cve.bz

OWASP A06:2025 Insecure Design vulnerabilities, newest first, page 86

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A06:2025 at MITRE.

Its weaknesses: 39

CWE-73, CWE-183, CWE-256, CWE-266, CWE-269, CWE-286, CWE-311, CWE-312, CWE-313, CWE-316, CWE-362, CWE-382, CWE-419, CWE-434, CWE-436, CWE-444, CWE-451, CWE-454, CWE-472, CWE-501, CWE-522, CWE-525, CWE-539, CWE-598, CWE-602, CWE-628, CWE-642, CWE-646, CWE-653, CWE-656, CWE-657, CWE-676, CWE-693, CWE-799, CWE-807, CWE-841, CWE-1021, CWE-1022, CWE-1125

  1. 8.7CVE-2026-54104EPSS 0.7%

    The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) trusts client-provided values for the 'epds_role_id' parameter witho…

  2. 7.2CVE-2025-52465EPSS 0.6%

    GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pa…

  3. 7.9CVE-2026-42487EPSS 0.10%

    HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model (via XEN_DOMCTL_ioport_mapping), and hence the linked list used may changed at any time. Traversal of those…

  4. 8.8CVE-2026-9860EPSS 0.6%

    The Offload, AI & Optimize with Cloudflare Images plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.10.2 via the 'account-id' parameter parameter. This is due to insufficient privilege enfo…

  5. 1.9CVE-2026-50268EPSS 0.05%

    Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Encryption 4.0.0 through 4.1.0, configuring `encrypt:rsa:algorithm=OAEP` does not enable…

  6. 4.7CVE-2026-50267EPSS 0.07%

    Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Abstractions 4.0.0 through 4.1.0, when MySQL or PostgreSQL service bindings from `VCAP_S…

  7. 6.5CVE-2026-50201EPSS 0.2%

    Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Management.Endpoint prior to version 4.2.0 and Steeltoe.Management.EndpointCore prior to version 3.4.0…

  8. 5.3CVE-2026-44646EPSS 0.3%

    LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, Context.spawn() creates a child Context for the {% render %} tag but does not propagate the parent context's resolved …

  9. 7.5CVE-2026-48979EPSS 0.3%

    PHP Standard Library (PSL) is set of APIs covering async, collections, networking, I/O, cryptography, terminal UI, etc. In versions 6.1.0, 6.1.1 and 6.2.0, the Psl\H2\ServerConnection does not validate that the total bytes received in DATA…

  10. 9.3CVE-2026-54388EPSS 0.4%

    Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers with differing values, forwarding all duplicate headers to the backend while using the first value to determine how many…

  11. 9.3CVE-2026-54387EPSS 0.4%

    Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, forwarding both verbatim to the backend while using Content-Length to determine how many request body …

  12. 6.9CVE-2026-12529EPSS 0.3%

    A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. Affected is an unknown function of the file /index.php of the component Student Self-Registration Endpoint. The man…

  13. 3.7CVE-2026-11525EPSS 0.2%

    Impact: When undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC 6265. Non-spec values are silently map…

  14. 10.0CVE-2026-3490EPSS 0.8%

    picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls. Remote attackers can invoke any blocked function such as os.s…

  15. 6.0CVE-2026-20246EPSS 0.1%

    A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied comma…

  16. 8.7CVE-2025-71322EPSS 0.4%

    PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypass security checks. Malicious actors can craft pickle payloads using pty.spawn to achieve arbitrary code execution when …

  17. 8.6CVE-2026-54415EPSS 0.3%

    Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over n…

  18. 9.8CVE-2026-54807EPSS 0.3%

    Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions.

  19. 8.8CVE-2026-54805EPSS 0.4%

    Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions.

  20. 6.8CVE-2026-54196EPSS 0.2%

    Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects JetFormBuilder: from n/a through 3.6.1.

  21. 9.0CVE-2026-52705EPSS 0.3%

    Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.

  22. 9.8CVE-2026-49058EPSS 0.3%

    Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.

  23. 8.2CVE-2026-48788EPSS 0.3%

    Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. Versions 1.6.0 through 1.15.0 contain a Cross-Site Scripting (XSS) vulnerability exploitable through content-type spoofing. Th…

  24. 9.9CVE-2026-40749EPSS 0.4%

    Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.

  25. 9.9CVE-2026-40748EPSS 0.4%

    Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.

  26. 9.9CVE-2026-40747EPSS 0.4%

    Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.

  27. 9.9CVE-2026-40746EPSS 0.4%

    Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.

  28. 8.0CVE-2026-39598EPSS 0.2%

    Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2.

  29. 9.9CVE-2026-39589EPSS 0.4%

    Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions.

  30. 7.6CVE-2026-39546EPSS 0.3%

    Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions.

  31. 5.6CVE-2026-2604EPSS 0.3%

    A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored w…

  32. 9.8CVE-2026-27395EPSS 0.3%

    Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

  33. 9.9CVE-2026-27041EPSS 0.3%

    Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions.

  34. 9.9CVE-2026-25446EPSS 0.4%

    Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions.

  35. 9.9CVE-2026-22327EPSS 0.5%

    Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions.

  36. 8.3CVE-2026-12468EPSS 0.1%

    Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  37. 3.1CVE-2026-12458EPSS 0.2%

    Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security sever…

  38. 4.2CVE-2026-12457EPSS 0.1%

    Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

  39. 8.3CVE-2026-12454EPSS 0.1%

    Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  40. 6.5CVE-2026-12450EPSS 0.2%

    Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

  41. 8.8CVE-2026-12448EPSS 0.3%

    Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)

  42. 8.3CVE-2026-12438EPSS 0.2%

    Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium secur…

  43. 8.8CVE-2026-12165EPSS 0.4%

    The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 30.0.2 via the `RegistryUserRole` parameter. This is due to the p…

  44. 10.0CVE-2026-0083EPSS 0.1%

    In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  45. 10.0CVE-2026-0068EPSS 0.1%

    In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due to desync from persistence. This could lead to local escalation of privilege if a user ca…

  46. 10.0CVE-2026-0063EPSS 0.2%

    In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed.…

  47. 7.8CVE-2026-0019EPSS 0.1%

    In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl…

  48. 9.8CVE-2025-69179EPSS 0.4%

    Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.

  49. 8.8CVE-2025-69138EPSS 0.4%

    Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.

  50. 10.0CVE-2025-69129EPSS 0.4%

    Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.