cve.bz

OWASP A06:2025 Insecure Design vulnerabilities, newest first, page 58

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A06:2025 at MITRE.

Its weaknesses: 39

CWE-73, CWE-183, CWE-256, CWE-266, CWE-269, CWE-286, CWE-311, CWE-312, CWE-313, CWE-316, CWE-362, CWE-382, CWE-419, CWE-434, CWE-436, CWE-444, CWE-451, CWE-454, CWE-472, CWE-501, CWE-522, CWE-525, CWE-539, CWE-598, CWE-602, CWE-628, CWE-642, CWE-646, CWE-653, CWE-656, CWE-657, CWE-676, CWE-693, CWE-799, CWE-807, CWE-841, CWE-1021, CWE-1022, CWE-1125

  1. 7.5CVE-2026-13457EPSS 0.9%

    The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.1.3.6 via the (top-level script) function. This is due to the plugin stores its encryp…

  2. 9.2CVE-2026-72742EPSS 0.5%

    DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url…

  3. 7.1CVE-2026-18705EPSS 0.4%

    An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient…

  4. 5.3CVE-2026-18702EPSS 0.3%

    An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression …

  5. 8.8CVE-2026-15426EPSS 0.7%

    The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.11.1. This is due to the plugin not properly…

  6. 7.7CVE-2026-73218EPSS 0.6%

    Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container an…

  7. 7.7CVE-2026-73217EPSS 0.4%

    Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft P…

  8. 7.6CVE-2026-73083EPSS 0.3%

    Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied.…

  9. 7.8CVE-2026-69278EPSS 0.3%

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  10. 7.8CVE-2026-68821EPSS 0.3%

    Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.

  11. 8.1CVE-2026-66802EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.

  12. 7.0CVE-2026-62908EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

  13. 6.5CVE-2026-62902EPSS 0.9%

    Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

  14. 5.9CVE-2026-62899EPSS 0.7%

    Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

  15. 4.3CVE-2026-62882EPSS 0.7%

    Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

  16. 6.5CVE-2026-62839EPSS 0.9%

    Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  17. 8.1CVE-2026-62820EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.

  18. 7.0CVE-2026-62780EPSS 0.2%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  19. 8.1CVE-2026-62778EPSS 0.5%

    Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.

  20. 7.0CVE-2026-62748EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  21. 7.0CVE-2026-62734EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  22. 7.0CVE-2026-62729EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  23. 7.0CVE-2026-62705EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  24. 7.0CVE-2026-62693EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  25. 7.0CVE-2026-62690EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  26. 5.5CVE-2026-61928EPSS 0.2%

    Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

  27. 7.0CVE-2026-61927EPSS 0.2%

    Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  28. 6.6CVE-2026-61920EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

  29. 8.1CVE-2026-61352EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  30. 7.8CVE-2026-61349EPSS 0.3%

    Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

  31. 7.0CVE-2026-59126EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

  32. 7.0CVE-2026-59122EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2026-54981EPSS 0.5%

    Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

  34. 6.3CVE-2026-39452EPSS 0.3%

    Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a l…

  35. 5.4CVE-2026-28757EPSS 0.1%

    Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexit…

  36. 5.4CVE-2026-28707EPSS 0.2%

    Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may ena…

  37. 5.4CVE-2026-24693EPSS 0.1%

    Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a …

  38. 5.4CVE-2026-21400EPSS 0.2%

    Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low comp…

  39. 5.4CVE-2026-21387EPSS 0.2%

    Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may …

  40. 5.4CVE-2026-20906EPSS 0.2%

    Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low…

  41. 5.4CVE-2026-20903EPSS 0.2%

    Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attac…

  42. 7.1CVE-2026-20890EPSS 0.1%

    Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a …

  43. 5.4CVE-2026-20770EPSS 0.1%

    Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined…

  44. 5.4CVE-2026-20755EPSS 0.1%

    Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escala…

  45. 5.4CVE-2026-20728EPSS 0.1%

    Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a l…

  46. 8.9CVE-2026-20702EPSS 0.3%

    Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enab…

  47. 5.3CVE-2026-14180EPSS 1.0%

    A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the re…

  48. 9.1CVE-2026-47702EPSS 0.3%

    TypeBot is a chatbot builder tool. In version 3.16.1, API tokens (bearer credentials used to authenticate against the builder API) are stored in the database as cleartext strings. An attacker who gains read access to the database (e.g., vi…

  49. 7.7CVE-2026-18127EPSS 0.7%

    External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured for session recording storage.

  50. 8.7CVE-2026-72781EPSS 0.8%

    Craft CMS versions >= 5.0.0-RC1 before 5.10.7 and >= 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the ElementInterface as safe (via the AllowedInSandbox attribute)…