CWE-434

Medium likelihood

Unrestricted Upload of File with Dangerous Type

Parent: CWE-669 - Incorrect Resource Transfer Between Spheres

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

4,016 vulnerabilities with CWE-434
CVE-2023-6925 HIGH
Unitecms Unlimited Addons For Wpbaker... - Unrestricted File Upload
CVSS 7.2
CVE-2023-6846 HIGH
Filemanagerpro File Manager < 8.3.4 - Unrestricted File Upload
CVSS 8.8
CVE-2023-6635 HIGH
EditorsKit <1.40.3 - File Upload
CVSS 7.2
CVE-2023-6675 CRITICAL
Nationalkeep Cybermath - Unrestricted File Upload
CVSS 9.8
CVE-2023-31505 HIGH
Schlix CMS <2.2.8-1 - RCE
CVSS 7.2
CVE-2023-52221 CRITICAL
Ukrsolution Barcode Scanner And Inven... - Unrestricted File Upload
CVSS 10.0
CVE-2023-52324 HIGH
Trendmicro Apex Central - Unrestricted File Upload
CVSS 8.8
CVE-2023-51925 CRITICAL
YonBIP <3_23.05 - RCE
CVSS 9.8
CVE-2023-51924 CRITICAL
YonBIP <3.23.05 - RCE
CVSS 9.8
CVE-2023-51928 CRITICAL
YonBIP <3.23.05 - RCE
CVSS 9.8
CVE-2023-27168 CRITICAL
Xpand IT Write-back Manager <2.3.1 - RCE
CVSS 9.8
CVE-2023-40051 CRITICAL
Progress Openedge < 11.7.18 - Unrestricted File Upload
CVSS 9.1
CVE-2023-4536 HIGH
WordPress Plugin <1.3.2 - Authenticated RCE
CVSS 8.8
CVE-2023-50729 HIGH
Traccar < 5.11 - Unrestricted File Upload
CVSS 8.4
CVE-2023-51806 MEDIUM
Ujcms 8.0.2 - RCE
CVSS 5.4
CVE-2023-46474 HIGH
PMB 7.4.8 - RCE
CVSS 7.2
CVE-2023-6979 HIGH
Cusrev Customer Reviews For Woocommerce - Unrestricted File Upload
CVSS 8.8
CVE-2023-6636 HIGH
Greenshift - WordPress Plugin <7.6.2 - RCE
CVSS 7.2
CVE-2023-6558 HIGH
WordPress <2.4.8 - RCE
CVSS 7.2
CVE-2023-6316 CRITICAL
MW WP Form <5.0.1 - File Upload
CVSS 9.8
CVE-2023-6220 HIGH
Piotnet Forms <1.0.26 - File Upload
CVSS 8.1
CVE-2023-49715 MEDIUM
Wwbn Avideo - Unrestricted File Upload
CVSS 4.3
CVE-2023-50982 CRITICAL
Studip Stud.ip < 5.0.9 - XSS
CVSS 9.0
CVE-2023-6140 HIGH
Essential Real Estate <4.4.0 - RCE
CVSS 8.8
CVE-2023-5957 HIGH
Naziinfotech NI Purchase Order(po) Fo... - Unrestricted File Upload
CVSS 7.2
Details
Vulnerabilities 4,016
Exploit Likelihood Medium