A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application all...

Mar 5, 2024

CVE-2021-34639

HIGH

WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload

Aug 5, 2021

Searching...

Filters

10 vulnerabilities found

CVE-2026-45315

HIGH

Open WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions

May 15, 2026

CVE-2026-20172

MEDIUM

Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability

May 6, 2026

CVE-2025-30662

MEDIUM

Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following

Nov 13, 2025

CVE-2025-41720

MEDIUM

Sauter: Arbitrary File Upload

Oct 22, 2025

CVE-2025-58449

HIGH

Maho Vulnerable to Authenticated Remote Code Execution via File Upload

Sep 8, 2025

CVE-2025-1889

CRITICAL

picklescan - Security scanning bypass via non-standard file extensions

Mar 3, 2025

CVE-2024-52052

CRITICAL

Stream Target Remote Code Execution in Wowza Streaming Engine

Nov 21, 2024

CVE-2024-38432

MEDIUM

Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Jul 30, 2024

CVE-2023-45599

MEDIUM

A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application all...

Mar 5, 2024

CVE-2021-34639

HIGH

WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload

Aug 5, 2021