cve.bz

OWASP A08:2025 Software or Data Integrity Failures vulnerabilities, newest first, page 28

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A08:2025 at MITRE.

Its weaknesses: 14

CWE-345, CWE-353, CWE-426, CWE-427, CWE-494, CWE-502, CWE-506, CWE-509, CWE-565, CWE-784, CWE-829, CWE-830, CWE-915, CWE-926

  1. 5.1CVE-2026-62215EPSS 0.2%

    OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust callers to forge trusted A2UI actions. Attackers can perform actions requiring stronger authorization by subm…

  2. 5.3CVE-2026-44434EPSS 0.2%

    Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit dccf5d4, Quicly was vulnerable to stateless reset injection through lack of packet entry validation. The QUIC protocol is…

  3. 6.5CVE-2026-33731EPSS 0.2%

    WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.php contains a signature verification bypass that allows an attacker to forge webhook requests with a…

  4. 5.3CVE-2026-53536EPSS 0.2%

    Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endpoint verified the supplied JWT against the shared signing secret but did not check the token's audience, and combined w…

  5. 7.1CVE-2026-59867EPSS 2.4%

    Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota resolved OpenAPI $ref values by fetching remote http(s) URLs and reading local absolute or out-of-tree file paths, allowing `kiota generate` on an atta…

  6. 9.3CVE-2026-59865EPSS 4.4%

    Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota info` read x-ms-kiota-info.languagesInformation.<language>.dependencyInstallCommand plus dependency name and version values from an OpenAPI descriptio…

  7. 9.3CVE-2026-59864EPSS 1.3%

    Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota plugin add` and `kiota plugin generate` (with `-t APIPlugin`) emitted attacker-controlled static_template.file values from x-ai-adaptive-card and x-ai…

  8. 9.1CVE-2026-14890EPSS 1.0%

    SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authentication or deserialization safeguards, allowing an attacker to provide a malicious pickle file t…

  9. 8.8CVE-2026-5674EPSS 0.2%

    A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions withi…

  10. 8.1CVE-2026-15008EPSS 1.0%

    The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the fr_token function in all versions up to,…

  11. 8.7CVE-2026-56679EPSS 0.4%

    9Router is an AI router & token saver. Prior to 0.5.4, the PATCH /api/settings endpoint writes the entire request body to persistent settings without a field whitelist, allowing an authenticated user to set security-critical fields such as…

  12. 9.3CVE-2026-46421EPSS 0.5%

    The SAP Cloud Application Programming Model is a tool for building enterprise-grade cloud applications, and cap-js/cds-dbs is the monorepo for SQL database services for that tool. On April 29, 2026, compromised versions of `@cap-js/sqlite@…

  13. 8.3CVE-2026-53516EPSS 0.3%

    Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit account linking when the OAuth provider asserts email_verified:…

  14. 7.7CVE-2026-53514EPSS 0.2%

    Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when invitation IDs can be obtained outside the invited mailbox and requireEmailVerificationOnInvitation: true is not enabl…

  15. 9.6CVE-2026-53513EPSS 0.2%

    Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin's POST /sso/register and POST /sso/update-provider endpoints accept attacker-controlled oidcConfig.userInfoEndpoint, to…

  16. 9.1CVE-2026-53512EPSS 0.3%

    Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the legacy oidcProvider and mcp plugins expose OAuth token endpoints whose refresh_token grant authenticates only possession of the bound refreshTo…

  17. 9.3CVE-2026-50562EPSS 0.2%

    FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/previe…

  18. 7.6CVE-2026-45337EPSS 0.2%

    Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorization plugin treats any authenticated session as the owner of any pending device code because GET /device does not claim …

  19. 8.6CVE-2026-40501EPSS 0.8%

    Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in SearchService that allows remote attackers to execute arbitrary code by delivering malicious JavaScript through controll…

  20. 7.7CVE-2026-48799EPSS 0.2%

    Postiz is an AI social media scheduling tool. Prior to 2.21.8, Postiz fails to verify Nowpayments IPN callback authenticity against the payment provider shared secret and reads the target subscription identifier from the untrusted request …

  21. 8.4CVE-2026-42936EPSS 0.2%

    The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installe…

  22. 7.4CVE-2026-48287EPSS 0.2%

    CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of th…

  23. 8.6CVE-2026-48275EPSS 0.3%

    Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  24. 6.5CVE-2026-48816EPSS 0.1%

    sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify derives a transparency-log timestamp from tlogEntries[].integratedTime for bundle v0.2 inclusionProof-only entries even thou…

  25. 7.8CVE-2026-48272EPSS 0.2%

    Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploita…

  26. 7.8CVE-2026-47472EPSS 0.3%

    NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, infor…

  27. 8.4CVE-2026-24233EPSS 0.4%

    NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this v…

  28. 9.8CVE-2026-24227EPSS 1.0%

    NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution.

  29. 6.3CVE-2026-24226EPSS 0.2%

    NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

  30. 6.4CVE-2026-24220EPSS 0.3%

    NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to co…

  31. 7.8CVE-2026-50649EPSS 4.0%

    Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

  32. 7.8CVE-2026-50646EPSS 4.0%

    Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

  33. 5.5CVE-2026-50526EPSS 0.2%

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

  34. 7.9CVE-2026-48346EPSS 0.3%

    Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil…

  35. 7.5CVE-2026-47737EPSS 0.2%

    Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when set_remote_address proxy_protocol: :v1 is enabled and persistent connections are used because Puma incorr…

  36. 9.8CVE-2026-47304EPSS 0.3%

    Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

  37. 8.8CVE-2026-45069EPSS 0.3%

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, OidcTokenHandler::verifyClaims() registered audience (aud), issuer (iss), and expiry (exp) checkers but …

  38. 8.8CVE-2026-57102EPSS 0.8%

    Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  39. 9.8CVE-2026-55944EPSS 1.5%

    Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.

  40. 7.8CVE-2026-50509EPSS 3.5%

    Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

  41. 8.3CVE-2026-45077EPSS 0.7%

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the server:log listener (Symfony\Bridge\Monolog\Command\ServerLogCommand) binds to 0.0.0.0:9911 …

  42. 6.5CVE-2026-59888EPSS 0.4%

    jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJ…

  43. 9.8CVE-2026-58644KEVExploitEPSS 16%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  44. 6.8CVE-2026-57097EPSS 0.5%

    Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.

  45. 7.8CVE-2026-55009EPSS 2.5%

    Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

  46. 9.8CVE-2026-54118EPSS 1.5%

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  47. 9.8CVE-2026-54117EPSS 1.5%

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  48. 7.5CVE-2026-50652EPSS 1.7%

    Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.

  49. 9.8CVE-2026-50522KEVEPSS 3.0%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  50. 8.8CVE-2026-58477EPSS 0.5%

    Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP reques…