cve.bz

OWASP A05:2025 Injection vulnerabilities, newest first, page 83

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A05:2025 at MITRE.

Its weaknesses: 37

CWE-20, CWE-74, CWE-76, CWE-77, CWE-78, CWE-79, CWE-80, CWE-83, CWE-86, CWE-88, CWE-89, CWE-90, CWE-91, CWE-93, CWE-94, CWE-95, CWE-96, CWE-97, CWE-98, CWE-99, CWE-103, CWE-104, CWE-112, CWE-113, CWE-114, CWE-115, CWE-116, CWE-129, CWE-159, CWE-470, CWE-493, CWE-500, CWE-564, CWE-610, CWE-643, CWE-644, CWE-917

  1. 6.5CVE-2026-94500EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.

  2. 6.5CVE-2026-94461EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.

  3. 6.5CVE-2026-94391EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.

  4. 7.1CVE-2026-94179EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.

  5. 7.1CVE-2026-94176EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.

  6. 7.6CVE-2026-94174EPSS 0.4%

    Administrator SQL Injection in Email Log <= 2.63 versions.

  7. 6.5CVE-2026-94168EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.

  8. 8.5CVE-2026-94124EPSS 0.2%

    Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.

  9. 6.5CVE-2026-94118EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions.

  10. 7.1CVE-2026-93774EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.

  11. 8.5CVE-2026-93773EPSS 0.4%

    Contributor SQL Injection in Mollie Forms <= 2.11.0 versions.

  12. 6.5CVE-2026-93772EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in wpForo Forum <= 3.1.5 versions.

  13. 7.1CVE-2026-93622EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions.

  14. 6.5CVE-2026-93618EPSS 0.2%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1.

  15. 8.5CVE-2026-93527EPSS 0.4%

    Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.

  16. 7.1CVE-2026-93526EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.4 versions.

  17. 7.4CVE-2026-92730EPSS 0.5%

    LimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey-participant CSV import result page.

  18. 6.9CVE-2026-92692EPSS 0.4%

    Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affected Sulu 2.6 and 3.0 release lines have a Smart Content QueryBuilder in src/Sulu/Component/Content/SmartContent/QueryB…

  19. 8.6CVE-2026-90902EPSS 0.3%

    Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task (administrator/index.php?option=com_easystore&task=coupon.couponBulkUpdate)…

  20. 8.6CVE-2026-90901EPSS 0.4%

    Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 - The media deletion endpoint (administrator/index.php?option=com_easystore&task=media.deleteImage) pa…

  21. 9.9CVE-2026-84502EPSS 0.6%

    A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project scm_url field is not validated against values that begin with a dash and is stored and passed verbatim to the git SCM module. Because the module …

  22. 9.9CVE-2026-77602EPSS 0.7%

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.1.0 until 7.3.0, authenticated non-administrator users can write content under targets_modified/ that is later e…

  23. 8.8CVE-2026-77601EPSS 0.6%

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.12.0 until 7.3.0, an authenticated actor can write the pypi_url setting through set_setting at POST /openc3-api/…

  24. 7.6CVE-2026-77394EPSS 0.4%

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.6 until 7.3.0, an authenticated actor with system_set permission can store a shared screen through POST /openc…

  25. 8.5CVE-2026-75131EPSS 0.2%

    NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbitrary code as root by injecting pppd options through a craf…

  26. 3.1CVE-2026-71465EPSS 0.2%

    RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob. A limit beginning with - is parsed as an ansible CLI opti…

  27. 3.1CVE-2026-71464EPSS 0.2%

    LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers. Schedule and WFJT Node accept --upload-pack=/bin/id a…

  28. 7.5CVE-2026-61695EPSS 0.7%

    Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime ProtoReader.skipGroup(expectedEndTag:unknownFieldsWriter:) accepts a negative length for a LENGTH_DELIMITE…

  29. 7.4CVE-2026-91775EPSS 0.5%

    LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface.

  30. 9.3CVE-2026-96759EPSS 0.5%

    orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options metadata objects. Attackers can inject arbitrary JavaScript code through a crafted operationId in an OpenAPI speci…

  31. 9.3CVE-2026-96758EPSS 0.8%

    orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in generated template literals. Attackers can inject ${...} expressions into OpenAPI schema p…

  32. 9.3CVE-2026-96757EPSS 0.8%

    orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in generated code. Attackers can inject JavaScript through crafted media-type keys in OpenAPI specifications tha…

  33. 9.2CVE-2026-96756EPSS 0.9%

    orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default values in new Date() calls. Attackers can inject arbitrary expressions through apostrophes in OpenAP…

  34. 9.3CVE-2026-96755EPSS 0.8%

    orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts OpenAPI schema defaults into template literals. Attackers can inject arbitrary JavaScript expressions via schema defau…

  35. 9.3CVE-2026-96754EPSS 0.5%

    orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape OpenAPI path values in single-quoted route literals. Attackers can craft an OpenAPI document with an apostrophe in a stat…

  36. 5.5CVE-2026-96514EPSS 0.4%

    A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipulation of the argument uname causes sql injection. It is possible to i…

  37. 8.8CVE-2026-95847EPSS 0.3%

    Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue_ plus the client ID and its metadata-map name as queue_ plus the client ID plus _meta. A durable session whose cli…

  38. 8.7CVE-2026-95843EPSS 0.4%

    Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.subscribe parses a shared-subscription filter through SharedSubscriptionUtils.extractShareName before validating the complete $share/{shareName}/{topicFilter} structur…

  39. 8.6CVE-2026-93349EPSS 2.1%

    Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who …

  40. 9.8CVE-2025-63564EPSS 0.7%

    SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

  41. 4.8CVE-2026-96675EPSS 0.1%

    alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings t…

  42. 8.7CVE-2026-96673EPSS 0.5%

    Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the album_id path segment. Attackers can supply crafted SQL expressions in the …

  43. 5.3CVE-2026-96672EPSS 0.4%

    Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values reference whitelisted methods before passing them to frappe.call(). Accounts Managers can supply arbitrary dotted Python path…

  44. 7.2CVE-2026-93769EPSS 0.5%

    HumHub 1.18.5 is affected by a stored cross-site scripting (XSS) vulnerability that allows any user holding the delegated, non-system-administrator Manage Users permission (admin_manage_users) to inject persistent HTML/JavaScript into a Pr…

  45. 8.5CVE-2026-79310EPSS 0.7%

    webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precomp…

  46. 8.2CVE-2026-19179EPSS 0.5%

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression.

  47. 7.3CVE-2026-18875EPSS 0.4%

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb.runbooks.js:51). An unauthenticated attacker can insert malici…

  48. 9.3CVE-2026-18872EPSS 0.3%

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42). A malicious actor can inject script in…

  49. 6.5CVE-2026-18180EPSS 0.5%

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.

  50. 7.0CVE-2026-96600EPSS 0.4%

    Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplied values directly into SQL statements. Authenticated Contao backend…