OWASP A06:2025 Insecure Design vulnerabilities, newest first, page 90
Filter
The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A06:2025 at MITRE.
Its weaknesses: 39
CWE-73, CWE-183, CWE-256, CWE-266, CWE-269, CWE-286, CWE-311, CWE-312, CWE-313, CWE-316, CWE-362, CWE-382, CWE-419, CWE-434, CWE-436, CWE-444, CWE-451, CWE-454, CWE-472, CWE-501, CWE-522, CWE-525, CWE-539, CWE-598, CWE-602, CWE-628, CWE-642, CWE-646, CWE-653, CWE-656, CWE-657, CWE-676, CWE-693, CWE-799, CWE-807, CWE-841, CWE-1021, CWE-1022, CWE-1125
- 9.9CVE-2026-50564EPSS 0.3%
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Environment CRD exposes spec.runtime.podSpec and spec.builder.…
- 9.9CVE-2026-50563EPSS 0.3%
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Container Executor path lets a tenant supply Function.spec.pod…
- 9.9CVE-2026-50545EPSS 0.3%
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, the Environment.spec.runtime.podSpec / spec.builder.podSpec passthrough …
- 6.9CVE-2026-46618EPSS 0.4%
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, before the round-1 security sweep, pkg/builder/builder.go passed Environ…
- 8.7CVE-2026-46617EPSS 0.3%
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, Fission runtime pods were created with ServiceAccountName: fission-fetch…
- 9.9CVE-2026-45556EPSS 0.4%
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, POST /waf/<service>/<server_ip>/rule/<rule_id>/save accepts a config_file_name form field that is passed straight through…
- 5.3CVE-2026-53442EPSS 0.2%
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenkins controller where they can be viewed b…
- 9.8CVE-2025-6254EPSS 0.5%
The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can regist…
- 9.1CVE-2026-9067EPSS 0.6%
The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended me…
- 1.2CVE-2025-59382EPSS 0.4%
QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:
- 6.5CVE-2026-46540EPSS 0.3%
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, when LightBlockchain::rebranch() adopts a fork chain whose tip is a macro block (checkpoint or election…
- 5.4CVE-2026-36722EPSS 0.2%
An authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3 allows attackers to execute arbitrary code via uploading a crafted file.
- 7.9CVE-2026-48575EPSS 0.3%
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- 7.9CVE-2026-48570EPSS 0.3%
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- 7.9CVE-2026-48568EPSS 0.3%
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- 7.9CVE-2026-47656EPSS 0.3%
Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.
- 9.8CVE-2026-47643EPSS 0.8%
External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-45656EPSS 0.3%
Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.
- 5.3CVE-2026-45655EPSS 0.4%
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- 4.3CVE-2026-45650EPSS 0.6%
User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network.
- 7.0CVE-2026-45603EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-45601EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-45598EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-45597EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-45596EPSS 0.2%
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 5.4CVE-2026-45595EPSS 0.4%
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
- 7.9CVE-2026-45588EPSS 0.3%
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- 7.8CVE-2026-45490EPSS 0.4%
Improper authorization in .NET allows an authorized attacker to elevate privileges locally.
- 3.3CVE-2026-45459EPSS 0.4%
Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
- 7.0CVE-2026-44818EPSS 0.3%
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 7.8CVE-2026-42991EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-42979EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-42978EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-42977EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-42913EPSS 0.5%
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- 7.0CVE-2026-42912EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-42909EPSS 0.4%
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- 7.0CVE-2026-42836EPSS 0.2%
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-33828EPSS 0.3%
Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-46327EPSS 0.10%
In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The function dm_blk_report_zones tests if the device is suspended with the "dm_suspended_md" call. However, this function is ca…
- 7.8CVE-2026-46324EPSS 0.1%
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need to use list_del_rcu(), this list can b…
- 7.8CVE-2026-46319EPSS 0.1%
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after ct_ft When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens an…
- 9.3CVE-2026-46316EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() a…
- 8.2CVE-2026-24349EPSS 0.06%
A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All…
- 6.9CVE-2025-40808EPSS 0.2%
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versio…
- 9.1CVE-2025-10263EPSS 0.5%
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow…
- 6.5CVE-2026-34031EPSS 0.4%
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be…
- 6.5CVE-2026-33582EPSS 0.5%
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authentica…
- 8.8CVE-2026-11616EPSS 0.3%
The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 2.3.28. This is due to the ajax_ayi_action() handler only applying strip_tags(esc_sql()) — with no allow-list …
- 5.3CVE-2026-41853EPSS 0.2%
Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.