#cwe-434

共收录 549 条相关情报。

← 返回所有主题
漏洞预警2026-09-21 发布INFO

Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An attacker with administrative privileges c...

CVE-2026-88738

Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload fu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell.

CVE-2026-88745

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell.

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft...

CVE-2026-88857

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension f

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark() copied...

CVE-2026-88857

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension f

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi(...

CVE-2026-94104

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to validate file extensions for new filenames or when chun...

CVE-2026-94104

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails t

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager

CVE-2026-94104

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails t

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-20 发布INFO

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly...

CVE-2026-81650

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of f

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variabl...

CVE-2026-81650

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of f

历史摘要 · 未重新核验 · NVD

安全公告2026-09-19 发布INFO

The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or...

CVE-2026-84750

The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uplo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-19 发布INFO

The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a...

CVE-2026-84750

The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uplo

历史摘要 · 未重新核验 · NVD

安全公告2026-09-19 发布INFO

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up...

CVE-2026-84434

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-19 发布INFO

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the upload_file function. This is due to a mismat...

CVE-2026-84434

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for...

CVE-2026-93031

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, ...

CVE-2026-93031

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote code execution by uploading a PHP file with valid image ma...

CVE-2026-77929

ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote c

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint

CVE-2026-77929

ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote c

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to...

CVE-2026-56590

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The auth...

CVE-2026-45140

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web server use...

CVE-2026-92980

HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrato

历史摘要 · 未重新核验 · NVD