Vulnerabilities > Unrestricted Upload of File with Dangerous Type
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-12-30 | CVE-2019-16790 | Unrestricted Upload of File with Dangerous Type vulnerability in Tiny File Manager Project Tiny File Manager In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files. | 6.5 |
| 2019-12-27 | CVE-2019-20048 | Unrestricted Upload of File with Dangerous Type vulnerability in Al-Enterprise Omnivista 8770 An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. | 9.0 |
| 2019-12-27 | CVE-2013-4796 | Unrestricted Upload of File with Dangerous Type vulnerability in Reviewboard 1.6.17 ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request | 6.5 |
| 2019-12-24 | CVE-2019-19925 | Unrestricted Upload of File with Dangerous Type vulnerability in multiple products zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. | 5.0 |
| 2019-12-23 | CVE-2019-8293 | Unrestricted Upload of File with Dangerous Type vulnerability in Abcprintf Upload-Image-With-Ajax 1.0 Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution. | 7.5 |
| 2019-12-19 | CVE-2019-19141 | Unrestricted Upload of File with Dangerous Type vulnerability in Plex Media Server 1.13.2.5154/1.18.2.2029 The Camera Upload functionality in Plex Media Server through 1.18.2.2029 allows remote authenticated users to write files anywhere the user account running the Plex Media Server has permissions. | 6.5 |
| 2019-12-17 | CVE-2019-19634 | Unrestricted Upload of File with Dangerous Type vulnerability in multiple products class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576. | 9.8 |
| 2019-12-17 | CVE-2019-19745 | Unrestricted Upload of File with Dangerous Type vulnerability in Contao Contao 4.0 through 4.8.5 allows PHP local file inclusion. | 6.5 |
| 2019-12-12 | CVE-2019-18320 | Unrestricted Upload of File with Dangerous Type vulnerability in Siemens Sppa-T3000 Application Server R8.2 A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). | 5.0 |
| 2019-12-12 | CVE-2019-18313 | Unrestricted Upload of File with Dangerous Type vulnerability in Siemens Sppa-T3000 Ms3000 Migration Server A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). | 7.5 |