CWE-646 · 10 kayıt

Reliance on File Name or Extension of Externally-Supplied File

Bu sınıftaki CVE’ler

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2024-38432İstismar yok	Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied Filematrix-globalservices · tafnit · CWE-646 Kimlik doğrulamasız	Kritik9,8	—	%0,2	30 Tem 2024
37İzleyin	CVE-2024-52052İstismar yok	Stream Target Remote Code Execution in Wowza Streaming Enginewowza · streaming engine · CWE-646 RCE	Kritik9,4	—	%0,5	21 Kas 2024
35İzleyin	CVE-2021-34639İstismar yok	WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Uploadw3eden · download manager · CWE-646 Dosya yükleme	Yüksek8,8	—	%0,6	5 Ağu 2021
35İzleyin	CVE-2023-45599İstismar yok	A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web applicatailux · imx6 · CWE-646	Yüksek8,8	—	%0,2	5 Mar 2024
34İzleyin	CVE-2025-58449İstismar yok	Maho Vulnerable to Authenticated Remote Code Execution via File Uploadmahocommerce · maho · CWE-646 RCE	Yüksek8,7	—	%0,3	8 Eyl 2025
26İzleyin	CVE-2025-30662İstismar yok	Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Followingzoom · workplace virtual desktop infrastructure · CWE-646 Kimlik doğrulamasız	Orta6,5	—	%0,1	13 Kas 2025
22İzleyin	GHSA-hw34-rqc5-h2gmİstismar yok	Duplicate Advisory: Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static AnalysisPyPI · picklescan · CWE-646 pre-auth RCE	Orta5,5	—	—	3 Mar 2025
21İzleyin	CVE-2025-1889İstismar yok	picklescan - Security scanning bypass via non-standard file extensionsmmaitre314 · picklescan · CWE-646 Kimlik doğrulamasız	Orta5,3	—	%0,4	3 Mar 2025
17İzleyin	CVE-2025-41720İstismar yok	Sauter: Arbitrary File Uploadsauter · modulo 6 devices modu680-as · CWE-646 Dosya yükleme	Orta4,3	—	%0,2	22 Eki 2025
17İzleyin	CVE-2026-20172İstismar yok	Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerabilitycisco · cisco enterprise chat and email · CWE-646	Orta4,3	—	%0,1	6 May 2026

CVE-2024-38432
39İzleyin
Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
matrix-globalservices · tafnit30 Tem 2024
CVE-2024-52052
37İzleyin
Stream Target Remote Code Execution in Wowza Streaming Engine
KritikCVSS 9,4İstismar yokEPSS %0
- RCE
wowza · streaming engine21 Kas 2024
CVE-2021-34639
35İzleyin
WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1
- Dosya yükleme
w3eden · download manager5 Ağu 2021
CVE-2023-45599
35İzleyin
A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web applicat
YüksekCVSS 8,8İstismar yokEPSS %0
ailux · imx65 Mar 2024
CVE-2025-58449
34İzleyin
Maho Vulnerable to Authenticated Remote Code Execution via File Upload
YüksekCVSS 8,7İstismar yokEPSS %0
- RCE
mahocommerce · maho8 Eyl 2025
CVE-2025-30662
26İzleyin
Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
zoom · workplace virtual desktop infrastructure13 Kas 2025
GHSA-hw34-rqc5-h2gm
22İzleyin
Duplicate Advisory: Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis
OrtaCVSS 5,5İstismar yok
- pre-auth RCE
PyPI · picklescan3 Mar 2025
CVE-2025-1889
21İzleyin
picklescan - Security scanning bypass via non-standard file extensions
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
mmaitre314 · picklescan3 Mar 2025
CVE-2025-41720
17İzleyin
Sauter: Arbitrary File Upload
OrtaCVSS 4,3İstismar yokEPSS %0
- Dosya yükleme
sauter · modulo 6 devices modu680-as22 Eki 2025
CVE-2026-20172
17İzleyin
Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
cisco · cisco enterprise chat and email6 May 2026

Tüm zafiyet sınıfları