cve.bz

OWASP A05:2025 Injection vulnerabilities, newest first, page 135

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A05:2025 at MITRE.

Its weaknesses: 37

CWE-20, CWE-74, CWE-76, CWE-77, CWE-78, CWE-79, CWE-80, CWE-83, CWE-86, CWE-88, CWE-89, CWE-90, CWE-91, CWE-93, CWE-94, CWE-95, CWE-96, CWE-97, CWE-98, CWE-99, CWE-103, CWE-104, CWE-112, CWE-113, CWE-114, CWE-115, CWE-116, CWE-129, CWE-159, CWE-470, CWE-493, CWE-500, CWE-564, CWE-610, CWE-643, CWE-644, CWE-917

  1. 8.6CVE-2026-71916EPSS 1.8%

    Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerability is caused by incomplete filtering of dangerous characters such as backticks, newline characters, and single quote…

  2. 8.6CVE-2026-71915EPSS 2.3%

    Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerability is caused by insufficient filtering of the usescript, usefile, and option fields before command execution. A remote…

  3. 9.3CVE-2026-71914EPSS 2.6%

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of UDP message content after START_SPEED_TEST before command execution. A remote at…

  4. 8.6CVE-2026-71913EPSS 1.8%

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient filtering before the restorekey field is concatenated into a shell command. A remot…

  5. 8.6CVE-2026-71910EPSS 2.3%

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of the CMD0, CMD3, and CMD6 fields before command execution. A remote attacker can…

  6. 8.6CVE-2026-71909EPSS 2.3%

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of the time field before command execution. A remote attacker can trigger this vul…

  7. 8.6CVE-2026-71908EPSS 2.3%

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the mesh_start_speed_test function. The vulnerability is caused by insufficient sanitization of the meshdevice_index and meshdevice_ip fields before command execu…

  8. 8.6CVE-2026-71907EPSS 2.3%

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of the selectSlaves field before command execution. A remote attacker can trigger th…

  9. 8.6CVE-2026-71906EPSS 2.3%

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can tri…

  10. 8.6CVE-2026-71905EPSS 2.3%

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A r…

  11. 8.6CVE-2026-71904EPSS 1.8%

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the event_code field is concatenated into a sys…

  12. 6.1CVE-2026-34491EPSS 0.4%

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; M…

  13. 8.5CVE-2026-16348EPSS 2.1%

    An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection.  …

  14. 9.8CVE-2026-78329EPSS 0.7%

    Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. UndertowEndpoint defaulted its headerFilter…

  15. 9.8CVE-2026-71300EPSS 0.7%

    Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-atmosphere-websocket p…

  16. 5.3CVE-2026-63621EPSS 0.6%

    Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component The Knative consumer in camel-knative maps inbound CloudEvent at…

  17. 6.5CVE-2026-59230EPSS 0.7%

    Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-mail component ships a MimeMultipart data format tha…

  18. 8.8CVE-2026-13212EPSS 0.4%

    The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtio_isr() (drivers/virtio/virtio_common.c), the device-written vq->used->ring[idx].id is used directly as an in…

  19. 8.0CVE-2026-78414EPSS 0.3%

    Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticate…

  20. 8.8CVE-2026-78391EPSS 0.4%

    RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names originating from external sources, including the public crowd-sourced ransomwhe.r…

  21. 7.5CVE-2026-76055EPSS 0.2%

    Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating sys…

  22. 5.1CVE-2026-65053EPSS 0.4%

    Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML status block without escaping it. In lib/Mime/Viewer/Appledouble.php, _IMPrender() obtains the name of the data part with IMP_Contents::getPartN…

  23. 8.5CVE-2026-39915EPSS 0.5%

    TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embedding unsanitized carriage return and line feed sequences in the rt URL parameter…

  24. 7.0CVE-2026-78367EPSS 0.2%

    A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{ba…

  25. 5.5CVE-2026-78248EPSS 0.4%

    A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=save_settings. This manipulation of the argument Name causes sql injection. The…

  26. 8.7CVE-2026-76841EPSS 1.0%

    Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trust_remote_code=True as a literal or as an unconditional defa…

  27. 8.5CVE-2026-76840EPSS 0.4%

    RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStre…

  28. 9.1CVE-2026-59568EPSS 0.7%

    Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

  29. 6.8CVE-2026-17033EPSS 0.2%

    An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in ano…

  30. 5.5CVE-2026-78247EPSS 0.4%

    A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirm_order. The manipulation of the argument ID results in sql injecti…

  31. 6.5CVE-2026-78290EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions.

  32. 7.6CVE-2026-78270EPSS 0.4%

    Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.

  33. 5.5CVE-2026-78246EPSS 0.4%

    A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql …

  34. 8.1CVE-2026-66671EPSS 0.5%

    Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.

  35. 8.1CVE-2026-66670EPSS 0.5%

    Unauthenticated Local File Inclusion in Måne <= 1.7 versions.

  36. 7.1CVE-2026-66623EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Social Media & Share Icons <= 2.9.9 versions.

  37. 7.1CVE-2026-66610EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.

  38. 7.1CVE-2026-66599EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.

  39. 9.8CVE-2026-66587EPSS 0.5%

    Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

  40. 7.1CVE-2026-66584EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in 12 Step Meeting List <= 3.19.16 versions.

  41. 9.3CVE-2026-32551EPSS 0.4%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DiviNext Woo Essential allows SQL Injection. This issue affects Woo Essential: from n/a through 4.3.0.

  42. 8.5CVE-2026-32478EPSS 0.4%

    Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.

  43. 7.1CVE-2026-32476EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions.

  44. 8.5CVE-2026-32471EPSS 0.4%

    Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.

  45. 7.1CVE-2026-28166EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions.

  46. 7.1CVE-2026-28162EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Events Made Easy <= 3.2.5 versions.

  47. 8.1CVE-2026-28152EPSS 0.5%

    Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.

  48. 8.1CVE-2026-28151EPSS 0.5%

    Unauthenticated Local File Inclusion in Tonda < 2.6 versions.

  49. 5.5CVE-2026-78244EPSS 0.4%

    A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/delivery_type/search_price/proper…

  50. 4.8CVE-2026-10618EPSS 0.3%

    Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendered HTML without escaping them. New in markup/internal/attributes/attributes.go converts every attribute value from a byt…