cve.bz

OWASP A05:2025 Injection vulnerabilities, newest first, page 94

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A05:2025 at MITRE.

Its weaknesses: 37

CWE-20, CWE-74, CWE-76, CWE-77, CWE-78, CWE-79, CWE-80, CWE-83, CWE-86, CWE-88, CWE-89, CWE-90, CWE-91, CWE-93, CWE-94, CWE-95, CWE-96, CWE-97, CWE-98, CWE-99, CWE-103, CWE-104, CWE-112, CWE-113, CWE-114, CWE-115, CWE-116, CWE-129, CWE-159, CWE-470, CWE-493, CWE-500, CWE-564, CWE-610, CWE-643, CWE-644, CWE-917

  1. 8.4CVE-2026-93292EPSS 0.4%

    SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that interpolate service_name and span_name fields into ClickHouse string literals without escaping. Authenticated attacke…

  2. 2.0CVE-2026-54577EPSS 0.2%

    mport is the MidnightBSD Package Manager. Prior to 2.7.8, the audit command in mport/mport.c computed option-adjusted local_argv and local_argc values but passed the original argument entry to audit_package(). When an operator or automatio…

  3. 5.8CVE-2026-54575EPSS 0.1%

    mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used race-prone path handling across libmport/fetch.c, libmport/clean.c, libmport/util.c, libmport/bundle_read_install_pkg.c, …

  4. 8.7CVE-2026-89036EPSS 0.7%

    Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory par…

  5. 8.7CVE-2026-86864EPSS 0.6%

    pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job/<sid>/object request to the pg_dump argument vector as a bare trailing positional argument, without validation. Because pg_dump parses its options w…

  6. 7.1CVE-2026-86862EPSS 0.4%

    pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbname option given to pg_restore and psql. libpq expands a database name containing an equals sign into a full connection…

  7. 8.6CVE-2026-92986EPSS 0.8%

    SiYuan before 3.8.4 renders document titles as HTML in the backlink dock tree without escaping markup characters. Attackers can set malicious titles through the rename API or crafted notebooks to execute scripts in the Electron renderer wi…

  8. 8.6CVE-2026-92985EPSS 0.8%

    SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with unescaped HTML in bookmark attributes that execute scripts…

  9. 8.2CVE-2026-85077EPSS 0.5%

    Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sanic/response/types.py serializes response header names and values without rejecting carriage-return o…

  10. 9.2CVE-2026-79752EPSS 0.6%

    CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuild…

  11. 8.5CVE-2026-71538EPSS 0.2%

    @cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts, used when npm_execpath does not provide the npm CLI path, can construct a shell…

  12. 8.7CVE-2026-63459EPSS 0.4%

    Vendure is an open-source headless commerce platform. Prior to 3.6.5, RichTextDescriptionCell in packages/dashboard/src/lib/components/shared/table-cell/order-table-cell-components.tsx attempts to strip markup by assigning an administrator…

  13. 6.9CVE-2026-61793EPSS 0.5%

    Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /_og/d/** route when the documented defaults security.strict = false and security.secret = "" are used, and bas…

  14. 5.3CVE-2026-92973EPSS 0.4%

    ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or escape URL targets. Attackers controlling ANSI text input can inject javascript: schemes or termina…

  15. 9.4CVE-2026-92939EPSS 0.6%

    vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a recursive read-only proxy, but its callable exports still execute with host-process auth…

  16. 10.0CVE-2026-92937EPSS 1.0%

    vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the host Node.js process. The fix for GHSA-m283-3h24-438v is incomplete: the bridge gate at lib/bridge.js:1624 identity-checks only the direct call target whe…

  17. 7.1CVE-2026-90986EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.21 versions.

  18. 7.1CVE-2026-90887EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in WP Inventory Manager <= 2.5.4 versions.

  19. 6.5CVE-2026-78294EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.

  20. 7.6CVE-2026-66631EPSS 0.4%

    Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.

  21. 7.6CVE-2026-66630EPSS 0.4%

    Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.

  22. 7.6CVE-2026-66628EPSS 0.4%

    Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions.

  23. 7.6CVE-2026-66626EPSS 0.4%

    Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.

  24. 7.6CVE-2026-66625EPSS 0.4%

    Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.

  25. 7.6CVE-2026-66624EPSS 0.4%

    Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.

  26. 7.6CVE-2026-66619EPSS 0.4%

    Administrator SQL Injection in Newsletters <= 4.18 versions.

  27. 7.6CVE-2026-66618EPSS 0.4%

    Administrator SQL Injection in WP Maps <= 4.9.9 versions.

  28. 6.5CVE-2026-66617EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions.

  29. 8.5CVE-2026-66580EPSS 0.4%

    Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions.

  30. 6.5CVE-2026-66579EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.2.1 versions.

  31. 6.5CVE-2026-66578EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in PropertyHive <= 2.2.6 versions.

  32. 6.5CVE-2026-66577EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in JetSearch <= 3.6.3 versions.

  33. 6.5CVE-2026-66576EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in JetBlocks For Elementor <= 1.5.2 versions.

  34. 6.5CVE-2026-66574EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Element Pack Elementor Addons <= 8.8.3 versions.

  35. 6.5CVE-2026-66573EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in JetTabs <= 2.3.3.1 versions.

  36. 6.5CVE-2026-66572EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in JetBlog <= 2.4.10 versions.

  37. 10.0CVE-2026-62104EPSS 0.9%

    Unauthenticated Remote Code Execution (RCE) in Migratico Lite <= 2.6.8 versions.

  38. 9.4CVE-2026-92860EPSS 0.9%

    A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the component Quick Security Setup Handler. The manipulation of the …

  39. 9.8CVE-2026-90822EPSS 1.4%

    FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon. An unauthenticated remote attacker with access to the affected management…

  40. 9.8CVE-2026-81476EPSS 0.9%

    Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could po…

  41. 8.2CVE-2026-92903EPSS 0.2%

    Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious …

  42. 7.5CVE-2026-66269EPSS 0.2%

    Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially…

  43. 7.8CVE-2026-86320EPSS 0.3%

    A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on t…

  44. 8.6CVE-2026-87963EPSS 0.4%

    The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username request parameter before using it in a SQL query, and reads it before WordPress applies its request escaping, allowing unauthenticated attackers …

  45. 7.1CVE-2026-91014EPSS 0.3%

    The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in…

  46. 6.8CVE-2026-91011EPSS 0.4%

    The EWWW Image Optimizer WordPress plugin before 8.7.7 does not properly escape image attribute values when it rewrites page output, allowing authenticated users with author-level access and above to inject arbitrary JavaScript that is sto…

  47. 9.0CVE-2026-88795EPSS 0.8%

    The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate…

  48. 8.8CVE-2026-88792EPSS 0.5%

    The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding or updating dictionary entries, allowing unauthenticated users to store arbitrary web scripts which will execute when a …

  49. 8.8CVE-2026-87786EPSS 0.5%

    The Dewa Kirim WordPress plugin through 1.0.0 does not escape delivery coordinates submitted at checkout before outputting them inside an inline script, allowing unauthenticated users to store JavaScript that runs in the session of an adm…

  50. 6.8CVE-2026-86788EPSS 0.4%

    The HT Mega Addons for Elementor WordPress plugin before 3.2.6 does not restrict the HTML tag name used to render the section headline in several of its widgets and blocks to a safe allowlist, allowing users with contributor-level access …