#cwe-434

共收录 549 条相关情报。

← 返回所有主题
漏洞预警2026-07-07 发布INFO

The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including,...

CVE-2026-14345

The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the file upload endpoint (app/Http/Controllers/Uploa...

CVE-2026-42145

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

历史摘要 · 未重新核验 · NVD

安全公告2026-07-06 发布INFO

ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker...

CVE-2026-9182

ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue b

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-06 发布INFO

ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Succ...

CVE-2026-9182

ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the inter...

CVE-2026-24014

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to buil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announceme...

CVE-2026-14777

A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布INFO

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /up...

CVE-2026-14776

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布INFO

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipu...

CVE-2026-14775

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布INFO

A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the ar...

CVE-2026-14736

A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布INFO

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file upload_files.p...

CVE-2026-14698

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

MCO does not correctly validate types of uploaded files. File upload validation functionality relies only on client-side checks, which can be bypassed. An authorized, low-privil...

CVE-2026-53909

MCO does not correctly validate types of uploaded files. File upload validation functionality relies only on client-side

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in...

CVE-2026-48283

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in...

CVE-2026-48276

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages...

CVE-2026-53691

An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote C

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker...

CVE-2025-24815

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Succ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

SzafirHost verifies the downloaded native library archive with one JarFile parser (reading the Central Directory) but extracts native libraries with JarInputStream parser (readi...

CVE-2026-13165

SzafirHost verifies the downloaded native library archive with one JarFile parser (reading the Central Directory) but ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown function of the file /admin/mod_amenities/controller.php?action=add. Executing a...

CVE-2026-13553

A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown function of the file /a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUpload/upload.do. Ex...

CVE-2026-13547

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown pr

历史摘要 · 未重新核验 · NVD

安全公告2026-06-27 发布INFO

The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are...

CVE-2026-33560

The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are exposed endpoints which a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-27 发布INFO

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow...

CVE-2026-56414

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arb

历史摘要 · 未重新核验 · GitHub Advisory