cve.bz

OWASP A08:2025 Software or Data Integrity Failures vulnerabilities, newest first, page 21

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A08:2025 at MITRE.

Its weaknesses: 14

CWE-345, CWE-353, CWE-426, CWE-427, CWE-494, CWE-502, CWE-506, CWE-509, CWE-565, CWE-784, CWE-829, CWE-830, CWE-915, CWE-926

  1. 5.9CVE-2026-62204EPSS 0.09%

    SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin access can overwrite existing trusted plugins by supplying mismatched packageNam…

  2. 7.1CVE-2026-58002EPSS 0.2%

    WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass vulnerability in the Users_affiliations add.json.php endpoint that allows authenticated users to forge two-party consent records by supply…

  3. 8.3CVE-2026-48106EPSS 0.2%

    Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's cluster replication receiver at `internal/cluster/replication/receiver.go` validates only the wire-format envelope (length, opcode) o…

  4. 8.3CVE-2026-48105EPSS 0.2%

    Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM (`internal/cluster/raft/fsm.go:applyRegisterFile`) accepts attacker-chosen file paths in manifest-registration proposals wit…

  5. 7.8CVE-2026-54071EPSS 0.4%

    BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB._load_data() loads CMap files. PDF-controlled Encoding or CMapName values…

  6. 5.3CVE-2026-16650EPSS 0.2%

    The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events in a default configuration, allowing unauthenticated attackers to forge webhook notifications that mark donations as p…

  7. 5.3CVE-2026-15150EPSS 0.2%

    The myCred WordPress plugin before 3.2.5 does not verify that the receiver of an incoming payment gateway notification matches the site's configured merchant account, allowing unauthenticated attackers to have arbitrary amounts of the site…

  8. 9.8CVE-2026-77651EPSS 0.8%

    The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution.

  9. 9.8CVE-2026-77650EPSS 0.8%

    The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execu…

  10. 9.8CVE-2026-77649EPSS 0.8%

    The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution.

  11. 7.7CVE-2026-77646EPSS 0.4%

    A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

  12. 9.2CVE-2026-77645EPSS 0.6%

    A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

  13. 10.0CVE-2026-69836EPSS 1.8%

    Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

  14. 9.4CVE-2026-55769EPSS 0.8%

    CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser connections without pinning search_path in fillDefaultParameters in pkg/manageme…

  15. 5.5CVE-2026-55015EPSS 1.0%

    Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.

  16. 7.1CVE-2026-55013EPSS 0.5%

    Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally.

  17. 8.7CVE-2026-66787EPSS 0.3%

    A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster …

  18. 8.7CVE-2026-66785EPSS 0.2%

    A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properl…

  19. 7.1CVE-2026-62315EPSS 0.5%

    Frappe is a full-stack web application framework. In version 16.31.0 and earlier, frappe.client.set_value in frappe/client.py checks a dictionary supplied through the fieldname parameter against forbidden standard and child-table fields be…

  20. 7.6CVE-2026-53425EPSS 0.2%

    Insufficient Verification of Data Authenticity vulnerability in dropbox samly allows an attacker to establish an authenticated session using a SAML response the service provider never requested. Samly.SPHandler.validate_authresp/3 in lib/…

  21. 7.8CVE-2026-18285EPSS 0.5%

    Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Aeon. User interaction is required to exp…

  22. 7.8CVE-2026-15679EPSS 0.4%

    Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Imag…

  23. 6.6CVE-2026-44725EPSS 0.4%

    EMQX is a scalable and reliable MQTT broker for AI, IoT, IIoT, and connected vehicles. Prior to versions 5.8.11, 5.9.3, 5.10.4, 6.0.3, 6.1.2, and 6.2.1, the plugin-install REST API and dashboard upload accepted stale grants created with em…

  24. 9.8CVE-2026-73993EPSS 0.6%

    Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.

  25. 9.8CVE-2026-66672EPSS 0.6%

    Unauthenticated PHP Object Injection in Flatastic <= 2.0 versions.

  26. 9.8CVE-2026-66583EPSS 0.6%

    Unauthenticated PHP Object Injection in Forminator <= 1.57.0 versions.

  27. 9.3CVE-2026-76850EPSS 1.3%

    LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmdeploy/pytorch/disagg/conn/engine_conn.py reads peer-to-peer cache-free requests with recv_pyobj(), which deserializes the received b…

  28. 9.1CVE-2026-76404EPSS 0.7%

    In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's cre…

  29. 8.8CVE-2026-76395EPSS 0.7%

    In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is p…

  30. 8.0CVE-2026-76139EPSS 0.7%

    A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitH…

  31. 2.3CVE-2026-68554EPSS 0.2%

    Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, an…

  32. 10.0CVE-2026-22306EPSS 0.2%

    Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update doma…

  33. 7.8CVE-2026-16869EPSS 0.2%

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables.

  34. 7.1CVE-2026-62680EPSS 0.4%

    Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.22.0, Orval resolves remote and local external $ref values without an allowlist or confinement to the input directory. Pro…

  35. 8.4CVE-2026-44901EPSS 0.7%

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge() in framework/wazuh/core/results.py trusts the sort_casting field in a c…

  36. 7.8CVE-2026-49817EPSS 0.3%

    Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

  37. 7.8CVE-2026-49816EPSS 0.3%

    Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

  38. 9.4CVE-2026-45272EPSS 0.5%

    MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIAL_AUTH key names without validating quote…

  39. 7.1CVE-2026-76245EPSS 0.2%

    stigmem (pip package stigmem-node) version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly treated as expired. This affects the availability and reliabil…

  40. 7.3CVE-2026-76241EPSS 0.1%

    stigmem-node 0.9.0a1 allows plugin signature enforcement to be disabled via a single configuration flag without a second explicit acknowledgment. If that setting is carried into an environment where plugin directories are writable by less-…

  41. 9.8CVE-2026-73389EPSS 0.6%

    Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.

  42. 9.8CVE-2026-73364EPSS 0.6%

    Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions.

  43. 8.4CVE-2026-49428EPSS 0.3%

    Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An u…

  44. 6.9CVE-2026-75987EPSS 0.6%

    A vulnerability was found in SPLWare esProc up to 20260507. This affects the function ObjectInputStream.readUnshared of the file src/main/java/com/scudata/parallel/SocketData.java. Performing a manipulation results in deserialization. Remo…

  45. 7.6CVE-2026-53958EPSS 0.4%

    4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubUsername, ssoGithubEmail, ssoMicrosoftId, ssoMicrosoftEmail, …

  46. 7.8CVE-2026-60412EPSS 0.3%

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with lo…

  47. 7.8CVE-2026-60392EPSS 0.3%

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attack…

  48. 5.3CVE-2026-52737EPSS 0.3%

    ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious unauthenticated P2P peer can answer Zebra's outbound getblocks or FindBlocks request with a small two-hash inventory and then serve a syntactically valid block who…

  49. 7.1CVE-2026-73073EPSS 0.2%

    Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, a…

  50. 8.8CVE-2026-74012EPSS 0.5%

    Deserialization of Untrusted Data vulnerability in TaxoPress allows Object Injection. This issue affects TaxoPress: from n/a through 3.51.0.