CVE-2019-19925
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
CVSS
7.5
Alto
EPSS
6.8%
p94
KEV
—
Exploit Today
28
0-100
Publicado: 24 dic 2019 · Última mod.: 14 oct 2026 · CWE-434
6.8%EPSS · 30 días6.8%
2026-10-032026-10-31
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2020:0514
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- github.comhttps://github.com/sqlite/sqlite/commit/54d501092d88c0cf89bec4279951f548fb0b8618
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20200114-0003/
- usn.ubuntu.comhttps://usn.ubuntu.com/4298-1/
- www.debian.orghttps://www.debian.org/security/2020/dsa-4638
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2020.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2020:0514
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- github.comhttps://github.com/sqlite/sqlite/commit/54d501092d88c0cf89bec4279951f548fb0b8618
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20200114-0003/
- usn.ubuntu.comhttps://usn.ubuntu.com/4298-1/
- www.debian.orghttps://www.debian.org/security/2020/dsa-4638
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2020.html
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-760108.8 ALT66.4%
——20The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the render_image function. This is due to unrestricted mass assignment of caller-supplied meta_data keys onto the image model combined with missing realpath containment in path construction and a bypassable signature check on the public image delivery route. This makes it possible for authenticated attackers, with custom-level access and above, to execute code on the server. Exploitation requires the authenticated attacker to own at least one NextGEN gallery — a condition that can be satisfied by any Subscriber who was ever granted the 'NextGEN Manage gallery' capability, and that access is retained indefinitely due to the stored gallery-author equality fallback in _can_manage_gallery() even after the capability is revoked.1dCVE-2026-1182359.8 CRÍ54.6%
——16The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload function. This is due to missing server-side file key allowlist and pre-sanitization extension derivation that allows a trailing-dot filename to bypass all extension and MIME validation in handle_upload. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. The only access control is a nonce that is printed into every public form's data-nonce attribute, making it trivially obtainable by any unauthenticated visitor on a page embedding the form shortcode.1dCVE-2026-1165129.8 CRÍ48.0%
——14The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated directly into the pipe-delimited validation rule string, which is then split and each token invoked as a dynamic PHP function with no allowlist check. This makes it possible for unauthenticated attackers to execute code on the server. This is exploitable by unauthenticated attackers because WordPress core executes the route argument's validate_callback inside WP_REST_Server::dispatch() before the route's permission_callback is invoked, meaning the Project_Manage_Capability authorization gate is never reached on the vulnerable code path.2dCVE-2026-760127.5 ALT57.6%
——17The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacy_render function. This is due to broken authorization on the Lightroom gallery_edit endpoint combined with mass assignment of gallery path and unrestricted file upload into a registered template directory, whose extension check uses a substring match that accepts sanitized .php_ filenames as valid templates. This makes it possible for authenticated attackers, with custom-level access and above, to execute code on the server. Exploitation requires the authenticated attacker to be the stored author of at least one existing NextGEN gallery, as ownership of that gallery is the sole authorization check gating the mass-assignment and upload steps.2dCVE-2026-1196207.3 ALT39.4%
——12A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This vulnerability affects the function move_uploaded_file of the file admin/add_logs.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.2dCVE-2026-1153468.1 ALT51.6%
——15The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convert_palette_images_to_truecolor() function. This is due to insufficient file type validation before processing uploaded files. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.2d