OWASP A06:2025 Insecure Design vulnerabilities, newest first, page 171
Filter
The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A06:2025 at MITRE.
Its weaknesses: 39
CWE-73, CWE-183, CWE-256, CWE-266, CWE-269, CWE-286, CWE-311, CWE-312, CWE-313, CWE-316, CWE-362, CWE-382, CWE-419, CWE-434, CWE-436, CWE-444, CWE-451, CWE-454, CWE-472, CWE-501, CWE-522, CWE-525, CWE-539, CWE-598, CWE-602, CWE-628, CWE-642, CWE-646, CWE-653, CWE-656, CWE-657, CWE-676, CWE-693, CWE-799, CWE-807, CWE-841, CWE-1021, CWE-1022, CWE-1125
- 4.6CVE-2025-4228EPSS 0.2%
An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.
- 6.1CVE-2025-49193EPSS 0.3%
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not execu…
- 6.1CVE-2025-49192EPSS 0.3%
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal c…
- 6.1CVE-2025-49191EPSS 0.3%
Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded as iFrame widgets, making it possible to attack other users that access the dashboard by including malicious code. The…
- 7.5CVE-2025-49188EPSS 0.4%
The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering.
- 8.8CVE-2025-5012EPSS 0.6%
The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'workreap_temp_upload_to_media' function in all versions up…
- 7.2CVE-2025-6002EPSS 0.8%
An unrestricted file upload vulnerability exists in the Product Image section of the VirtueMart backend. Authenticated attackers can upload files with arbitrary extensions, including executable or malicious files, potentially leading to re…
- 8.1CVE-2025-4922EPSS 0.5%
Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.10.2 and Nomad Enter…
- 5.5CVE-2025-35941EPSS 0.2%
A password is exposed locally.
- 6.5CVE-2025-5986EPSS 0.6%
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the dis…
- 7.8CVE-2025-5687EPSS 0.1%
A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root. *This bug only affects Mozilla VPN on macOS. Other operating systems are unaffected.*. This vulnerability was fixed in Mozilla VPN 2.28.0 (macO…
- 8.8CVE-2025-4315EPSS 0.5%
The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23. This is due to the plugin allowing a user to update arbitrary user meta through the …
- 8.8CVE-2025-5395EPSS 0.8%
The WordPress Automatic Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'core.php' file in all versions up to, and including, 3.115.0. This makes it possible for authentic…
- 9.5CVE-2024-1244EPSS 0.3%
Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. Th…
- 9.5CVE-2024-1243EPSS 0.6%
Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of th…
- 8.8CVE-2025-47849EPSS 0.6%
A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and secret key of user-accounts of Admin role type in the same d…
- 8.8CVE-2025-47713EPSS 0.6%
A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password of user-accounts of Admin role type. This operation is not ap…
- 2.3CVE-2025-22829EPSS 0.8%
The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs ca…
- 5.5CVE-2025-47956EPSS 0.7%
External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.
- 7.8CVE-2025-47955EPSS 0.9%
Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- 5.4CVE-2025-47160EPSS 0.8%
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
- 8.4CVE-2025-33067EPSS 0.5%
Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
- 8.8CVE-2025-33053KEVExploitEPSS 87%
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
- 7.5CVE-2025-33050EPSS 1.8%
Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2025-32725EPSS 1.8%
Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
- 8.1CVE-2025-32710EPSS 1.1%
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- 7.2CVE-2025-22254EPSS 0.8%
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4.0 through 6.4.15, FortiPro…
- 4.6CVE-2025-48067EPSS 0.3%
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows an attacker with the FILE_UPLOAD permission to exfiltrate files from the host tha…
- 8.3CVE-2025-40591EPSS 0.7%
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM …
- 5.9CVE-2025-40569EPSS 0.3%
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK53…
- 5.3CVE-2024-41797EPSS 0.4%
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5328-4TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 EEC…
- 7.2CVE-2025-46612EPSS 0.7%
The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/workspace.jsp unrestricted file upload. To exploit this, the attacker must login to the administrator …
- 5.3CVE-2025-43699EPSS 0.4%
Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check. This impacts OmniStudio: before Spring 2025
- 8.6CVE-2025-4681EPSS 0.2%
Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affects upKeeper Instant Privilege Access: before 1.4.0.
- 8.8CVE-2025-4954EPSS 0.6%
The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server
- 8.8CVE-2025-4601EPSS 7.0%
The "RH - Real Estate WordPress Theme" theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.0. This is due to the theme not properly restricting user roles that can be updated as part of the i…
- 8.8CVE-2025-4387EPSS 0.6%
The Abandoned Cart Pro for WooCommerce plugin contains an authenticated arbitrary file upload vulnerability due to missing file type validation in the wcap_add_to_cart_popup_upload_files function in all versions up to, and including, 9.16.…
- 8.7CVE-2025-30183EPSS 0.4%
CyberData 011209 Intercom does not properly store or protect web server admin credentials.
- 6.5CVE-2025-49139EPSS 0.4%
HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site editor, users can create a website block to load another site in an iframe. The application allows users to supply a t…
- 6.5CVE-2025-49138EPSS 0.5%
HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline endpoint allows a low-privileged user to read arbi…
- 5.3CVE-2024-47081EPSS 1.0%
Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For olde…
- 7.5CVE-2025-45001EPSS 0.2%
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analys…
- 9.8CVE-2025-48129EPSS 0.6%
Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue a…
- 8.8CVE-2025-47561EPSS 0.3%
Incorrect Privilege Assignment vulnerability in RomanCode MapSVG mapsvg allows Privilege Escalation.This issue affects MapSVG: from n/a through < 8.6.13.
- 10.0CVE-2025-32291EPSS 0.5%
Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Using Malicious Files.This issue affects SUMO Affiliates Pro: from n/a through < 11.1.0.
- 8.1CVE-2025-23974EPSS 0.4%
Incorrect Privilege Assignment vulnerability in ifkooo One-Login one-login allows Privilege Escalation.This issue affects One-Login: from n/a through <= 1.4.
- 2.1CVE-2025-5873EPSS 0.3%
A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the file /firmware.php of the component Web UI. Performing a manipulation of the argument media results in…
- 9.6CVE-2025-3835EPSS 2.2%
Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.
- 9.3CVE-2025-5893EPSS 0.5%
Smart Parking Management System from Honding Technology has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to access a specific page and obtain plaintext administrator credentials.
- 2.9CVE-2025-5864EPSS 0.5%
A vulnerability was found in Tenda TDSEE App up to 1.7.12. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/ConfirmSmsCode of the component Password Reset Confirmation Code Ha…