CWE-434

Medium likelihood

Unrestricted Upload of File with Dangerous Type

Parent: CWE-669 - Incorrect Resource Transfer Between Spheres

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

4,018 vulnerabilities with CWE-434
CVE-2023-26762 HIGH
Sme.UP ERP TOKYO V6R1M220406 - File Upload
CVSS 8.8
CVE-2023-24317 HIGH
Judging Management System 1.0 - File Upload
CVSS 8.1
CVE-2023-0943 MEDIUM
Best Pos Management System - Unrestricted File Upload
CVSS 4.7
CVE-2023-0918 MEDIUM
Pharmacy Management System - Unrestricted File Upload
CVSS 6.3
CVE-2023-22937 MEDIUM
Splunk < 8.1.13 - Improper Input Validation
CVSS 4.3
CVE-2023-24530 HIGH
SAP BusinessObjects Business Intelligence Platform (CMC) - 420-430 ...
CVSS 8.4
CVE-2023-23851 MEDIUM
SAP Business Planning and Consolidation - File Upload
CVSS 5.4
CVE-2023-24646 CRITICAL
Food Ordering System v2.0 - RCE
CVSS 9.8
CVE-2023-0255 HIGH
Enable Media Replace <4.0.2 - Code Injection
CVSS 8.8
CVE-2023-0783 MEDIUM
Shopex Ecshop - Unrestricted File Upload
CVSS 4.7
CVE-2023-24202 CRITICAL
Raffle Draw System v1.0 - Local File Inclusion
CVSS 9.8
CVE-2023-23937 HIGH
Pimcore - Auth Bypass
CVSS 8.2
CVE-2023-0651 MEDIUM
Fastcms - Unrestricted File Upload
CVSS 6.3
CVE-2023-23135 HIGH
Ftdms - Unrestricted File Upload
CVSS 7.2
CVE-2023-24610 HIGH
NOSH 4a5cfdb - Authenticated RCE
CVSS 8.8
CVE-2023-0587 CRITICAL
Trendmicro Apex One - Unrestricted File Upload
CVSS 9.1
CVE-2023-0455 HIGH
Bumsys - Unrestricted File Upload
CVSS 8.8
CVE-2023-22726 HIGH
Act < 0.2.40 - Path Traversal
CVSS 8.0
CVE-2023-23607 CRITICAL
Dasherr < 1.05.00 - Unrestricted File Upload
CVSS 9.8
CVE-2023-20040 MEDIUM
Cisco NSO - DoS
CVSS 5.5
CVE-2023-22851 HIGH
Tiki < 24.2 - Unrestricted File Upload
CVSS 7.2
CVE-2023-0257 MEDIUM
SourceCodester Online Food Ordering System 2.0 - Unrestricted Upload
CVSS 4.7
CVE-2022-50993 CRITICAL
Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet
CVSS 9.8
CVE-2022-50939 HIGH
e107 CMS <3.2.1 - Path Traversal
CVSS 7.2
CVE-2022-50936 HIGH
WBCE CMS 1.5.2 - Authenticated RCE
CVSS 8.8
Details
Vulnerabilities 4,018
Exploit Likelihood Medium