Vulnerabilities > Unrestricted Upload of File with Dangerous Type
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-10-29 | CVE-2018-18752 | Unrestricted Upload of File with Dangerous Type vulnerability in Webiness Project Webiness Inventory 2.3 Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter. | 9.8 |
| 2018-10-23 | CVE-2018-18475 | Unrestricted Upload of File with Dangerous Type vulnerability in Zohocorp Manageengine Opmanager 12.3 Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload. | 9.8 |
| 2018-10-16 | CVE-2018-18382 | Unrestricted Upload of File with Dangerous Type vulnerability in Coderpixel Advanced HRM 1.6 Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" (aka user/edit-profile) action. | 8.8 |
| 2018-10-15 | CVE-2018-18315 | Unrestricted Upload of File with Dangerous Type vulnerability in Mossle Lemon 1.9.0 com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter. | 7.5 |
| 2018-10-11 | CVE-2018-9206 | Unrestricted Upload of File with Dangerous Type vulnerability in Jquery File Upload Project Jquery File Upload Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0 | 9.8 |
| 2018-10-09 | CVE-2018-18086 | Unrestricted Upload of File with Dangerous Type vulnerability in Phome Empirecms 7.5 EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users. | 8.8 |
| 2018-10-08 | CVE-2018-17442 | Unrestricted Upload of File with Dangerous Type vulnerability in Dlink Central Wifimanager An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. | 8.8 |
| 2018-10-08 | CVE-2018-17440 | Unrestricted Upload of File with Dangerous Type vulnerability in Dlink Central Wifimanager An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. | 9.8 |
| 2018-10-05 | CVE-2018-15424 | Unrestricted Upload of File with Dangerous Type vulnerability in Cisco Identity Services Engine 2.2(0.470) A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server. | 4.7 |
| 2018-10-04 | CVE-2015-9271 | Unrestricted Upload of File with Dangerous Type vulnerability in Videowhisper Video Conference 4.91.8 The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different vulnerability than CVE-2014-1905. | 9.8 |