Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-434 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-82450	Unrestricted File Upload in CVE-2026-82450 (CVE-2026-82450) vulnerability in CVE-2026-82450 (CVE-2026-82450). Successful exploitation can lead to full system takeover.	High	PHP Remote Code Execution Cwe 434	6 hours ago
CVE-2026-14494	Unrestricted File Upload in wordpress (CVE-2026-14494) vulnerability in wordpress (CVE-2026-14494). Successful exploitation can lead to full system takeover.	Critical	WordPress Remote Code Execution Cwe 434	9 hours ago
CVE-2026-79706	Unrestricted File Upload in wordpress (CVE-2026-79706) vulnerability in wordpress (CVE-2026-79706). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 434	1 day ago
CVE-2026-18983	Unrestricted File Upload in wordpress (CVE-2026-18983) vulnerability in wordpress (CVE-2026-18983). Successful exploitation can lead to full system takeover.	High	PHP WordPress Remote Code Execution Cross-Site Scripting +1	1 day ago
CVE-2026-81931	Unrestricted File Upload in CVE-2026-81931 (CVE-2026-81931) vulnerability in CVE-2026-81931 (CVE-2026-81931). Risk of unauthorized operations or information disclosure.		PHP JavaScript Cwe 434	2 days ago
CVE-2026-78274	Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions. Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.	Critical	Cwe 434	2 days ago
CVE-2026-77991	Unrestricted File Upload in csharp (CVE-2026-77991) vulnerability in csharp (CVE-2026-77991). Risk of unauthorized operations or information disclosure.		PHP C# Remote Code Execution Cwe 434	2 days ago
CVE-2026-77018	Unrestricted File Upload in wordpress (CVE-2026-77018) vulnerability in wordpress (CVE-2026-77018). Successful exploitation can lead to full system takeover.	High	WordPress Remote Code Execution Cwe 434	2 days ago
CVE-2026-75331	Unrestricted File Upload in CVE-2026-75331 (CVE-2026-75331) vulnerability in CVE-2026-75331 (CVE-2026-75331). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Java Cross-Site Scripting Cwe 434	3 days ago
CVE-2025-61165	Unrestricted File Upload in CVE-2025-61165 (CVE-2025-61165) vulnerability in CVE-2025-61165 (CVE-2025-61165). Successful exploitation can lead to full system takeover.	Critical	Cwe 434	3 days ago
CVE-2026-18080	Unrestricted File Upload in wordpress (CVE-2026-18080) vulnerability in wordpress (CVE-2026-18080). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Remote Code Execution Cwe 434	3 days ago
CVE-2026-80237	Unrestricted File Upload in CVE-2026-80237 (CVE-2026-80237) vulnerability in CVE-2026-80237 (CVE-2026-80237). Successful exploitation can lead to full system takeover.	High	Cwe 434	3 days ago
CVE-2026-80235	Unrestricted File Upload in CVE-2026-80235 (CVE-2026-80235) vulnerability in CVE-2026-80235 (CVE-2026-80235). Successful exploitation can lead to full system takeover.	Critical	Cwe 434	3 days ago
CVE-2026-80233	Unrestricted File Upload in CVE-2026-80233 (CVE-2026-80233) vulnerability in CVE-2026-80233 (CVE-2026-80233). Successful exploitation can lead to full system takeover.	High	Cwe 434	3 days ago
CVE-2026-80050	Unrestricted File Upload in CVE-2026-80050 (CVE-2026-80050) vulnerability in CVE-2026-80050 (CVE-2026-80050). Data can be tampered with by attackers.	Medium	Cwe 434	4 days ago
CVE-2026-75496	Unrestricted File Upload in CVE-2026-75496 (CVE-2026-75496) vulnerability in CVE-2026-75496 (CVE-2026-75496). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `153ec1c` or later.	High	Remote Code Execution Cwe 434	4 days ago
CVE-2026-55419	Unrestricted File Upload in reachy-mini (CVE-2026-55419) vulnerability in reachy-mini (CVE-2026-55419). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.2` or later.	Medium	Cwe 434	4 days ago
CVE-2026-16286	Unrestricted File Upload in CVE-2026-16286 (CVE-2026-16286) vulnerability in CVE-2026-16286 (CVE-2026-16286). Successful exploitation can lead to full system takeover.	Critical	Cwe 434	4 days ago
CVE-2026-79670	Unrestricted File Upload in CVE-2026-79670 (CVE-2026-79670) vulnerability in CVE-2026-79670 (CVE-2026-79670). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 434	4 days ago
CVE-2026-16601	The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is... The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is...	High	JavaScript WordPress Remote Code Execution Cwe 434 +1	4 days ago
CVE-2026-56702	Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the... Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the...	High	PHP Cwe 434 Remote Code Execution	4 days ago
CVE-2026-32559	Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions. Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.	Critical	Cwe 434	5 days ago
CVE-2026-78337	Unrestricted File Upload in CVE-2026-78337 (CVE-2026-78337) vulnerability in CVE-2026-78337 (CVE-2026-78337). Risk of unauthorized operations or information disclosure.		JavaScript Cwe 434	5 days ago
CVE-2026-78245	Vulnerability in CVE-2026-78245 (CVE-2026-78245) vulnerability in CVE-2026-78245 (CVE-2026-78245). Risk of unauthorized operations or information disclosure.	High	PHP Cwe 284 Cwe 434	5 days ago
CVE-2026-78202	Vulnerability in CVE-2026-78202 (CVE-2026-78202) vulnerability in CVE-2026-78202 (CVE-2026-78202). Risk of unauthorized operations or information disclosure.	High	PHP Cwe 284 Cwe 434	5 days ago
CVE-2026-19852	Unrestricted File Upload in CVE-2026-19852 (CVE-2026-19852) vulnerability in CVE-2026-19852 (CVE-2026-19852). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 434	5 days ago
CVE-2026-49849	Unrestricted File Upload in laravel (CVE-2026-49849) vulnerability in laravel (CVE-2026-49849). Successful exploitation can lead to full system takeover.	Critical	PHP Laravel Remote Code Execution Cwe 434	1 week ago
CVE-2026-77681	Vulnerability in CVE-2026-77681 (CVE-2026-77681) vulnerability in CVE-2026-77681 (CVE-2026-77681). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 284 Cwe 434	1 week ago
CVE-2026-2334	Unrestricted File Upload in CVE-2026-2334 (CVE-2026-2334) vulnerability in CVE-2026-2334 (CVE-2026-2334). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 434	1 week ago
CVE-2026-76995	Vulnerability in CVE-2026-76995 (CVE-2026-76995) vulnerability in CVE-2026-76995 (CVE-2026-76995). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 284 Cwe 434	1 week ago
CVE-2026-64960	Unrestricted File Upload in CVE-2026-64960 (CVE-2026-64960) vulnerability in CVE-2026-64960 (CVE-2026-64960). Risk of unauthorized operations or information disclosure.		Remote Code Execution Cwe 434	1 week ago
CVE-2026-74018	Subscriber Arbitrary File Upload in Warehouse Cargo <= 2.6.9 versions. Subscriber Arbitrary File Upload in Warehouse Cargo <= 2.6.9 versions.	Critical	Cwe 434	1 week ago
CVE-2026-74014	Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions. Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions.	Critical	Cwe 434	1 week ago
CVE-2026-74016	Subscriber Arbitrary File Upload in Smart Cleaning <= 4.8.6 versions. Subscriber Arbitrary File Upload in Smart Cleaning <= 4.8.6 versions.	Critical	Cwe 434	1 week ago
CVE-2026-66600	Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions. Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions.	Critical	Cwe 434	1 week ago
CVE-2026-14946	Unrestricted File Upload in CVE-2026-14946 (CVE-2026-14946) vulnerability in CVE-2026-14946 (CVE-2026-14946). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434	1 week ago
CVE-2026-15049	Unrestricted File Upload in wordpress (CVE-2026-15049) vulnerability in wordpress (CVE-2026-15049). Successful exploitation can lead to full system takeover.	High	PHP WordPress Remote Code Execution Cwe 434	1 week ago
CVE-2026-76800	Vulnerability in CVE-2026-76800 (CVE-2026-76800) vulnerability in CVE-2026-76800 (CVE-2026-76800). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 284 Cwe 434	1 week ago
CVE-2026-68899	Unrestricted File Upload in CVE-2026-68899 (CVE-2026-68899) vulnerability in CVE-2026-68899 (CVE-2026-68899). Confidential information can be exposed externally.	High	JavaScript Cwe 434	1 week ago
CVE-2026-32475	Unrestricted File Upload in CVE-2026-32475 (CVE-2026-32475) vulnerability in CVE-2026-32475 (CVE-2026-32475). Successful exploitation can lead to full system takeover.	Critical	Cwe 434	1 week ago
CVE-2026-75949	Unrestricted File Upload in csrf (CVE-2026-75949) vulnerability in csrf (CVE-2026-75949). Risk of unauthorized operations or information disclosure.		Cross-Site Request Forgery Path Traversal Cwe 434	1 week ago
CVE-2026-74803	Unrestricted File Upload in CVE-2026-74803 (CVE-2026-74803) vulnerability in CVE-2026-74803 (CVE-2026-74803). Risk of unauthorized operations or information disclosure.		Cwe 434	1 week ago
CVE-2026-73373	Unrestricted File Upload in CVE-2026-73373 (CVE-2026-73373) vulnerability in CVE-2026-73373 (CVE-2026-73373). Risk of unauthorized operations or information disclosure.		Cwe 434	1 week ago
CVE-2026-73996	Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions. Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.	Critical	Cwe 434	1 week ago
CVE-2026-66627	Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions. Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.	Critical	Cwe 434	1 week ago
CVE-2026-32474	Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions. Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.	Critical	Cwe 434	1 week ago
CVE-2026-32463	Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions. Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.	Critical	Cwe 434	1 week ago
CVE-2026-28192	Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions. Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.	Critical	Cwe 434	1 week ago
CVE-2024-14046	Vulnerability in CVE-2024-14046 (CVE-2024-14046) vulnerability in CVE-2024-14046 (CVE-2024-14046). Risk of unauthorized operations or information disclosure.	Medium	Cwe 284 Cwe 434	1 week ago
CVE-2026-15748	Unrestricted File Upload in wordpress (CVE-2026-15748) vulnerability in wordpress (CVE-2026-15748). Successful exploitation can lead to full system takeover.	Critical	WordPress Remote Code Execution Cwe 434	1 week ago

Vulnerabilities

🍪 About cookies