Vulnerabilities > Unrestricted Upload of File with Dangerous Type

DATE CVE VULNERABILITY TITLE RISK
2024-01-24 CVE-2024-22135 Unrestricted Upload of File with Dangerous Type vulnerability in Webtoffee Order Export & Order Import for Woocommerce
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.3.
network
low complexity
webtoffee CWE-434
7.2
2024-01-24 CVE-2024-22152 Unrestricted Upload of File with Dangerous Type vulnerability in Webtoffee Product Import Export for Woocommerce
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.3.7.
network
low complexity
webtoffee CWE-434
7.2
2024-01-23 CVE-2023-52324 Unrestricted Upload of File with Dangerous Type vulnerability in Trendmicro Apex Central 2019
An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any valid set of credentials.
network
low complexity
trendmicro CWE-434
8.8
2024-01-22 CVE-2024-0783 Unrestricted Upload of File with Dangerous Type vulnerability in Online Admission System Project Online Admission System 1.0
A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical.
network
low complexity
online-admission-system-project CWE-434
critical
9.8
2024-01-22 CVE-2024-22895 Unrestricted Upload of File with Dangerous Type vulnerability in Dedecms 5.7.112
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.
network
low complexity
dedecms CWE-434
8.8
2024-01-20 CVE-2023-51924 Unrestricted Upload of File with Dangerous Type vulnerability in Yonyou Yonbip 323.05
An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
network
low complexity
yonyou CWE-434
critical
9.8
2024-01-20 CVE-2023-51925 Unrestricted Upload of File with Dangerous Type vulnerability in Yonyou Yonbip 323.05
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
network
low complexity
yonyou CWE-434
critical
9.8
2024-01-20 CVE-2021-31314 Unrestricted Upload of File with Dangerous Type vulnerability in Ejinshan Terminal Security System 8.0
File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server.
network
low complexity
ejinshan CWE-434
critical
9.8
2024-01-20 CVE-2023-51928 Unrestricted Upload of File with Dangerous Type vulnerability in Yonyou Yonbip 323.05
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
network
low complexity
yonyou CWE-434
critical
9.8
2024-01-19 CVE-2023-27168 Unrestricted Upload of File with Dangerous Type vulnerability in Xpand-It Write-Back Manager 2.3.1
An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file.
network
low complexity
xpand-it CWE-434
critical
9.8