共收录 549 条相关情报。
← 返回所有主题CVE-2026-104637
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61
CVE-2026-104471
YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote
CVE-2026-104471
YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote
CVE-2026-92820
The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, an
CVE-2026-56660
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to
CVE-2026-64949
Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar f
CVE-2026-64947
A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload
CVE-2026-103541
A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile
CVE-2026-103541
A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile
CVE-2026-76144
An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL
CVE-2026-102143
An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesyste
CVE-2026-102137
An authenticated administrator could bypass the content validation applied to an administrative file upload and store a
CVE-2026-102130
Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an admin
CVE-2026-102842
A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affecte
CVE-2026-70356
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and exe
CVE-2026-70356
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and exe
CVE-2026-96431
Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agent
CVE-2026-102263
A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected ele
CVE-2026-102366
mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorizatio
CVE-2026-102366
mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorizatio