CWE-434

4,227 vulnerabilities with CWE-434

CVE-2025-63748 HIGH

QaTraq 6.9.2 - Authenticated Arbitrary File Upload via Test Script Attachment Feature

CVSS 8.8

CVE-2025-13275 MEDIUM

Iqbolshoh php-business-website <10677743a8dfc281f85291a27cf63a0bce0...

CVSS 4.7

CVE-2025-13249 MEDIUM

Jiusi OA <20251102 - Unrestricted Upload

CVSS 6.3

CVE-2025-13238 MEDIUM

Bdtask Flight Booking Software 4 - Unrestricted File Upload in Edit Profile Page

CVSS 6.3

CVE-2025-13198 MEDIUM

DouPHP <1.8 Release 20251022 - Unrestricted Upload

CVSS 4.7

CVE-2025-13185 MEDIUM

Bdtask News365 < 7.0.3 - Unrestricted File Upload via Profile Image/Banner Image Argument

CVSS 4.7

CVE-2025-55810 MEDIUM

Alaga Home Security WiFi Camera 3K - Command Injection

CVSS 6.8

CVE-2025-13061 MEDIUM

Online Voting System 1.0 - Unrestricted File Upload in manage_voting Page

CVSS 6.3

CVE-2025-12048 HIGH

Lenovo Scanner Pro < 1.0.0.4 - Arbitrary File Upload

CVSS 7.5

CVE-2025-59118 HIGH

Apache OFBiz < 24.09.03 - Unrestricted Upload of File with Dangerous Type

CVSS 7.3

CVE-2025-24862 LOW

Intel(R) CIP <WIN_DCA_2.4.0.11001 - Privilege Escalation

CVSS 2.0

CVE-2025-12846 HIGH

Blocksy Companion <2.1.19 - Authenticated File Upload

CVSS 8.8

CVE-2025-11170 CRITICAL

WordPress WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated File Upload Code Execution

CVSS 9.8

CVE-2025-42883 LOW

SAP NetWeaver Application Server - Privilege Escalation

CVSS 2.7

CVE-2025-63678 HIGH

CMS Made Simple Foundation File Manager <2.2.22 - RCE

CVSS 7.2

CVE-2025-12867 HIGH

Hundred Plus EIP Plus < RELEASE_240626 - Arbitrary File Upload and Remote Code Execution

CVSS 7.2

CVE-2025-12399 HIGH

Alex Reservations: Smart Restaurant Booking <2.2.3 - File Upload

CVSS 7.2

CVE-2025-11967 HIGH

Mail Mint < 1.18.10 - Authenticated Arbitrary File Upload via Contact Import Function

CVSS 7.2

CVE-2025-12161 HIGH

Smart Auto Upload Images <1.2.0 - File Upload

CVSS 8.8

CVE-2025-12862 MEDIUM

projectworlds Online Notes Sharing Platform 1.0 - Unrestricted Upload

CVSS 6.3

CVE-2025-34299 CRITICAL

Monsta FTP < 2.11 - Unauthenticated Arbitrary File Upload

CVSS 9.8

CVE-2025-12352 CRITICAL

Gravity Forms <= 2.9.20 - Unauthenticated Arbitrary File Upload via copy_post_image()

CVSS 9.8

CVE-2025-64176 MEDIUM

ThinkDashboard < 0.6.8 - Unrestricted File Upload via Backup Import Feature

CVSS 5.3

CVE-2025-6327 CRITICAL

King Addons for Elementor <51.1.36 - RCE

CVSS 10.0

CVE-2025-62065 CRITICAL

Rometheme RTMKit <1.6.5 - Uplaod of File with Dangerous Type

CVSS 9.9