cve.bz

OWASP A05:2025 Injection vulnerabilities, newest first, page 70

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A05:2025 at MITRE.

Its weaknesses: 37

CWE-20, CWE-74, CWE-76, CWE-77, CWE-78, CWE-79, CWE-80, CWE-83, CWE-86, CWE-88, CWE-89, CWE-90, CWE-91, CWE-93, CWE-94, CWE-95, CWE-96, CWE-97, CWE-98, CWE-99, CWE-103, CWE-104, CWE-112, CWE-113, CWE-114, CWE-115, CWE-116, CWE-129, CWE-159, CWE-470, CWE-493, CWE-500, CWE-564, CWE-610, CWE-643, CWE-644, CWE-917

  1. 1.2CVE-2026-103445EPSS 0.3%

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Page_Forms extension allows Stored XSS. This issue affects MediaWiki Page_Forms extension: 1.46, 1.45, and 1…

  2. 0.3CVE-2026-103439EPSS 0.1%

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki Wikbase extension: 1.46, 1…

  3. 0.3CVE-2026-103438EPSS 0.1%

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Wikistories extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki Wikistories extension:…

  4. 1.1CVE-2026-103437EPSS 0.3%

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki ReadingLists extension allows Reflected XSS. This issue affects MediaWiki ReadingLists extension: 1.46 and 1…

  5. 7.1CVE-2026-102391EPSS 0.1%

    Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.4 versions.

  6. 7.1CVE-2026-102376EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions.

  7. 7.1CVE-2026-100510EPSS 0.1%

    Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid <= 1.27.14 versions.

  8. 1.1CVE-2026-103444EPSS 0.3%

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master.

  9. 1.1CVE-2026-103443EPSS 0.2%

    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Collection (Book) extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collectio…

  10. 5.5CVE-2026-103232EPSS 0.3%

    A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/table_booking.php. This manipulation of the argument Nam…

  11. 4.4CVE-2026-47562EPSS 0.1%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel log because the supplied version string is not properly sanitized. A successful exploit of this vu…

  12. 6.7CVE-2026-47547EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of service, e…

  13. 6.7CVE-2026-47546EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of service, e…

  14. 6.7CVE-2026-47543EPSS 0.1%

    VIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of se…

  15. 6.7CVE-2026-47542EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of s…

  16. 6.7CVE-2026-47533EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an improper validation of an array index. A successful exploit of this vulnerability might lead to code executi…

  17. 6.7CVE-2026-47525EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an improper validation of an array index. A successful exploit of this vulnerability might lead to code executi…

  18. 6.7CVE-2026-47522EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of s…

  19. 7.8CVE-2026-47507EPSS 0.1%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds array access. A successful exploit of this vulnerability might lead to code execution, denial of s…

  20. 5.5CVE-2026-103231EPSS 0.3%

    A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli_query of the file User/cancel.php of the component Order Cancellation…

  21. 5.5CVE-2026-103230EPSS 0.3%

    A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the file User/ord.php of the component Order Placement. Executing a mani…

  22. 5.5CVE-2026-103229EPSS 0.3%

    A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqli_query of the file admin/delete1.php of the component Unauthenticated Action Scr…

  23. 4.8CVE-2026-100275EPSS 0.2%

    In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible

  24. 6.1CVE-2026-100263EPSS 0.2%

    In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible

  25. 8.8CVE-2026-100254EPSS 0.5%

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings

  26. 5.3CVE-2026-94545EPSS 1.1%

    Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be i…

  27. 10.0CVE-2026-76570EPSS 0.5%

    Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, col…

  28. 7.6CVE-2026-62097EPSS 0.2%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6…

  29. 6.5CVE-2026-62084EPSS 0.1%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Submitted Posts allows Stored XSS. This issue affects User Submitted Posts: from n/a through 20260810.

  30. 9.8CVE-2026-18782EPSS 0.5%

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES:…

  31. 6.2CVE-2026-103389EPSS 0.3%

    MISP contains a stored cross-site scripting (XSS) vulnerability in the galaxy icon handling path. The icon field of a galaxy object was persisted without any server-side validation through the galaxy add, edit, and sync/import capture endp…

  32. 6.2CVE-2026-103388EPSS 0.2%

    MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTER_VALIDATE_URL validation. Because FILTER_VALIDATE_URL accepts the javascript: URI scheme, a user with galaxy editor pri…

  33. 9.8CVE-2026-82307EPSS 0.3%

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1.

  34. 6.5CVE-2026-97301EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

  35. 6.5CVE-2026-97298EPSS 0.1%

    Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.86 versions.

  36. 8.5CVE-2026-97293EPSS 0.2%

    Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.

  37. 6.5CVE-2026-97292EPSS 0.1%

    Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions.

  38. 7.1CVE-2026-97289EPSS 0.1%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11.2…

  39. 6.5CVE-2026-97288EPSS 0.1%

    Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions.

  40. 8.5CVE-2026-97287EPSS 0.3%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. This issue affects Event Tickets: from n/a through 5.29.5.

  41. 6.5CVE-2026-97286EPSS 0.2%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.

  42. 6.5CVE-2026-97279EPSS 0.1%

    Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.

  43. 7.1CVE-2026-97272EPSS 0.1%

    Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions.

  44. 7.1CVE-2026-97271EPSS 0.1%

    Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.

  45. 6.5CVE-2026-97270EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.

  46. 6.5CVE-2026-97266EPSS 0.1%

    Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.

  47. 6.5CVE-2026-97262EPSS 0.1%

    Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.

  48. 7.1CVE-2026-97253EPSS 0.1%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: from n/a through 8.4.0.

  49. 7.1CVE-2026-97250EPSS 0.1%

    Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

  50. 5.5CVE-2026-97238EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.