OWASP A08:2025 Software or Data Integrity Failures vulnerabilities, newest first, page 153

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A08:2025 at MITRE.

1. 9.8CVE-2004-0030ExploitEPSS 7.3%2004-01-20

   PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter t…

2. 9.8CVE-2003-0791EPSS 2.1%2003-10-07

   The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.

3. 9.8CVE-2002-0671EPSS 1.2%2002-07-23

   Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications …

4. 9.8CVE-2001-1125EPSS 2.5%2001-10-05

   Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.