CWE-434

OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to uplo

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConso

interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerabilit

Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code executio

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, re

IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the

Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contac

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory trav

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory trav

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory trav

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory trav

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory trav

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory trav

An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remot

RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.

The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within

An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain

In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered f

In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and e

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code t

The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upl

The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to uplo

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote

A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebRepo

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as

tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the

Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing

Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that ca

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defe

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS modul

Gateway Geomatics MapServer for Windows before 3.0.6 contains a Local File Include Vulnerability which allows remote att

Zimbra before 8.8.15 Patch 10 and 9.x before 9.0.0 Patch 3 allows remote code execution via an avatar file. There is pot

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload a

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload a

BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions,

The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1

Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user

Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not veri

CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a

A File Upload Vulnerability in PNotes - Andrey Gruber PNotes.NET v3.8.1.2 allows a local attacker to execute arbitrary c

Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books > New Book , http://<s

IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting

In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the de

An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) acce

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Versio

A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStor

A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial