#cwe-434

共收录 549 条相关情报。

← 返回所有主题
漏洞预警2026-09-28 发布INFO

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an ...

CVE-2026-54675

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound lan

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the componen...

CVE-2026-101071

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.

CVE-2026-12264

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config syn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authe...

CVE-2026-12269

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the H

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell t...

CVE-2026-85134

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document a

历史摘要 · 未重新核验 · NVD

安全公告2026-09-26 发布INFO

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload...

CVE-2026-82901

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-26 发布INFO

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7_wpcf7_mail_components' fun...

CVE-2026-82901

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file

历史摘要 · 未重新核验 · NVD

安全公告2026-09-26 发布INFO

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature...

CVE-2026-94132

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterpri

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-26 发布INFO

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails wer...

CVE-2026-94132

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterpri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-26 发布INFO

The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2 via the `afrfq_submit_quote_via_popup...

CVE-2026-18143

The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, a

历史摘要 · 未重新核验 · NVD

安全公告2026-09-24 发布INFO

Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the ...

CVE-2026-93352

Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absen

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbidden_extensions blocklist in config/media...

CVE-2026-93352

Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the file AddProductCode.php. The manipulation of the argument im...

CVE-2026-96513

A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server without restrictions. An at...

CVE-2026-5695

Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown processing of the file /post_upload.p...

CVE-2026-95830

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file...

CVE-2026-95820

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affecte

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index...

CVE-2026-88419

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of WuzhiCMS 5.0.0 allows an authenticated lo...

CVE-2026-88419

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A vulnerability has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. Impacted is the function file_put_contents of the file codeEditor.php of the component...

CVE-2026-95500

A vulnerability has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. Impacted is the function file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function move_uploaded_file of the file filemanager.php. Executing a man...

CVE-2026-95499

A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function move_u

历史摘要 · 未重新核验 · NVD