Vulnerabilities > Unrestricted Upload of File with Dangerous Type
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-06-27 | CVE-2022-32994 | Unrestricted Upload of File with Dangerous Type vulnerability in Halo 1.5.3 Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload. | 9.8 |
2022-06-27 | CVE-2022-31086 | Unrestricted Upload of File with Dangerous Type vulnerability in multiple products LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. | 8.8 |
2022-06-27 | CVE-2022-2212 | Unrestricted Upload of File with Dangerous Type vulnerability in Library Management System Project Library Management System 1.0 A vulnerability was found in SourceCodester Library Management System 1.0. | 8.8 |
2022-06-24 | CVE-2021-38945 | Unrestricted Upload of File with Dangerous Type vulnerability in multiple products IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validation. | 9.8 |
2022-06-24 | CVE-2013-1916 | Unrestricted Upload of File with Dangerous Type vulnerability in User Photo Project User Photo 0.9.4 In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. | 8.8 |
2022-06-24 | CVE-2022-2102 | Unrestricted Upload of File with Dangerous Type vulnerability in Secheron Sepcos Control and Protection Relay Firmware 1.23.0/1.24.0/1.25.0 Controls limiting uploads to certain file extensions may be bypassed. | 7.5 |
2022-06-23 | CVE-2021-40954 | Unrestricted Upload of File with Dangerous Type vulnerability in Laiketui 3.5.0 Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code. | 9.8 |
2022-06-23 | CVE-2022-31362 | Unrestricted Upload of File with Dangerous Type vulnerability in Docebo 4.0.5 Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. | 8.8 |
2022-06-21 | CVE-2022-31374 | Unrestricted Upload of File with Dangerous Type vulnerability in Contec Sv-Cpt-Mc310 Firmware 6.0 An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file. | 9.8 |
2022-06-20 | CVE-2017-20063 | Unrestricted Upload of File with Dangerous Type vulnerability in Elefantcms Elefant CMS 1.3.12 A vulnerability was found in Elefant CMS 1.3.12-RC. | 8.8 |