Falhas do tipo CWE-434
2.806 resultadosCVE-2025-12775HIGHWP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.5%CVE-2025-13376HIGHProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File UploadEPSS 0.5%CVE-2025-14532CRITICALRemote Code Execution via Unrestricted File Upload in DobryCMSEPSS 0.5%CVE-2024-31161HIGHASUS Download Master - Arbitrary File UploadEPSS 0.5%CVE-2025-11659MEDIUMProjectsAndPrograms School Management System uploadNotes.php unrestricted uploadEPSS 0.5%CVE-2025-11656MEDIUMProjectsAndPrograms School Management System editNotes.php unrestricted uploadEPSS 0.5%CVE-2025-65783CRITICALAn arbitrary file upload vulnerability in the /utils/uploadFile component of Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows attaEPSS 0.5%CVE-2023-48275HIGHWordPress Widgets for Google Reviews plugin <= 11.0.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-11657MEDIUMProjectsAndPrograms School Management System createNotice.php unrestricted uploadEPSS 0.5%CVE-2026-40412CRITICALAzure Orbital Spatio Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-32206CRITICALWordPress Processing Projects Plugin <= 1.0.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-12478MEDIUMInvoicePlane 1 upload_file unrestricted uploadEPSS 0.5%CVE-2025-3234HIGHFile Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File UploadEPSS 0.5%CVE-2025-26892CRITICALWordPress Celestial Aura plugin <= 2.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-0346MEDIUMcode-projects Content Management System Publish News Page publishnews.php unrestricted uploadEPSS 0.5%CVE-2025-8255MEDIUMcode-projects Exam Form Submission register.php unrestricted uploadEPSS 0.5%CVE-2024-45398HIGHRemote command execution through file upload in contao/core-bundleEPSS 0.5%CVE-2025-4102HIGHBeaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File UploadEPSS 0.5%CVE-2025-14849HIGHAdvantech WebAccess/SCADA Unrestricted Upload of File with Dangerous TypeEPSS 0.5%CVE-2024-56057CRITICALWordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%