#cwe-434
共收录 549 条相关情报。
← 返回所有主题 漏洞预警2026-09-21 发布INFO
CVE-2026-88738
Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload fu
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-21 发布INFO
CVE-2026-88745
EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell.
历史摘要 · 未重新核验 · NVD
安全公告2026-09-20 发布INFO
CVE-2026-88857
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension f
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-20 发布INFO
CVE-2026-88857
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension f
历史摘要 · 未重新核验 · NVD
安全公告2026-09-20 发布INFO
CVE-2026-94104
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails t
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-20 发布INFO
CVE-2026-94104
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails t
历史摘要 · 未重新核验 · NVD
安全公告2026-09-20 发布INFO
CVE-2026-94104
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails t
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-20 发布INFO
CVE-2026-81650
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of f
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-20 发布INFO
CVE-2026-81650
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of f
历史摘要 · 未重新核验 · NVD
安全公告2026-09-19 发布INFO
CVE-2026-84750
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uplo
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-19 发布INFO
CVE-2026-84750
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uplo
历史摘要 · 未重新核验 · NVD
安全公告2026-09-19 发布INFO
CVE-2026-84434
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-19 发布INFO
CVE-2026-84434
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-93031
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-18 发布INFO
CVE-2026-93031
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-77929
ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote c
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-77929
ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote c
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-18 发布INFO
CVE-2026-56590
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-45140
Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-17 发布INFO
CVE-2026-92980
HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrato
历史摘要 · 未重新核验 · NVD