cve.bz

OWASP A05:2025 Injection vulnerabilities, newest first, page 43

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A05:2025 at MITRE.

Its weaknesses: 37

CWE-20, CWE-74, CWE-76, CWE-77, CWE-78, CWE-79, CWE-80, CWE-83, CWE-86, CWE-88, CWE-89, CWE-90, CWE-91, CWE-93, CWE-94, CWE-95, CWE-96, CWE-97, CWE-98, CWE-99, CWE-103, CWE-104, CWE-112, CWE-113, CWE-114, CWE-115, CWE-116, CWE-129, CWE-159, CWE-470, CWE-493, CWE-500, CWE-564, CWE-610, CWE-643, CWE-644, CWE-917

  1. 8.8CVE-2026-83891EPSS 0.9%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  2. 5.5CVE-2026-83798EPSS 0.2%

    Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.

  3. 8.8CVE-2026-83759EPSS 0.9%

    Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.

  4. 5.5CVE-2026-70294EPSS 0.5%

    Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  5. 9.3CVE-2026-70279EPSS 1.3%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  6. 8.8CVE-2026-70266EPSS 1.1%

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  7. 7.8CVE-2026-70177EPSS 0.4%

    Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  8. 7.1CVE-2026-70126EPSS 0.5%

    Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

  9. 8.0CVE-2026-70049EPSS 2.7%

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

  10. 9.8CVE-2026-70024EPSS 1.0%

    Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

  11. 7.8CVE-2026-69934EPSS 0.4%

    Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  12. 7.8CVE-2026-69718EPSS 0.4%

    Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.

  13. 8.8CVE-2026-69370EPSS 0.9%

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  14. 6.3CVE-2026-110256EPSS 0.4%

    Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticat…

  15. 2.1CVE-2026-110239EPSS 0.2%

    Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through…

  16. 7.1CVE-2026-110236EPSS 1.0%

    KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and …

  17. 8.4CVE-2026-110233EPSS 1.2%

    Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a paylo…

  18. 5.1CVE-2026-110228EPSS 0.3%

    wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocket HTML, Pocket CSV or Shaarli import. Attackers can upload an HTML file …

  19. 5.1CVE-2026-110224EPSS 0.3%

    QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave() that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated ba…

  20. 5.1CVE-2026-110221EPSS 0.2%

    QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the AdminHotelFeaturePricesSettings form that echoes feature_price_name and impact_value POST values unescaped after validation fails. Attackers can lure an a…

  21. 5.1CVE-2026-110219EPSS 0.3%

    QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject scripts through the price parameter of the back-office Additional Facilities form. Attackers can induce an authenticated b…

  22. 6.5CVE-2026-105719EPSS 1.1%

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  23. 8.8CVE-2026-105718EPSS 1.0%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  24. 8.8CVE-2026-105717EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  25. 8.1CVE-2026-104937EPSS 0.6%

    Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting (XSS). When a malicious uploaded file containing an embedded Jav…

  26. 8.5CVE-2026-104816EPSS 0.6%

    Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacke…

  27. 9.8CVE-2026-104584EPSS 1.6%

    reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/reNgine/tasks.py (fetch_url and dir_file_f…

  28. 8.8CVE-2026-103572EPSS 1.0%

    Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

  29. 8.8CVE-2026-102870EPSS 0.9%

    Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

  30. 6.5CVE-2026-102867EPSS 1.0%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  31. 4.6CVE-2026-102864EPSS 0.4%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  32. 8.8CVE-2026-102863EPSS 1.0%

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  33. 4.6CVE-2026-102859EPSS 0.4%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  34. 7.3CVE-2026-100207EPSS 0.4%

    Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.

  35. 9.3CVE-2026-100133EPSS 1.0%

    Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when th…

  36. 9.0CVE-2026-92892EPSS 0.3%

    Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.

  37. 7.2CVE-2026-23707EPSS 0.3%

    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, …

  38. 6.5CVE-2026-23706EPSS 0.3%

    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.6.2, Forti…

  39. 7.2CVE-2026-23705EPSS 0.3%

    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.6, FortiAnalyzer 7.2.0 through 7.2.…

  40. 8.8CVE-2026-108385EPSS 0.4%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_enum and EnumRepresentation.rend…

  41. 8.8CVE-2026-108384EPSS 0.3%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed interpolates a fixed type'…

  42. 8.8CVE-2026-108383EPSS 0.3%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default renders a sche…

  43. 8.8CVE-2026-108382EPSS 0.4%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresentation.render_symbols concatenates each …

  44. 8.8CVE-2026-108381EPSS 0.4%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the Pydantic and AvroDantic model generators insert …

  45. 8.8CVE-2026-108380EPSS 0.4%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFieldRepresentation.add_field_properties ins…

  46. 8.8CVE-2026-108379EPSS 0.3%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type's nam…

  47. 8.8CVE-2026-108378EPSS 0.3%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.render_docstring copies a schema…

  48. 8.8CVE-2026-108377EPSS 0.4%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 through 0.70.5, ClassRepresentation.render_metaclass inserts a schem…

  49. 8.8CVE-2026-108376EPSS 0.5%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.47.3 through 0.70.5, FieldRepresentation.get_field_default inserts a sche…

  50. 8.8CVE-2026-108375EPSS 0.5%

    dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default inserts schema…