cve.bz

OWASP A06:2025 Insecure Design vulnerabilities, newest first, page 198

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A06:2025 at MITRE.

Its weaknesses: 39

CWE-73, CWE-183, CWE-256, CWE-266, CWE-269, CWE-286, CWE-311, CWE-312, CWE-313, CWE-316, CWE-362, CWE-382, CWE-419, CWE-434, CWE-436, CWE-444, CWE-451, CWE-454, CWE-472, CWE-501, CWE-522, CWE-525, CWE-539, CWE-598, CWE-602, CWE-628, CWE-642, CWE-646, CWE-653, CWE-656, CWE-657, CWE-676, CWE-693, CWE-799, CWE-807, CWE-841, CWE-1021, CWE-1022, CWE-1125

  1. 9.8CVE-2024-54229EPSS 0.4%

    Incorrect Privilege Assignment vulnerability in straightvisions GmbH SV100 Companion sv100-companion allows Privilege Escalation.This issue affects SV100 Companion: from n/a through <= 2.0.02.

  2. 9.9CVE-2024-54370EPSS 0.7%

    Unrestricted Upload of File with Dangerous Type vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Upload a Web Shell to a Web Server.This issue affects Video & Photo Gallery for Ulti…

  3. 8.8CVE-2024-54365EPSS 0.6%

    Incorrect Privilege Assignment vulnerability in Knowhalim KH Easy User Settings kh-easy-user-settings allows Privilege Escalation.This issue affects KH Easy User Settings: from n/a through <= 1.0.0.

  4. 9.8CVE-2024-54363EPSS 1.9%

    Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through <= 1.0.0.

  5. 5.3CVE-2024-12478EPSS 0.6%

    A vulnerability was found in InvoicePlane up to 1.6.1. It has been declared as critical. This vulnerability affects the function upload_file of the file /index.php/upload/upload_file/1/1. The manipulation of the argument file leads to unre…

  6. 4.8CVE-2024-48872EPSS 0.3%

    Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, and 9.5.x <= 9.5.12 fail to prevent concurrently checking and updating the failed login attempts. which allows an attacker to bypass of "Max failed attempts" restric…

  7. 8.1CVE-2024-11721EPSS 0.6%

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.24.5. This is due to insufficient controls on the user role select field when utilizing the 'Role' field in…

  8. 7.2CVE-2024-9698EPSS 1.8%

    The Crafthemes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'process_uploaded_files' function in all versions up to, and including, 3.3. This makes it possible for auth…

  9. 9.1CVE-2023-29476EPSS 0.4%

    In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malformed client requests. This is fixed in 2.88.2+, 2.89.1+, and 2.90.1+.

  10. 7.8CVE-2024-47892EPSS 0.1%

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  11. 7.8CVE-2024-46971EPSS 0.1%

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  12. 9.8CVE-2024-54293EPSS 0.6%

    Incorrect Privilege Assignment vulnerability in CE21 CE21 Suite ce21-suite allows Privilege Escalation.This issue affects CE21 Suite: from n/a through <= 2.2.0.

  13. 9.9CVE-2024-54262EPSS 1.5%

    Unrestricted Upload of File with Dangerous Type vulnerability in sidngr Import Export For WooCommerce import-export-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Import Export For WooCommerce: from n/a throug…

  14. 7.2CVE-2024-55889ExploitEPSS 2.2%

    phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an…

  15. 9.8CVE-2024-9290EPSS 3.5%

    The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibk_restore_migrate_check() function in all versions up…

  16. 5.4CVE-2024-12042EPSS 0.3%

    The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the profile picture upload functionality in all versions up to, and including, 4.16.4 due to insufficient …

  17. 8.6CVE-2024-11838EPSS 0.4%

    External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1.

  18. 9.8CVE-2024-12603EPSS 0.6%

    A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.

  19. 7.1CVE-2024-55888EPSS 0.3%

    Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security head…

  20. 4.7CVE-2024-54122EPSS 0.09%

    Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability.

  21. 7.5CVE-2024-54112EPSS 0.2%

    Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  22. 7.5CVE-2024-54110EPSS 0.3%

    Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  23. 5.9CVE-2024-54102EPSS 0.1%

    Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  24. 7.4CVE-2024-12397EPSS 0.9%

    A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof …

  25. 8.8CVE-2024-10590EPSS 0.8%

    The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the admin_upload() function in all versions up to, and including, 4.07. This makes it possible for authenticated attac…

  26. 5.1CVE-2024-54510EPSS 0.2%

    A race condition was addressed with improved locking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to leak sensit…

  27. 5.9CVE-2024-54494EPSS 0.8%

    A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. An attacker ma…

  28. 5.5CVE-2024-54471EPSS 0.2%

    This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials.

  29. 5.5CVE-2024-44220EPSS 0.6%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination.

  30. 8.1CVE-2024-49132EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  31. 7.5CVE-2024-49129EPSS 0.8%

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

  32. 8.1CVE-2024-49128EPSS 1.2%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  33. 8.1CVE-2024-49127EPSS 1.3%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  34. 8.1CVE-2024-49126EPSS 1.3%

    Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

  35. 8.1CVE-2024-49124EPSS 1.4%

    Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

  36. 8.1CVE-2024-49123EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  37. 8.1CVE-2024-49122EPSS 21%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  38. 8.1CVE-2024-49120EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  39. 8.1CVE-2024-49119EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  40. 8.1CVE-2024-49118EPSS 1.4%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  41. 8.1CVE-2024-49116EPSS 10%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  42. 8.1CVE-2024-49115EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  43. 8.1CVE-2024-49108EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  44. 8.1CVE-2024-49106EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  45. 7.0CVE-2024-49097EPSS 0.4%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  46. 7.0CVE-2024-49095EPSS 0.4%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  47. 7.0CVE-2024-49084EPSS 0.4%

    Windows Kernel Elevation of Privilege Vulnerability

  48. 7.0CVE-2024-49059EPSS 0.4%

    Microsoft Office Elevation of Privilege Vulnerability

  49. 9.5CVE-2024-53677EPSS 72%

    File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Executi…

  50. 6.7CVE-2024-53292EPSS 0.1%

    Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user c…