CWE-351
CVEs classified under CWE-351, newest first.
3 CVEsRSS
CVE-2026-15305MediumTYPO3 CMS - Unrestricted File Upload in Form Framework
TYPO3 CMS - Unrestricted File Upload in Form Framework
▾ Sunlittypo3 · typo3/cms-formEPSS 0.25%via GHSA
CVE-2025-31951High· 8.8HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability
HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized command execution.
▾ TwilightEPSS 0.25%via NVD
CVE-2023-38831High· 7.8CISA KEV0dayPoCRARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and al…
▾ Abyssalrarlab · winrarEPSS 100%via NVD