cve.bz

OWASP A08:2025 Software or Data Integrity Failures vulnerabilities, newest first, page 20

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A08:2025 at MITRE.

Its weaknesses: 14

CWE-345, CWE-353, CWE-426, CWE-427, CWE-494, CWE-502, CWE-506, CWE-509, CWE-565, CWE-784, CWE-829, CWE-830, CWE-915, CWE-926

  1. 8.7CVE-2026-10036EPSS 0.7%

    SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enume…

  2. 9.3CVE-2026-81706EPSS 0.2%

    openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create shadowed contact entries invisible until the corresponding own identity is deleted. When …

  3. 9.3CVE-2026-81702EPSS 0.2%

    openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity stores. Attackers can replace legitimate public keys with their …

  4. 8.7CVE-2026-81697EPSS 0.2%

    openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration file resolution flaw in crypt_settings.py, where CONFIG_FILE (originally the absolute per-user path ~/.crypt_settings.json) is reassigned …

  5. 9.3CVE-2026-74232EPSS 0.8%

    Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.…

  6. 9.8CVE-2026-78292EPSS 0.6%

    Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.

  7. 9.8CVE-2026-78286EPSS 0.6%

    Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.

  8. 7.2CVE-2026-78276EPSS 0.5%

    Editor PHP Object Injection in Fluent Boards Pro <= 2.0.11 versions.

  9. 8.8CVE-2026-78257EPSS 0.5%

    Contributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions.

  10. 4.9CVE-2026-59275EPSS 0.4%

    A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring …

  11. 7.3CVE-2026-47878EPSS 0.4%

    DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without an ObjectInputFilter that restricts types to a trusted class allowlist…

  12. 9.8CVE-2026-47875EPSS 0.4%

    Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an untrusted data source for the job repository. The JobParameterDeserializer does not pr…

  13. 9.8CVE-2026-47864EPSS 5.9%

    SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInputStream and no class filtering. Any request with Content-Type application/x-java-serialized-object whose body resolves to a Serial…

  14. 7.1CVE-2026-47849EPSS 0.4%

    Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON Patch (application/json-patch+json) requests. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.…

  15. 6.3CVE-2026-47856EPSS 0.3%

    Spring Integration's JSON to object conversion uses the json__TypeId__ header to choose the deserialization target type, and resolves that header value to a class with ClassUtils.forName and no type/package allow-list. Spring Integration 7…

  16. 4.3CVE-2026-47850EPSS 0.3%

    Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.…

  17. 4.4CVE-2026-21810EPSS 0.1%

    HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary.

  18. 7.5CVE-2025-61478EPSS 0.5%

    An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets.

  19. 9.3CVE-2026-51106EPSS 0.4%

    An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component

  20. 9.3CVE-2026-80428ExploitEPSS 4.7%

    ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting serialized objects through the LTI authentication endpo…

  21. 8.1CVE-2026-18252EPSS 0.5%

    GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have execute…

  22. 8.8CVE-2026-65097EPSS 0.3%

    NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation o…

  23. 9.9CVE-2026-65093EPSS 0.8%

    NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosu…

  24. 9.8CVE-2026-65081EPSS 0.4%

    NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, d…

  25. 9.8CVE-2026-51368EPSS 0.9%

    An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint

  26. 5.6CVE-2026-55663EPSS 0.2%

    mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 until 0.22.5 for the Rust crate, mediasoup's built-in SCTP stack authenticates state cookies using only the hardcoded msw…

  27. 7.8CVE-2026-75768EPSS 0.3%

    Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitat…

  28. 9.3CVE-2026-79657EPSS 1.3%

    NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerou…

  29. 9.3CVE-2026-57910EPSS 0.2%

    Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

  30. 7.4CVE-2026-53561EPSS 0.3%

    An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on deployments using HTTP transport with hive.server2.authentication=SAML allows an una…

  31. 7.1CVE-2026-77144EPSS 0.4%

    The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user hel…

  32. 9.3CVE-2026-77138EPSS 0.7%

    The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize(). A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, lead…

  33. 7.7CVE-2026-56095EPSS 0.3%

    The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring multi-value data for the SOLR_CLASSIFICATION, SOLR_MULTIVALUE and SOLR_RELATION content object typ…

  34. 9.4CVE-2026-78683EPSS 0.5%

    NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default restricted=Fals…

  35. 8.5CVE-2026-78680EPSS 0.2%

    NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent._repr_svg_, allowing attackers to execute arbitrary code by placing a malicious dot binary in…

  36. 9.8CVE-2026-78265EPSS 0.6%

    Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.

  37. 9.8CVE-2026-78262EPSS 0.6%

    Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.

  38. 9.8CVE-2026-32563EPSS 0.6%

    Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

  39. 6.5CVE-2026-75509EPSS 0.1%

    joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to version 1.7.3, JWTClaimsRegistry applies membership matching to list-valued iss and sub claims, allowing a…

  40. 4.3CVE-2026-78417EPSS 0.2%

    Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept and tamper with VNC sessions via automatic…

  41. 8.6CVE-2026-71504EPSS 0.5%

    Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers with only member-creation rights to reset the password of any user account, including the system administrator, without v…

  42. 8.7CVE-2026-40877EPSS 0.5%

    Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3.

  43. 8.7CVE-2026-78416EPSS 1.0%

    Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config all…

  44. 8.4CVE-2026-76843EPSS 0.4%

    The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model fi…

  45. 9.8CVE-2026-66650EPSS 0.6%

    Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.

  46. 6.9CVE-2026-78147EPSS 0.6%

    A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/op…

  47. 9.9CVE-2026-78155EPSS 0.5%

    privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges

  48. 8.8CVE-2026-0551EPSS 0.7%

    The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.18 via deserialization of untrusted input from the 'post_protection_roles' vulnerable parameter. This ma…

  49. 9.8CVE-2026-4703EPSS 0.9%

    The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This make…

  50. 8.7CVE-2026-71513EPSS 1.1%

    NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables ou…