CWE-616

CVEs per yearBy the year they were published

1. 20231
2. 20244
3. 20252
4. 20264

Newest CVEs

• CVE-2026-105630

  Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)

  makeplane · plane

  High8.7
• CVE-2026-67198

  Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher

  perspective-dev · perspective

  High8.7
• CVE-2025-67084

  File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which can later be…

  Product not named

  Critical9.9
• CVE-2026-22789

  WebErpMesv2 has a File Upload Validation Bypass Leading to RCE

  SMEWebify · WebErpMesv2

  Medium5.4
• CVE-2025-59402

  Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables…

  Product not named

  Medium5.4
• CVE-2025-52130

  File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to…

  Product not named

  Medium5.4
• CVE-2024-52305

  UnoPim Stored XSS : Cookie hijacking through Create User function

  unopim · unopim

  Medium6.5
• CVE-2024-31601

  An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via…

  Product not named

  Critical9.8
• CVE-2024-28520

  File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain…

  Product not named

  Medium6.5
• CVE-2024-29858

  In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload.

  Product not named

  Critical9.8

Vendors it comes up for most

1. SMEWebify1
2. makeplane1
3. perspective-dev1
4. unopim1