https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-2042.htmlhttps://patchthecve.com/cve/CVE-2014-2042.htmlWed, 17 Jun 2026 00:05:58 +0000HIGH 7.5: Unrestricted file upload vulnerability in the Manage Project functionality in Livetecs Timelive before 6.5.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a predictable directory in https://patchthecve.com/cve/CVE-2014-1217.htmlhttps://patchthecve.com/cve/CVE-2014-1217.htmlWed, 17 Jun 2026 00:04:32 +0000HIGH 7.5: Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and credentials via unspecified vectors.https://patchthecve.com/cve/CVE-2013-4898.htmlhttps://patchthecve.com/cve/CVE-2013-4898.htmlTue, 16 Jun 2026 23:58:04 +0000MEDIUM 6.5: Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in public/temporary