cve.bz

OWASP A05:2025 Injection vulnerabilities, newest first, page 8

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A05:2025 at MITRE.

Its weaknesses: 37

CWE-20, CWE-74, CWE-76, CWE-77, CWE-78, CWE-79, CWE-80, CWE-83, CWE-86, CWE-88, CWE-89, CWE-90, CWE-91, CWE-93, CWE-94, CWE-95, CWE-96, CWE-97, CWE-98, CWE-99, CWE-103, CWE-104, CWE-112, CWE-113, CWE-114, CWE-115, CWE-116, CWE-129, CWE-159, CWE-470, CWE-493, CWE-500, CWE-564, CWE-610, CWE-643, CWE-644, CWE-917

  1. 7.2CVE-2026-63224EPSS 0.3%

    OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `datapoint export` API constructs `CSV crosstab` SQL by concatenating an `asset name` and `attribute name` into a `COPY` query that uses `crosstab` and streams …

  2. 7.5CVE-2026-111578EPSS 0.3%

    The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape several customer-supplied order fields — including the billing and shipping address values and the customer order note — b…

  3. 8.7CVE-2026-62990EPSS 0.2%

    Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.0 prereleases beta.1 and beta.2, authenticated back-office staff with a content-upload permission can store executable media on the adminis…

  4. 8.7CVE-2026-62968EPSS 0.4%

    Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled input can influence arguments passed to `yt-dlp` under specific conditions. Unintended command-line options may be interpret…

  5. 7.9CVE-2026-62958EPSS 0.2%

    libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. `Memory<W>::binary_loader` checks `PT_LOAD` program-header bounds, but `Memory<W>::serialize_execute_segment…

  6. 9.9CVE-2026-62853EPSS 0.4%

    ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied Groovy script content and passes it to an unsandboxed `Groovy compilation and loading` flow. An authenticated a…

  7. 9.1CVE-2026-62849EPSS 0.5%

    ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengine TDS APIs` allows request-controlled JSON field values submitted to `/anyUser/tds/insertTableData` to reach unsafe SQL…

  8. 5.3CVE-2026-119342EPSS 0.4%

    Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less ro…

  9. 5.5CVE-2026-119339EPSS 0.2%

    Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FAST_FLOAT builds, DeSerializ…

  10. 5.3CVE-2026-117645EPSS 0.3%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework phoenix_html allows an attacker who controls attribute names to inject attributes and script into rendered HTML via Phoe…

  11. 6.9CVE-2026-62337EPSS 0.3%

    SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. `EcPointLoader::multi_scalar_multiplication` places a `Value::Assigned(_)` base paire…

  12. 6.9CVE-2026-62335EPSS 0.4%

    OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Verifier.verify` accepts `appExeCommit` and `appVmCommit` as `by…

  13. 8.7CVE-2026-62333EPSS 0.4%

    OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `MemoryMerkleAir` does not forbid Merkle expansion rows at `parent_height` =…

  14. 8.6CVE-2026-62284EPSS 0.5%

    OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with `clientcmd.RESTConfigFromKubeConfig` without sanitizing the re…

  15. 9.8CVE-2026-61620EPSS 0.4%

    HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL `DSL` by calling `keyword` or `symbol` on that input can produce SQL strings that facil…

  16. 6.9CVE-2026-61618EPSS 0.4%

    SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without consistently enforcing canonical limb bounds before elliptic-curve coordinate reconstruction. `PlonkProof::read` select…

  17. 7.8CVE-2026-119335EPSS 0.2%

    Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, advanced/Scripts/utils.sh getFTLPID() attempts to validate the pihole-owned /run/pihole-FTL.pid file with expr…

  18. 7.1CVE-2026-116252EPSS 0.3%

    pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" (or a postgresql:// URI) as a full connection string, whose keywords override the h…

  19. 9.4CVE-2026-116241EPSS 0.3%

    pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-qu…

  20. 7.1CVE-2026-94175EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.

  21. 5.1CVE-2026-7004EPSS 0.3%

    WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitrary JavaScript by submitting a crafted LINK query parameter to …

  22. 6.5CVE-2026-62121EPSS 0.4%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…

  23. 5.3CVE-2026-62057EPSS 0.3%

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact Form 7 cf7-styler-for-divi allows Code Injection.This issue affects Divi Contact Form 7: from n/a through 4.1.0.

  24. 7.5CVE-2026-59978EPSS 0.6%

    AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated `?script=version` endpoint accepts POST data without origin, CSRF or parameter-type validation. A `version[]` parameter become…

  25. 7.1CVE-2026-54855EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions.

  26. 5.3CVE-2026-52710EPSS 0.3%

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT &#8211; Free Gifts for WooCommerce ithemeland-free-gifts-for-woo allows Code Injection.This issue affects GIFTiT &#8211; Fre…

  27. 7.1CVE-2026-48201EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.

  28. 7.1CVE-2026-39786EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.

  29. 6.5CVE-2026-39739EPSS 0.2%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Elementor - Lite header-footer-elementor allows Stored XSS.This issue affects Ultimate Addons for El…

  30. 9.3CVE-2026-39732EPSS 0.3%

    Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.

  31. 7.1CVE-2026-28160EPSS 0.2%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.10.

  32. 6.5CVE-2026-27061EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.

  33. 6.5CVE-2026-116854EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.

  34. 9.1CVE-2026-116852EPSS 0.6%

    Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.

  35. 7.1CVE-2026-116851EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.

  36. 7.1CVE-2026-116847EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.

  37. 7.1CVE-2026-116405EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.

  38. 6.5CVE-2026-114711EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions.

  39. 7.1CVE-2026-105077EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions.

  40. 6.4CVE-2026-9239EPSS 0.3%

    The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute) in all versions up to, and including, 5.5.1 due to insufficient input sanitization and output escaping. This …

  41. 7.2CVE-2026-96894EPSS 0.4%

    The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Inbound Email Body in all versions up to, and including, 1.17.10 due to insufficient input sanitizatio…

  42. 7.4CVE-2026-119764EPSS 0.3%

    Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target endpoint files to run JavaScript in the Mythic UI origin by planting HTML in .pdf-named files. When an operator do…

  43. 5.3CVE-2026-119761EPSS 0.3%

    Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject script via unescaped sender display names in the conversation view. Attackers …

  44. 5.5CVE-2026-119619EPSS 0.3%

    A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqli_query of the file admin/save_student.php. Performing a manipulation of the argument date/depar…

  45. 6.4CVE-2026-119176EPSS 0.3%

    The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject' parameter in all versions up to, and including, 1.4.43 due to insufficient input sanitization and output escaping. This m…

  46. 6.4CVE-2026-119113EPSS 0.4%

    The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the listing description (post_content) in versions up to, and including, 2.8.199 This i…

  47. 6.5CVE-2026-118635EPSS 0.4%

    The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.198 This is due to the software allowing us…

  48. 4.7CVE-2026-116552EPSS 0.3%

    The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_CLIENT_IP (Client-IP header)' parameter in all versions up to, and including, 2.6.64 due to insufficient input sanitization an…

  49. 6.4CVE-2026-115869EPSS 0.3%

    The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'variations' repeater field of Custom Font (tb_cf) posts in versions up to, and including, 7.8.4. This is due to insufficient input sanitization …

  50. 6.5CVE-2026-115820EPSS 0.4%

    The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'columns (array keys)' parameter in all versions up to, and including, 1.2.2 due to insufficien…