Falhas do tipo CWE-434

2.809 resultados
CVE-2025-37132HIGHAuthenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File WriteEPSS 0.5%CVE-2025-7879MEDIUMMetasoft 美特软件 MetaCRM mobileupload.jsp unrestricted uploadEPSS 0.5%CVE-2025-69559CRITICALcode-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php.EPSS 0.5%CVE-2023-4988MEDIUMBettershop LaikeTui unrestricted uploadEPSS 0.5%CVE-2024-49398HIGHUnrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe3100EPSS 0.5%CVE-2025-39557CRITICALWordPress Kadence WooCommerce Email Designer plugin <= 1.5.14 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2022-3537HIGHRole Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File UploadEPSS 0.5%CVE-2024-40744CRITICALExtension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8EPSS 0.5%CVE-2024-49324CRITICALWordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-6885CRITICALBorG Technology Corporation｜Borg SPM 2007 - Arbitrary File UploadEPSS 0.5%CVE-2023-53942CRITICALFile Thingie 2.5.7 Authenticated Arbitrary File Upload Remote Code ExecutionEPSS 0.5%CVE-2025-63227HIGHThe Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patEPSS 0.5%CVE-2024-52372CRITICALWordPress Easy CSV Importer plugin <= 7.0.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52374CRITICALWordPress Do That Task plugin <= 1.5.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49291CRITICALWordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49216CRITICALWordPress Feed Comments Number plugin <= 0.2.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52379CRITICALWordPress kineticPay for WooCommerce plugin <= 2.0.8 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50484CRITICALWordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52373CRITICALWordPress Devexhub Gallery plugin <= 2.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49242CRITICALWordPress Digital Lottery plugin <= 3.0.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%