CVE-2005-0254
Published May 2, 2005BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files t…
CWE archive
CWE-434 CVEs
Programmatic archive4,206 CVEs tagged with CWE-434 — 1,480 Critical, 1,614 High, 875 Medium, 236 Low, 1 Unrated.
CVE-2004-2262
Published Dec 31, 2004ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the uplo…
CVE-2002-1841
Published Dec 31, 2002The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP fi…
CVE-2001-0901
Published Nov 19, 2001Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then…
- Buzz score
- 8.0
CVE-2001-1099
Published Sep 7, 2001The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attac…
CVE-2001-0340
Published Jul 21, 2001An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a use…
- Buzz score
- 4.0
Showing 4,201-4,206 of 4,206 CVEsPage 169 of 169