cve.bz

OWASP A08:2025 Software or Data Integrity Failures vulnerabilities, newest first, page 33

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A08:2025 at MITRE.

Its weaknesses: 14

CWE-345, CWE-353, CWE-426, CWE-427, CWE-494, CWE-502, CWE-506, CWE-509, CWE-565, CWE-784, CWE-829, CWE-830, CWE-915, CWE-926

  1. 9.3CVE-2026-53805EPSS 0.9%

    NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Pyth…

  2. 9.3CVE-2026-53874EPSS 0.5%

    picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbitrary code by hiding eval calls nested under callable objects via getattr. Attackers can embed malicious code in pickle …

  3. 9.3CVE-2025-71321EPSS 0.8%

    picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file. Attackers can construct malicious pickle objects to overwrite critic…

  4. 7.5CVE-2026-22283EPSS 0.2%

    Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading…

  5. 9.8CVE-2026-49108EPSS 0.3%

    Unauthenticated PHP Object Injection in Moderno < 1.43 versions.

  6. 8.1CVE-2026-40757EPSS 0.2%

    Unauthenticated PHP Object Injection in Château <= 1.2.1 versions.

  7. 8.1CVE-2026-40756EPSS 0.2%

    Unauthenticated PHP Object Injection in Zoya <= 1.4 versions.

  8. 8.1CVE-2026-40752EPSS 0.3%

    Unauthenticated PHP Object Injection in Manufaktur Solutions <= 1.1.1 versions.

  9. 8.1CVE-2026-40738EPSS 0.3%

    Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions.

  10. 8.1CVE-2026-40733EPSS 0.3%

    Unauthenticated PHP Object Injection in ShiftUp <= 1.3 versions.

  11. 8.1CVE-2026-39576EPSS 0.4%

    Unauthenticated PHP Object Injection in SingleMalt <= 1.5 versions.

  12. 8.1CVE-2026-39560EPSS 0.3%

    Unauthenticated PHP Object Injection in Hiroshi <= 1.5.1 versions.

  13. 8.1CVE-2026-39556EPSS 0.3%

    Unauthenticated PHP Object Injection in Konsept <= 1.9 versions.

  14. 8.1CVE-2026-39445EPSS 0.4%

    Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions.

  15. 8.1CVE-2026-39442EPSS 0.3%

    Unauthenticated PHP Object Injection in PressMart <= 1.2.26 versions.

  16. 8.8CVE-2025-69130EPSS 0.5%

    Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme allows Object Injection. This issue affects Entrepreneur - Booking for Small Businesses WordPress Th…

  17. 9.8CVE-2025-69127EPSS 0.4%

    Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions.

  18. 9.8CVE-2025-69111EPSS 0.4%

    Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions.

  19. 9.8CVE-2025-60236EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5.

  20. 9.8CVE-2025-60231EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection. This issue affects The Hospital: from n/a through 1.8.1.

  21. 9.8CVE-2025-60230EPSS 0.4%

    Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9.

  22. 9.8CVE-2025-60229EPSS 0.4%

    Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0.

  23. 9.8CVE-2026-54806EPSS 0.7%

    Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions.

  24. 9.8CVE-2026-54194EPSS 0.4%

    Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions.

  25. 9.8CVE-2026-52706EPSS 0.5%

    Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.

  26. 9.8CVE-2026-49107EPSS 0.4%

    Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.

  27. 9.8CVE-2026-49075EPSS 0.4%

    Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.

  28. 4.8CVE-2026-48783EPSS 0.2%

    Postiz is an AI social media scheduling tool. Versions prior to 2.21.8 contained an unauthenticated endpoint that accepted a signed token and applied subscription-enforcement side effects to the organization referenced in that token's clai…

  29. 9.9CVE-2026-48781EPSS 0.2%

    Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-controlled JSON blob into a session-shape JWT using the application's JWT_SECRET, and the auth middleware trusted …

  30. 9.8CVE-2026-42380EPSS 0.5%

    Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions.

  31. 8.1CVE-2026-40761EPSS 0.2%

    Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.

  32. 8.1CVE-2026-40760EPSS 0.2%

    Unauthenticated PHP Object Injection in Behold <= 1.5 versions.

  33. 8.1CVE-2026-40759EPSS 0.3%

    Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.

  34. 8.1CVE-2026-40758EPSS 0.3%

    Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.

  35. 8.1CVE-2026-40755EPSS 0.2%

    Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.

  36. 8.1CVE-2026-40754EPSS 0.2%

    Unauthenticated PHP Object Injection in Roisin <= 1.4 versions.

  37. 8.1CVE-2026-40753EPSS 0.3%

    Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions.

  38. 8.1CVE-2026-40751EPSS 0.3%

    Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.

  39. 8.1CVE-2026-40739EPSS 0.3%

    Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.

  40. 8.1CVE-2026-40736EPSS 0.2%

    Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.

  41. 8.1CVE-2026-40735EPSS 0.4%

    Unauthenticated PHP Object Injection in Reina <= 2.1 versions.

  42. 9.8CVE-2026-40725EPSS 0.4%

    Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.

  43. 8.1CVE-2026-39580EPSS 0.2%

    Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions.

  44. 5.5CVE-2026-39578EPSS 0.3%

    Unauthenticated PHP Object Injection in Valiance <= 1.2 versions.

  45. 5.5CVE-2026-39577EPSS 0.2%

    Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.

  46. 8.1CVE-2026-39573EPSS 0.4%

    Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions.

  47. 8.1CVE-2026-39567EPSS 0.3%

    Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.

  48. 8.1CVE-2026-39557EPSS 0.4%

    Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions.

  49. 8.1CVE-2026-39554EPSS 0.3%

    Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.

  50. 8.1CVE-2026-39545EPSS 0.4%

    Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions.