CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- kentico xperienceKentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with...5.4 Medium
- 10-strike free photo viewerFree Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or...7.8 High
- nokia impactNokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote...8.8 High
- eng spagobiUnrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows...8.0 High
- apache solrUnrestricted upload of file with dangerous type in Apache Solr9.8 Critical
- sandline centraleyezerSandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type,...9.8 Critical
- octopus deployIn Octopus Deploy 3.3.0 through 2019.10.4, an authenticated user with PackagePush permission to...4.3 Medium
- infoway social photo galleryThe Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an...7.8 High
- footy tipping softwareFooty Tipping Software AFL Web Edition 2019 allows arbitrary file upload and resultant remote...9.1 Critical
- sibsoft xfilesharingSibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be...9.8 Critical
- debian linux, storaged-project udisks, fedoraproject fedora +2 more +4 moreudisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.7.8 High
- projoom smart flash headerviews/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for...8.8 High
- microsoft sharepoint server, sharepoint enterprise server, sharepoint foundation +2 moreAn information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a...6.5 Medium
- auo sunveillance monitoring system \& data recorderAn issue was discovered in Picture_Manage_mvc.aspx in AUO SunVeillance Monitoring System before...9.8 Critical
- adobe systems incorporated magento 2, magento +1 moreMagento Unrestricted file upload vulnerability4.9 Medium
- magento, adobe systems incorporated magento 1 & 2 +1 moreMagento 2 Community Edition RCE Vulnerability7.2 High
- adobe systems incorporated magento 2, magento +1 moreMagento Information Disclosure via File upload functionality8.8 High
- s9y serendipityCross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows...9.8 Critical
- clipsoft rexpertClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local...6.5 Medium
- zucchetti infobusinessZucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php...8.8 High
- trms carousel digital signageThe Tightrope Media Carousel digital signage product 7.0.4.104 contains an arbitrary file upload...8.8 High
- trend micro apex oneTrend Micro Apex One could be exploited by an attacker utilizing a command injection...7.5 High
- repetier-serverRepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data...9.8 Critical
- sourcecodester restaurant management systemSourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload...8.8 High
- schlix cmsadmin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload,...7.2 High
- themepunch showbiz proThe Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php...9.8 Critical
- sonatype nexus repository manager, nexus iq server +1 moreUnrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager7.2 High
- slub-dresden slub eventsslub_events for Typo3 Arbitrary File Upload9.8 Critical
- gilacms gila cmsGila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the...9.9 Critical
- jnoj jiangnan online judgeapp\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0...8.8 High
- advancedcustomfields acf fronted displayThe ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an...9.8 Critical
- digitalzoomstudio zoomsoundsThe dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload.9.8 Critical
- centreonlicenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a...9.8 Critical
- jfinalJFinal file validation vulnerability7.5 High
- yeahlink t49g firmware, t58v firmware, vp59 firmware +2 moreYealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as...8.8 High
- yeahlink t49g firmware, t58v firmware, vp59 firmware +2 moreYealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently...8.8 High
- sitos sixAn unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to...9.8 Critical
- sitos sixSITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by...9.8 Critical
- fecmallAn unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in...7.2 High
- hp arcsight loggerUnrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later....8.8 High
- kslabs kswebThe KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote...8.8 High
- ilch cmsIlch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index...7.2 High
- cksource ckfinderAn issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote...7.5 High
- zzzcms zzzphpZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php...7.5 High
- usersultra users ultra membershipThe users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file...8.8 High
- prise adasAn issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to...6.5 Medium
- publisureAn issue was discovered in the secure portal in Publisure 2.1.2. Once successfully authenticated...7.2 High
- mi xiaomi millet firmwareA malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A...7.4 High
- templatic telvolutionThe Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php...9.8 Critical
- schneider-electric meg6260-0410 firmware, meg6260-0415 firmware, meg6501-0001 firmware +1 more +3 moreAn Improper Access Control: CWE-284 vulnerability exists in U.motion Server (MEG6501-0001 - U...8.8 High
- Show moreLoading…