CWE-434
Medium likelihoodUnrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
4,119 vulnerabilities with CWE-434
CVE-2024-49652
CRITICAL
ReneeCussack 3D Work In Progress <1.0.3 - Unrestricted File Upload
CVSS 9.9
CVE-2024-10293
MEDIUM
ZZCMS 2023 - Unrestricted File Upload via Ebak_SetGotoPak Function
CVSS 6.3
CVE-2024-10292
MEDIUM
ZZCMS 2023 - Unrestricted Upload of File with Dangerous Type via ChangeTable.php savefilename Parameter
CVSS 6.3
CVE-2024-46482
HIGH
Ladybird Web Solution Faveo-Helpdesk <2.0.3 - RCE
CVSS 8.2
CVE-2024-10201
HIGH
Administrative Management System - RCE
CVSS 8.8
CVE-2024-49610
CRITICAL
Jack Zhu - Unrestricted Upload of File with Dangerous Type
CVSS 10.0
CVE-2024-49607
CRITICAL
Redwan Hilali WP Dropbox Dropins - Unrestricted Upload
CVSS 10.0
CVE-2024-49331
CRITICAL
Property Lot Management System < 4.2.38 - Unauthenticated Arbitrary File Upload
CVSS 9.9
CVE-2024-49330
CRITICAL
brx8r Nice Backgrounds <= 1.0 - Unauthenticated Arbitrary File Upload
CVSS 10.0
CVE-2024-49329
CRITICAL
WP REST API FNS <= 1.0.0 - Unauthenticated Arbitrary File Upload
CVSS 10.0
CVE-2024-49327
CRITICAL
Woostagram Connect <= 1.0.2 - Arbitrary File Upload
CVSS 10.0
CVE-2024-49326
CRITICAL
Affiliator <= 2.1.3 - Unauthenticated Arbitrary File Upload
CVSS 10.0
CVE-2024-49324
CRITICAL
sovratec_case_management <= 1.0.0 - Arbitrary File Upload
CVSS 10.0
CVE-2024-49611
CRITICAL
Paxman Product Website Showcase - Unrestricted Upload
CVSS 10.0
CVE-2024-10161
MEDIUM
PHPGurukul Boat Booking System 1.0 - Unrestricted Upload
CVSS 6.3
CVE-2024-10120
HIGH
wfh45678 Radar <1.0.8 - Unrestricted Upload
CVSS 7.3
CVE-2024-49314
CRITICAL
JiangQie Free Mini Program <2.5.2 - Unrestricted File Upload
CVSS 10.0
CVE-2024-49291
CRITICAL
Gora Tech LLC Cooked Pro <1.8.0 - Uplaod of File with Dangerous Type
CVSS 10.0
CVE-2024-49398
HIGH
Elvaco CMe3100 1.12.1 - Unrestricted File Upload Code Execution
CVE-2024-48180
CRITICAL
ClassCMS <= 4.8 - Remote Code Execution via File Inclusion in nowView Method
CVSS 9.8
CVE-2024-49260
CRITICAL
Limb WordPress Gallery Plugin - Code Injection
CVSS 9.9
CVE-2024-49242
CRITICAL
Shafiq Digital Lottery <3.0.5 - RCE
CVSS 10.0
CVE-2024-49216
CRITICAL
Joshua Clayton Feed Comments <0.2.1 - RCE
CVSS 10.0
CVE-2024-48035
CRITICAL
Takayuki Imanishi ACF Images Search And Insert <1.1.4 - RCE
CVSS 9.9
CVE-2024-48034
CRITICAL
Fliperrr Team Creates 3D Flipbook, PDF Flipbook <1.2 - RCE
CVSS 9.9
Details
Vulnerabilities
4,119
Exploit Likelihood
Medium