Most recent entries from all

EUVD-2026-212924

fkie_cve-2023-27397

Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.

GHSA-g497-rhxm-mc9f

gsd-2023-27397

jvndb-2023-000043

MicroEngine Mailform provided by MicroEngine Inc. contains multiple vulnerabilities listed below.<ul><li>Unrestricted upload of file with dangerous type (CWE-434) - CVE-2023-27397</li><li>Path traversal (CWE-22) - CVE-2023-27507</li></ul>Yuji Tounai of Mitsui Bussan Secure Directions, Inc. and hibiki moriyama of STNet, Incorporated reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.