

UBUNTU-CVE-2025-50151

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload...

tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation

The fix for CVE-2024-50379 in Apache Tomcat was insufficient to mitigate the issue fully. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to...

CVE-2020-36847

The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function which can be used to rename uploaded PHP code with a png extension to use a php extension. This allows unauthenticated attackers to execute code on the...

Siemens多款产品 代码问题漏洞

Siemens TIA Project-Server and others are products of Siemens, Germany.Siemens TIA Project-Server is a multiplayer collaboration tool.Siemens TIA Project-Server V17 is a multiplayer collaboration tool.Siemens Totally Integrated Automation Portal is an engineering configuration platform. A code...

Incorrect Default Permissions

github.com/filebrowser/filebrowser is vulnerable to Incorrect Default Permissions. The vulnerability is due to insecure default file permissions because the application not explicitly setting access permissions for uploaded files or its database, relying instead on the system’s default umask, whi...

Code-Projects Simple Forum 代码问题漏洞

Simple forum is a simple forum. Simple forum has a code issue vulnerability that stems from the lack of valid validation of uploaded files in the parameter File in the file /forum1.php. An attacker can exploit this vulnerability to upload malicious files...

GHSA-4WX8-5GM2-2J97 filebrowser allows Stored Cross-Site Scripting through the Markdown preview function

Summary The Markdown preview function of File Browser v2.32.0 is vulnerable to Stored Cross-Site-Scripting XSS. Any JavaScript code that is part of a Markdown file uploaded by a user will be executed by the browser Impact A user can upload a malicious Markdown file to the application which can...

UBUNTU-CVE-2014-0468

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories SVN, Git, Bzr.... This issue affects fusionforge: before 5.3+20140506...

CVE-2014-0468

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories SVN, Git, Bzr.... This issue affects fusionforge: before 5.3+20140506...