cve.bz

OWASP A05:2025 Injection vulnerabilities, newest first, page 129

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A05:2025 at MITRE.

Its weaknesses: 37

CWE-20, CWE-74, CWE-76, CWE-77, CWE-78, CWE-79, CWE-80, CWE-83, CWE-86, CWE-88, CWE-89, CWE-90, CWE-91, CWE-93, CWE-94, CWE-95, CWE-96, CWE-97, CWE-98, CWE-99, CWE-103, CWE-104, CWE-112, CWE-113, CWE-114, CWE-115, CWE-116, CWE-129, CWE-159, CWE-470, CWE-493, CWE-500, CWE-564, CWE-610, CWE-643, CWE-644, CWE-917

  1. 7.5CVE-2026-30064EPSS 0.5%

    Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

  2. 7.5CVE-2026-30058EPSS 0.5%

    Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

  3. 8.8CVE-2026-26899EPSS 0.8%

    An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR #15 (< 2026-01-17). The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharact…

  4. 7.5CVE-2026-26452EPSS 0.5%

    ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers.

  5. 6.1CVE-2026-11747EPSS 0.3%

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned…

  6. 5.1CVE-2026-81814EPSS 0.4%

    Affected versions of Flowintel render calendar event titles using innerHTML. Because those titles are derived from case titles, a user able to create or modify a case title could store HTML or script-capable content that is later interpret…

  7. 5.1CVE-2026-81753EPSS 0.5%

    Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker wit…

  8. 7.5CVE-2026-81743EPSS 0.4%

    Affected versions of Flowintel allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination f…

  9. 8.8CVE-2026-81677EPSS 0.4%

    The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of the GET parameter `id_ambito`. An attacker can inject SQL syntax that breaks the underlying structure of the MariaDB query, resulting in syn…

  10. 8.8CVE-2026-81676EPSS 0.5%

    A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the `limit_videos` parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this paramete…

  11. 9.3CVE-2026-81675EPSS 0.4%

    The endpoint ‘/ws/apiprensa/getVideoUltimasSeccion’ contains an SQL injection vulnerability in the id_seccion parameter. The parameter is directly embedded in a complex SQL query that includes grouping and sorting operations. By injecting …

  12. 9.3CVE-2026-81674EPSS 0.5%

    The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's …

  13. 9.3CVE-2026-81673EPSS 0.6%

    The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote att…

  14. 9.3CVE-2026-81672EPSS 0.5%

    SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id_video parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors whe…

  15. 8.6CVE-2026-81662EPSS 0.5%

    Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing …

  16. 1.9CVE-2026-81562EPSS 1.1%

    A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. …

  17. 9.3CVE-2026-74233EPSS 3.4%

    Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and …

  18. 7.0CVE-2026-66155EPSS 0.3%

    A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions < V49.16.1). The si-map component does not properly neutralize user-cont…

  19. 4.3CVE-2026-5218EPSS 0.3%

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting (XSS). This issue affects E-Commerce Pack: be…

  20. 8.5CVE-2026-81277EPSS 0.4%

    Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.

  21. 7.1CVE-2026-78293EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in WP w3all phpBB <= 3.0.6 versions.

  22. 7.1CVE-2026-78289EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in CozyStay <= 1.10.0 versions.

  23. 9.3CVE-2026-78288EPSS 0.4%

    Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.

  24. 8.5CVE-2026-78285EPSS 0.4%

    Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.

  25. 7.1CVE-2026-78283EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions.

  26. 7.1CVE-2026-78281EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.

  27. 6.5CVE-2026-78273EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro <= 2.0.11 versions.

  28. 7.1CVE-2026-78261EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions.

  29. 9.3CVE-2026-78260EPSS 0.4%

    Unauthenticated SQL Injection in Epayco <= 8.4.6 versions.

  30. 7.0CVE-2026-75020EPSS 0.5%

    Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A caller who holds valid credentials for one entry in the LDAP directory can authenticate through APISIX as a consumer ma…

  31. 8.8CVE-2026-59354EPSS 0.5%

    In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields s…

  32. 8.5CVE-2026-32564EPSS 0.4%

    Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

  33. 8.5CVE-2026-32550EPSS 0.4%

    Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.

  34. 9.3CVE-2026-32479EPSS 0.4%

    Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.17 versions.

  35. 8.8CVE-2026-78333EPSS 0.5%

    The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value submitted by unauthenticated users before storing it in its activity log and outputting it back in an admin area page, leading to a Stored Cross-…

  36. 5.3CVE-2026-77989EPSS 0.4%

    Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton() echoes it unescaped, …

  37. 9.8CVE-2026-47890EPSS 0.6%

    Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

  38. 5.4CVE-2026-47880EPSS 0.3%

    A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String JMS properties named replyChannel, errorChannel, or json__TypeId__ which are copied verbatim into the Spring Integratio…

  39. 6.1CVE-2026-47877EPSS 0.3%

    Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6

  40. 6.6CVE-2026-19225EPSS 0.5%

    The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire networ…

  41. 7.2CVE-2026-19223EPSS 0.7%

    The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network.

  42. 3.5CVE-2026-13416EPSS 0.2%

    The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the coming-soon page, allowing users with the Editor role (when the administrator has granted the Editor role access to the CMP …

  43. 5.5CVE-2026-81203EPSS 0.4%

    A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possi…

  44. 9.8CVE-2026-75336EPSS 0.5%

    Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.

  45. 9.8CVE-2026-75330EPSS 0.5%

    The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server <= 1.3.3 is vulnerable to SQL injection. The module parameter is directly concatenated into the SQL IN clause through StringUtils.split() a…

  46. 7.6CVE-2026-47666EPSS 0.3%

    Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through custom font family names, which are interpolated into a @font-face CSS rule and i…

  47. 8.7CVE-2026-47665EPSS 0.4%

    Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page wit…

  48. 4.8CVE-2026-65930EPSS 0.4%

    LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5.

  49. 9.9CVE-2026-65646EPSS 0.7%

    Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files and escalate privileges.

  50. 7.4CVE-2026-63360EPSS 0.5%

    LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting vulnerability in the user activation confirmation endpoint. The action query parameter is copied into the response and inserted into a hidde…