Vulnerabilities > Unrestricted Upload of File with Dangerous Type

DATE CVE VULNERABILITY TITLE RISK
2021-12-15 CVE-2021-41870 Unrestricted Upload of File with Dangerous Type vulnerability in Socomec Remote View PRO Firmware 2.0.41.4
An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4.
network
low complexity
socomec CWE-434
8.8
2021-12-14 CVE-2021-40883 Unrestricted Upload of File with Dangerous Type vulnerability in Emlog 5.3.1
A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.
network
low complexity
emlog CWE-434
critical
9.8
2021-12-13 CVE-2021-43117 Unrestricted Upload of File with Dangerous Type vulnerability in Fastadmin 1.2.1
fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.
network
low complexity
fastadmin CWE-434
critical
9.8
2021-12-10 CVE-2021-27984 Unrestricted Upload of File with Dangerous Type vulnerability in Pluck-Cms Pluck 4.7.15
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files.
network
high complexity
pluck-cms CWE-434
8.1
2021-12-08 CVE-2021-36719 Unrestricted Upload of File with Dangerous Type vulnerability in Cybonet Mail Secure
PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system.
network
low complexity
cybonet CWE-434
8.8
2021-12-08 CVE-2021-27860 Unrestricted Upload of File with Dangerous Type vulnerability in Fatpipeinc Ipvpn Firmware and Warp Firmware
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.
network
low complexity
fatpipeinc CWE-434
8.8
2021-12-07 CVE-2021-42125 Unrestricted Upload of File with Dangerous Type vulnerability in Ivanti Avalanche
An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files.
network
low complexity
ivanti CWE-434
8.8
2021-12-06 CVE-2021-43936 Unrestricted Upload of File with Dangerous Type vulnerability in Webhmi Firmware 3.5/4.0
The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.
network
low complexity
webhmi CWE-434
critical
9.8
2021-12-03 CVE-2021-23562 Unrestricted Upload of File with Dangerous Type vulnerability in Tiny Plupload
This affects the package plupload before 2.3.9.
network
low complexity
tiny CWE-434
8.8
2021-12-02 CVE-2020-29176 Unrestricted Upload of File with Dangerous Type vulnerability in Zblogcn Z-Blogphp 1.6.1.2100
An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file.
local
low complexity
zblogcn CWE-434
7.8