CWE-434

4,227 vulnerabilities with CWE-434

CVE-2025-15262 MEDIUM

BiggiDroid Simple PHP CMS 1.0 - Unrestricted File Upload via Site Logo Handler

CVSS 4.7

CVE-2025-68562 CRITICAL

MapSVG < 8.7.3 - Arbitrary File Upload via Web Shell

CVSS 9.9

CVE-2025-15199 MEDIUM

College Notes Uploading System 1.0 - Unrestricted File Upload via User Profile Image Parameter

CVSS 6.3

CVE-2025-55061 HIGH

Priority Web <= 23.0 - Unrestricted File Upload

CVSS 8.8

CVE-2025-15197 MEDIUM

News-Buzz 1.0 - Unrestricted File Upload via Image Argument in Edit Posts

CVSS 4.7

CVE-2025-57460 CRITICAL

machpanel 8.0.32 - Unrestricted File Upload Leading to Webshell

CVSS 9.8

CVE-2025-15228 CRITICAL

welltend bpmflowwebkit < 5.0.5 - Unauthenticated Arbitrary File Upload and Remote Code Execution

CVSS 9.8

CVE-2025-15226 CRITICAL

Sun.net WMPro 5.0-<5.2 - Unauthenticated Arbitrary File Upload and Remote Code Execution

CVSS 9.8

CVE-2025-52691 CRITICAL KEV

SmarterMail < 100.0.9413 - Unauthenticated Arbitrary File Upload and Remote Code Execution

CVSS 10.0

CVE-2025-15067 HIGH

Innorix WP - Unrestricted File Upload

CVSS 7.7

CVE-2025-15152 MEDIUM

h-moses moga-mall <392d631a5ef15962a9bddeeb9f1269b9085473fa - Unres...

CVSS 6.3

CVE-2025-15110 MEDIUM

jackq XCMS - Unrestricted File Upload in ProductImageController

CVSS 4.7

CVE-2025-15109 HIGH

jackq XCMS - Unrestricted File Upload

CVSS 7.3

CVE-2025-2155 HIGH

Echo Call Center Services Trade and Industry Inc. Specto CM <170320...

CVSS 8.8

CVE-2025-15050 MEDIUM

Student File Management System 1.0 - Unrestricted File Upload via File Parameter in /save_file.php

CVSS 6.3

CVE-2025-51511 CRITICAL

Cadmium CMS 0.4.9 - Unauthenticated Arbitrary File Upload via File Manager

CVSS 9.8

CVE-2025-67288 CRITICAL

Umbraco CMS 16.3.3 - Arbitrary File Upload via Crafted PDF File

CVSS 10.0

CVE-2025-67289 CRITICAL

Frappe Framework 15.89.0 - Arbitrary File Upload and Remote Code Execution via Attachments Module

CVSS 9.6

CVE-2025-15009 MEDIUM

ChestnutCMS < 1.5.8 - Unrestricted File Upload via Filename Handler

CVSS 6.3

CVE-2025-14800 HIGH

Redirection for Contact Form 7 <3.2.7 - File Upload

CVSS 8.1

CVE-2025-13329 CRITICAL

WooCommerce File Uploader <1.0.4 - RCE

CVSS 9.8

CVE-2025-66908 MEDIUM

Turms AI-Serving < 0.10.0-SNAPSHOT - Unrestricted File Upload via OCR Image Upload

CVSS 5.3

CVE-2025-68398 CRITICAL

Weblate < 5.15.1 - Path Traversal via Git Configuration Overwrite

CVSS 9.1

CVE-2025-14849 HIGH

Advantech WebAccess/SCADA - Unrestricted File Upload and Remote Code Execution

CVSS 8.8

CVE-2025-14885 MEDIUM

SourceCodester Client Database Management System 1.0 - Unrestricted File Upload in Leads Generation Module

CVSS 6.3