#cwe-434

共收录 549 条相关情报。

漏洞预警2026-05-27 发布INFO

Budibase is an open-source low-code platform. Prior to 3.38.2, the file upload endpoint POST /api/attachments/process does not enforce active-content restrictions for authentica...

CVE-2026-46426

Budibase is an open-source low-code platform. Prior to 3.38.2, the file upload endpoint POST /api/attachments/process do

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-434

漏洞预警2026-05-27 发布INFO

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is run in REST API server mode, the output, output-all, and debug fi...

CVE-2026-45089

Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is run in R

历史摘要 · 未重新核验 · NVD

#cve #cwe-73 #cwe-306 #cwe-434

漏洞预警2026-05-27 发布INFO

Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: fr...

CVE-2026-42748

Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web She

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

安全公告2026-05-22 发布INFO

The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing...

CVE-2026-6960

The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-434 #severity:critical

漏洞预警2026-05-21 发布INFO

The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' ...

CVE-2026-6960

The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An...

CVE-2026-8134

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTempl

历史摘要 · 未重新核验 · NVD

#cve #cwe-23 #cwe-98 #cwe-434

漏洞预警2026-05-21 发布INFO

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 ...

CVE-2026-9157

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remo

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-434

安全公告2026-05-20 发布INFO

Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For...

CVE-2026-45444

Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using M

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-434 #severity:critical

漏洞预警2026-05-20 发布INFO

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs. A regular authentica...

CVE-2026-9102

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitiza

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-434

漏洞预警2026-05-20 发布INFO

Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files. This issue affects Gift Cards For WooCom...

CVE-2026-45444

Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using M

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

安全公告2026-05-20 发布INFO

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions...

CVE-2026-6555

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including,

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-434 #severity:critical

漏洞预警2026-05-20 发布INFO

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where ...

CVE-2026-6555

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including,

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-05-19 发布INFO

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' function in all version...

CVE-2026-4883

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-05-19 发布INFO

The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_builder' function in ...

CVE-2026-4885

The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file typ

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-05-18 发布INFO

FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to ...

CVE-2026-27891

FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerabi

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-434

漏洞预警2026-05-17 发布INFO

A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This impacts an unknown function of the file /common/jsp/upload3.jsp. Executing a manipulation of the...

CVE-2026-8758

A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This impacts an unknown function of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

安全公告2026-05-16 发布INFO

HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows...

CVE-2020-37227

HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass cl

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-434 #severity:high

漏洞预警2026-05-16 发布INFO

HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrar...

CVE-2020-37227

HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass cl

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-05-15 发布HIGH

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the audio transcription upload endpoint takes the file extensi...

CVE-2026-45315

Open WebUI 是一个自托管的离线人工智能平台。在 0.9.3 版本之前，音频转录上传端点存在严重的存储型跨站脚本（XSS）漏洞。该端点接受用户提供的文件名，并从中提取扩展名，将文件保存到 CACHE_DIR/audio/transc

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-434 #cwe-646

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, when attaching files to a promp, the name of the file is der...

CVE-2026-44566

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, whe

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-434