OWASP A06:2025 Insecure Design vulnerabilities, newest first, page 120
Filter
The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A06:2025 at MITRE.
Its weaknesses: 39
CWE-73, CWE-183, CWE-256, CWE-266, CWE-269, CWE-286, CWE-311, CWE-312, CWE-313, CWE-316, CWE-362, CWE-382, CWE-419, CWE-434, CWE-436, CWE-444, CWE-451, CWE-454, CWE-472, CWE-501, CWE-522, CWE-525, CWE-539, CWE-598, CWE-602, CWE-628, CWE-642, CWE-646, CWE-653, CWE-656, CWE-657, CWE-676, CWE-693, CWE-799, CWE-807, CWE-841, CWE-1021, CWE-1022, CWE-1125
- 1.9CVE-2026-3671EPSS 0.1%
A flaw has been found in Freedom Factory dGEN1 up to 20260221. Affected by this vulnerability is the function TokenBalanceContentProvider of the component org.ethereumphone.walletmanager.testing123. Executing a manipulation can lead to imp…
- 1.9CVE-2026-3670EPSS 0.1%
A vulnerability was detected in Freedom Factory dGEN1 up to 20260221. Affected is an unknown function of the component com.dgen.alarm. Performing a manipulation results in improper authorization. The attack requires a local approach. The e…
- 1.9CVE-2026-3669EPSS 0.1%
A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads to improper authorization. The attack needs to be performed…
- 1.3CVE-2026-3668EPSS 0.3%
A weakness has been identified in Freedom Factory dGEN1 up to 20260221. This affects the function AndroidEthereum of the component org.ethosmobile.webpwaemul. This manipulation causes improper access controls. Remote exploitation of the at…
- 1.9CVE-2026-3667EPSS 0.2%
A security flaw has been discovered in Freedom Factory dGEN1 up to 20260221. The impacted element is the function FakeAppService of the component org.ethosmobile.ethoslauncher. The manipulation results in improper authorization. The attack…
- 9.8CVE-2026-29186EPSS 0.9%
Backstage is an open framework for building developer portals. Prior to version 1.14.3, this is a configuration bypass vulnerability that enables arbitrary code execution. The @backstage/plugin-techdocs-node package uses an allowlist to fi…
- 8.8CVE-2025-8899EPSS 0.4%
The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20. This is due to videowhisper_register_form() function not restricting user rol…
- 8.2CVE-2026-30821EPSS 17%
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the /api/v1/attachments/:chatflowId/:chatId endpoint is listed in WHITELIST_URLS, allowing unauthenticated access to the file…
- 6.9CVE-2026-27777EPSS 0.3%
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
- 6.9CVE-2026-27027EPSS 0.3%
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
- 8.8CVE-2018-25171EPSS 0.3%
EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the admin/edit_source endpoint…
- 5.3CVE-2018-25168EPSS 0.3%
Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting crafted POST requests. Attackers can forge requests to the /public/…
- 7.1CVE-2018-25162EPSS 0.5%
2-Plan Team 1.0.4 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload executable PHP files by sending multipart form data to managefile.php. Attackers can upload PHP files through the userfile1 par…
- 8.0CVE-2026-28800EPSS 0.2%
Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, anyone with Discord Remote Control set up in a non-private channel gives access to any user with the permission to send message in said …
- 5.4CVE-2026-27605EPSS 0.3%
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the application allows uploading files (project logos) without validating the file type …
- 8.8CVE-2026-29041EPSS 0.8%
Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability caused by improper validation of uploaded files. The application relies solely on MIME-type …
- 9.3CVE-2026-28502EPSS 0.8%
WWBN AVideo is an open source video platform. Prior to version 24.0, an authenticated Remote Code Execution (RCE) vulnerability was identified in AVideo related to the plugin upload/import functionality. The issue allowed an authenticated …
- 9.3CVE-2026-28497EPSS 0.5%
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.03, an integer overflow vulnerability in the string-to-integer conversion routine (_Val) allows an unauthenticated remote attacker to bypass Content-Leng…
- 4.8CVE-2026-28714EPSS 0.2%
Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
- 6.9CVE-2026-27770EPSS 0.3%
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
- 9.8CVE-2026-21536EPSS 1.6%
Microsoft Devices Pricing Program Remote Code Execution Vulnerability
- 8.2CVE-2026-29611EPSS 0.3%
OpenClaw versions prior to 2026.2.14 contain a local file inclusion vulnerability in BlueBubbles extension (must be installed and enabled) media path handling that allows attackers to read arbitrary files from the local filesystem. The sen…
- 7.1CVE-2026-28459EPSS 0.4%
OpenClaw versions prior to 2026.2.12 fail to validate the sessionFile path parameter, allowing authenticated gateway clients to write transcript data to arbitrary locations on the host filesystem. Attackers can supply a sessionFile path ou…
- 7.1CVE-2026-29077EPSS 0.2%
Frappe is a full-stack web application framework. Prior to versions 15.98.0 and 14.100.0, due to a lack of validation when sharing documents, a user could share a document with a permission that they themselves didn't have. This issue has …
- 8.5CVE-2026-28442EPSS 0.3%
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, users are restricted from deleting internal system files or folders through the application interface. However, when int…
- 6.5CVE-2026-22723EPSS 0.3%
Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.
- 7.5CVE-2026-28789EPSS 0.5%
OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.3, an unauthenticated denial-of-service vulnerability exists in OliveTin’s OAuth2 login flow. Concurrent requests to /oauth/login can trigger…
- 9.8CVE-2025-29165EPSS 0.7%
An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component
- 8.1CVE-2026-3459EPSS 0.6%
The Drag and Drop Multiple File Upload - Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'dnd_upload_cf7_upload' function in versions up to, and including, 1.3.7.3…
- 9.8CVE-2026-27944ExploitEPSS 23%
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /api/backup endpoint is accessible without authentication and discloses the encryption keys required to decrypt the backup in the X-Backup-Security resp…
- 8.8CVE-2026-26416EPSS 0.4%
An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests.
- 6.9CVE-2026-26196EPSS 0.3%
Gogs is an open source self-hosted Git service. Prior to version 0.14.2, gogs api still accepts tokens in url params like token and access_token, which can leak through logs, browser history, and referrers. This issue has been patched in v…
- 6.9CVE-2026-30796EPSS 0.5%
Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Address book sync, Heartbeat sync loop modules) …
- 4.8CVE-2026-30783EPSS 0.4%
A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config management modules) allows Privilege Abuse. This vulnerability is associated wi…
- 10.0CVE-2026-21628EPSS 0.5%
A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.
- 4.7CVE-2026-28551EPSS 0.07%
Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability.
- 4.7CVE-2026-28549EPSS 0.07%
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability.
- 5.5CVE-2026-28548EPSS 0.08%
Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- 4.7CVE-2026-28550EPSS 0.09%
Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability.
- 4.7CVE-2026-28545EPSS 0.09%
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.
- 4.7CVE-2026-28544EPSS 0.09%
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.
- 4.7CVE-2026-28543EPSS 0.08%
Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability.
- 10.0CVE-2026-2743EPSS 0.9%
Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transfer (LFT). This issue affects SeppMail: 15.0.2.1 and before
- 8.6CVE-2026-29128EPSS 0.3%
IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owned by root but world-readable. The configuration files (e.g., zebra.conf, bgpd.c…
- 8.5CVE-2026-28133EPSS 0.2%
Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell to a Web Server.This issue affects Filr: from n/a through <= 1.2.14.
- 9.1CVE-2026-28114EPSS 0.3%
Unrestricted Upload of File with Dangerous Type vulnerability in firassaidi WooCommerce License Manager fs-license-manager allows Upload a Web Shell to a Web Server.This issue affects WooCommerce License Manager: from n/a through <= 7.0.6.
- 9.8CVE-2026-27983EPSS 0.4%
Incorrect Privilege Assignment vulnerability in designthemes LMS Elementor Pro lms-elementor-pro allows Privilege Escalation.This issue affects LMS Elementor Pro: from n/a through <= 1.0.4.
- 7.2CVE-2026-27541EPSS 0.3%
Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through <= 2.2.6.
- 7.2CVE-2026-24963EPSS 0.4%
Incorrect Privilege Assignment vulnerability in ameliabooking Amelia ameliabooking allows Privilege Escalation.This issue affects Amelia: from n/a through <= 1.2.38.
- 9.9CVE-2026-24960EPSS 0.4%
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2.