Falhas do tipo CWE-434

2.806 resultados
CVE-2025-55746CRITICALDirectus allows unauthenticated file upload and file modification due to lacking input sanitizationEPSS 0.4%CVE-2025-3765MEDIUMSourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted uploadEPSS 0.4%CVE-2025-42910CRITICALUnrestricted File Upload Vulnerability in SAP Supplier Relationship ManagementEPSS 0.4%CVE-2026-2097HIGHFlowring｜Agentflow - Arbitrary File UploadEPSS 0.4%CVE-2025-15240HIGHQuanta Computer｜QOCA aim AI Medical Cloud Platform - Arbitrary File UploadEPSS 0.4%CVE-2025-67289CRITICALAn arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0 allows attackers to execute arbitrary code viaEPSS 0.4%CVE-2025-30996CRITICALArbitrary File Upload Vulnerability in WordPress themes by ThemifyEPSS 0.4%CVE-2025-3593MEDIUMZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted uploadEPSS 0.4%CVE-2023-6551MEDIUMStored XSS in class.upload.phpEPSS 0.4%CVE-2025-20376MEDIUMCisco Unified Contact Center Express Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-25923HIGHPhar Deserialization leading to Arbitrary File Deletion in my little forumEPSS 0.4%CVE-2025-69403CRITICALWordPress Bravis Addons plugin <= 1.3.0 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2026-40747CRITICALWordPress Ecommerce Zone theme <= 0.9.7 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2026-40746CRITICALWordPress Restaurant Zone theme <= 0.7.8 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2026-40748CRITICALWordPress Kids Gift Shop theme <= 0.5.4 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-68549CRITICALWordPress Wiguard theme < 2.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-68554CRITICALWordPress Keenarch theme < 2.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-68986CRITICALWordPress Miion theme <= 1.2.7 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-68555CRITICALWordPress Nutrie theme < 2.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2026-25446CRITICALWordPress WishList Member X plugin <= 3.29.0 - Arbitrary File Upload vulnerabilityEPSS 0.4%