cve.bz

OWASP A06:2025 Insecure Design vulnerabilities, newest first, page 197

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A06:2025 at MITRE.

Its weaknesses: 39

CWE-73, CWE-183, CWE-256, CWE-266, CWE-269, CWE-286, CWE-311, CWE-312, CWE-313, CWE-316, CWE-362, CWE-382, CWE-419, CWE-434, CWE-436, CWE-444, CWE-451, CWE-454, CWE-472, CWE-501, CWE-522, CWE-525, CWE-539, CWE-598, CWE-602, CWE-628, CWE-642, CWE-646, CWE-653, CWE-656, CWE-657, CWE-676, CWE-693, CWE-799, CWE-807, CWE-841, CWE-1021, CWE-1022, CWE-1125

  1. 4.8CVE-2024-48872EPSS 0.3%

    Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, and 9.5.x <= 9.5.12 fail to prevent concurrently checking and updating the failed login attempts. which allows an attacker to bypass of "Max failed attempts" restric…

  2. 8.1CVE-2024-11721EPSS 0.6%

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.24.5. This is due to insufficient controls on the user role select field when utilizing the 'Role' field in…

  3. 7.2CVE-2024-9698EPSS 1.8%

    The Crafthemes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'process_uploaded_files' function in all versions up to, and including, 3.3. This makes it possible for auth…

  4. 9.1CVE-2023-29476EPSS 0.4%

    In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malformed client requests. This is fixed in 2.88.2+, 2.89.1+, and 2.90.1+.

  5. 7.8CVE-2024-47892EPSS 0.1%

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  6. 7.8CVE-2024-46971EPSS 0.1%

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  7. 9.8CVE-2024-54293EPSS 0.6%

    Incorrect Privilege Assignment vulnerability in CE21 CE21 Suite ce21-suite allows Privilege Escalation.This issue affects CE21 Suite: from n/a through <= 2.2.0.

  8. 9.9CVE-2024-54262EPSS 1.5%

    Unrestricted Upload of File with Dangerous Type vulnerability in sidngr Import Export For WooCommerce import-export-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Import Export For WooCommerce: from n/a throug…

  9. 7.2CVE-2024-55889ExploitEPSS 2.2%

    phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an…

  10. 9.8CVE-2024-9290EPSS 3.5%

    The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibk_restore_migrate_check() function in all versions up…

  11. 5.4CVE-2024-12042EPSS 0.3%

    The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the profile picture upload functionality in all versions up to, and including, 4.16.4 due to insufficient …

  12. 8.6CVE-2024-11838EPSS 0.4%

    External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1.

  13. 9.8CVE-2024-12603EPSS 0.6%

    A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.

  14. 7.1CVE-2024-55888EPSS 0.3%

    Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security head…

  15. 4.7CVE-2024-54122EPSS 0.09%

    Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability.

  16. 7.5CVE-2024-54112EPSS 0.2%

    Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  17. 7.5CVE-2024-54110EPSS 0.3%

    Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  18. 5.9CVE-2024-54102EPSS 0.1%

    Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  19. 7.4CVE-2024-12397EPSS 0.9%

    A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof …

  20. 8.8CVE-2024-10590EPSS 0.8%

    The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the admin_upload() function in all versions up to, and including, 4.07. This makes it possible for authenticated attac…

  21. 5.1CVE-2024-54510EPSS 0.2%

    A race condition was addressed with improved locking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to leak sensit…

  22. 5.9CVE-2024-54494EPSS 0.8%

    A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. An attacker ma…

  23. 5.5CVE-2024-54471EPSS 0.2%

    This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials.

  24. 5.5CVE-2024-44220EPSS 0.6%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination.

  25. 8.1CVE-2024-49132EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  26. 7.5CVE-2024-49129EPSS 0.8%

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

  27. 8.1CVE-2024-49128EPSS 1.2%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  28. 8.1CVE-2024-49127EPSS 1.3%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  29. 8.1CVE-2024-49126EPSS 1.3%

    Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

  30. 8.1CVE-2024-49124EPSS 1.4%

    Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

  31. 8.1CVE-2024-49123EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  32. 8.1CVE-2024-49122EPSS 21%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  33. 8.1CVE-2024-49120EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  34. 8.1CVE-2024-49119EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  35. 8.1CVE-2024-49118EPSS 1.4%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  36. 8.1CVE-2024-49116EPSS 10%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  37. 8.1CVE-2024-49115EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  38. 8.1CVE-2024-49108EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  39. 8.1CVE-2024-49106EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  40. 7.0CVE-2024-49097EPSS 0.4%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  41. 7.0CVE-2024-49095EPSS 0.4%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  42. 7.0CVE-2024-49084EPSS 0.4%

    Windows Kernel Elevation of Privilege Vulnerability

  43. 7.0CVE-2024-49059EPSS 0.4%

    Microsoft Office Elevation of Privilege Vulnerability

  44. 9.5CVE-2024-53677EPSS 72%

    File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Executi…

  45. 6.7CVE-2024-53292EPSS 0.1%

    Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user c…

  46. 4.4CVE-2024-35117EPSS 0.2%

    IBM OpenPages with Watson 9.0 may write sensitive information, under specific configurations, in clear text to the system tracing log files that could be obtained by a privileged user.

  47. 8.0CVE-2024-46341EPSS 0.2%

    TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-the-middle attack.

  48. 9.8CVE-2024-46340EPSS 0.3%

    TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after executing a factory reset.

  49. 8.8CVE-2024-9844EPSS 1.0%

    Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions.

  50. 8.0CVE-2024-50699EPSS 0.4%

    TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Administrator account.