cve.bz

OWASP A08:2025 Software or Data Integrity Failures vulnerabilities, newest first, page 135

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A08:2025 at MITRE.

Its weaknesses: 14

CWE-345, CWE-353, CWE-426, CWE-427, CWE-494, CWE-502, CWE-506, CWE-509, CWE-565, CWE-784, CWE-829, CWE-830, CWE-915, CWE-926

  1. 7.8CVE-2019-13357EPSS 0.6%

    In Total Defense Anti-virus 9.0.0.773, resource acquisition from the untrusted search path C:\ used by caschelp.exe allows local attackers to hijack ccGUIFrm.dll, which leads to code execution. SYSTEM-level code execution can be achieved w…

  2. 6.8CVE-2019-16398EPSS 0.8%

    On Keeper K5 20.1.0.25 and 20.1.0.63 devices, remote code execution can occur by inserting an SD card containing a file named zskj_script_run.sh that executes a reverse shell.

  3. 5.3CVE-2019-12620EPSS 0.7%

    A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for …

  4. 7.8CVE-2019-6826EPSS 1.2%

    A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product.

  5. 8.8CVE-2019-11666EPSS 1.2%

    Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deseriali…

  6. 9.8CVE-2019-0195EPSS 14%

    Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded. If the attacker found the file with the value of the tapestry.hmac-passphrase configuration symbol, most prob…

  7. 9.8CVE-2019-16335EPSS 4.9%

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.

  8. 9.8CVE-2019-14540EPSS 11%

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

  9. 8.8CVE-2019-16317EPSS 1.7%

    In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter, because PHAR uploads are not blocked and are reachable within the phar://../../../../../../../../…

  10. 7.8CVE-2019-11660ExploitEPSS 7.8%

    Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges.

  11. 6.5CVE-2019-3646EPSS 1.5%

    DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by …

  12. 7.2CVE-2019-13534EPSS 0.7%

    Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part #: M8096-67501, WLAN Version B, Firmware A.01.09, Part #: N/A (Replaced by Version C) and WLAN Version B, Firmware…

  13. 7.8CVE-2019-8076EPSS 4.1%

    Adobe application manager installer version 10.0 have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user.

  14. 7.8CVE-2019-11773EPSS 0.4%

    Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users.

  15. 9.8CVE-2019-0189EPSS 24%

    The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/httpService" URL, and uses Java deserialization to perform code execution. In the HttpEngine, the value of the r…

  16. 9.8CVE-2017-18605EPSS 2.3%

    The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection.

  17. 7.5CVE-2017-18604EPSS 1.6%

    The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.

  18. 8.1CVE-2019-10666EPSS 1.2%

    An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the include() function on user supplied input without sanitizing the values by calling basename() or a similar function. An attac…

  19. 7.2CVE-2019-14224EPSS 5.1%

    An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim…

  20. 8.8CVE-2019-5069EPSS 2.3%

    A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigg…

  21. 9.8CVE-2018-11569EPSS 1.7%

    Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.

  22. 7.5CVE-2019-5479EPSS 1.3%

    An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file).

  23. 5.5CVE-2019-5478EPSS 0.2%

    A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.

  24. 7.5CVE-2019-15839EPSS 2.4%

    The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion.

  25. 7.8CVE-2019-8461EPSS 1.1%

    Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially …

  26. 9.8CVE-2019-15780EPSS 2.4%

    The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.

  27. 7.8CVE-2019-4447EPSS 0.4%

    IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum_debug is a setuid root binary which trusts the PATH environment variable. A low privileged user can execute arbitrary com…

  28. 9.8CVE-2019-15521EPSS 2.5%

    Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing an object.

  29. 9.8CVE-2019-6695EPSS 0.8%

    Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image through specific methods.

  30. 7.8CVE-2019-7364EPSS 1.9%

    DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and …

  31. 7.8CVE-2019-7362EPSS 1.2%

    DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution.

  32. 9.8CVE-2018-20987EPSS 2.1%

    The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.

  33. 9.8CVE-2019-11030EPSS 2.0%

    Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security.DataCrypt method in Common.dll in AuditTrailService in SMServer.exe. This method triggers insecure deserialization within the .NET garbage collect…

  34. 9.8CVE-2019-15321EPSS 2.1%

    The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.

  35. 9.8CVE-2019-15320EPSS 2.1%

    The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.

  36. 9.8CVE-2019-15319EPSS 2.1%

    The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.

  37. 9.8CVE-2018-20984EPSS 2.0%

    The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.

  38. 7.8CVE-2019-14686EPSS 1.2%

    A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to lo…

  39. 7.8CVE-2019-15295EPSS 1.4%

    An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the sea…

  40. 7.3CVE-2019-10086EPSS 29%

    In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using t…

  41. 7.8CVE-2019-14687EPSS 1.6%

    A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical t…

  42. 7.8CVE-2019-14684EPSS 1.5%

    A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical t…

  43. 7.8CVE-2019-6165EPSS 0.4%

    A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 1…

  44. 7.8CVE-2019-5631EPSS 1.1%

    The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the system (who must already be authenticated to the operating system) can elevate thei…

  45. 8.8CVE-2019-12809EPSS 1.0%

    Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for co…

  46. 7.8CVE-2019-8062EPSS 3.2%

    Adobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.

  47. 7.8CVE-2019-7961EPSS 3.0%

    Adobe Prelude CC versions 8.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.

  48. 7.8CVE-2019-7931EPSS 3.1%

    Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.

  49. 7.8CVE-2019-7870EPSS 3.8%

    Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.

  50. 9.8CVE-2019-0344KEVEPSS 7.5%

    Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Inje…