cve.bz

OWASP A08:2025 Software or Data Integrity Failures vulnerabilities, newest first, page 97

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A08:2025 at MITRE.

Its weaknesses: 14

CWE-345, CWE-353, CWE-426, CWE-427, CWE-494, CWE-502, CWE-506, CWE-509, CWE-565, CWE-784, CWE-829, CWE-830, CWE-915, CWE-926

  1. 3.3CVE-2023-44129EPSS 0.1%

    The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this …

  2. 6.3CVE-2023-44121EPSS 0.1%

    The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device…

  3. 9.8CVE-2023-43291EPSS 2.0%

    Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component.

  4. 8.8CVE-2023-40044KEVExploitEPSS 90%

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

  5. 9.0CVE-2023-39347EPSS 0.6%

    Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to update pod labels can cause Cilium to apply incorrect network policies. This issue arises due to the fact that on po…

  6. 9.8CVE-2023-0625EPSS 0.9%

    Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog. This issue affects Docker Desktop: before 4.12.0.

  7. 8.8CVE-2015-8371EPSS 0.7%

    Composer before 2016-02-10 allows cache poisoning from other projects built on the same host. This results in attacker-controlled code entering a server-side build process. The issue occurs because of the way that dist packages are cached.…

  8. 9.8CVE-2023-40619EPSS 1.3%

    phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is …

  9. 8.8CVE-2023-43636EPSS 0.1%

    In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in the vault. As per the “measured boot” design, the PCR values calculated at different stages of the boot process will chang…

  10. 9.8CVE-2023-41084EPSS 0.7%

    Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the web app allows on the device.

  11. 7.3CVE-2023-41929EPSS 0.2%

    A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. (An attacker must already have user privileges on Windows to exploit this vulne…

  12. 9.8CVE-2023-5016EPSS 1.0%

    A vulnerability was found in spider-flow up to 0.5.0. It has been declared as critical. Affected by this vulnerability is the function DriverManager.getConnection of the file src/main/java/org/spiderflow/controller/DataSourceController.jav…

  13. 5.5CVE-2023-32665EPSS 0.4%

    A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.

  14. 7.5CVE-2023-32636EPSS 0.8%

    A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does n…

  15. 7.8CVE-2023-41267EPSS 0.6%

    In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that…

  16. 9.8CVE-2023-38204EPSS 67%

    Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does…

  17. 4.9CVE-2023-26141EPSS 0.9%

    Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will…

  18. 7.8CVE-2023-20236EPSS 0.1%

    A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification.…

  19. 6.7CVE-2023-39201EPSS 0.2%

    Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access.

  20. 8.1CVE-2023-38155EPSS 1.3%

    Azure DevOps Server Remote Code Execution Vulnerability

  21. 5.7CVE-2023-36777EPSS 52%

    Microsoft Exchange Server Information Disclosure Vulnerability

  22. 8.0CVE-2023-36757EPSS 37%

    Microsoft Exchange Server Spoofing Vulnerability

  23. 8.0CVE-2023-36756EPSS 49%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  24. 8.0CVE-2023-36745EPSS 76%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  25. 8.0CVE-2023-36744EPSS 57%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  26. 4.4CVE-2023-36736EPSS 1.4%

    Microsoft Identity Linux Broker Remote Code Execution Vulnerability

  27. 7.8CVE-2023-35669EPSS 0.1%

    In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution priv…

  28. 8.8CVE-2022-1415EPSS 1.0%

    A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve cod…

  29. 9.8CVE-2020-19559EPSS 1.4%

    An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod() parameter.

  30. 7.2CVE-2023-4528EPSS 32%

    Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

  31. 5.5CVE-2023-3747EPSS 0.2%

    Zero Trust Administrators have the ability to disallow end users from disabling WARP on their devices. Override codes can also be created by the Administrators to allow a device to temporarily be disconnected from WARP, however, due to lac…

  32. 9.8CVE-2023-41330EPSS 2.3%

    knplabs/knp-snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. ## Issue On March 17th the vulnerability CVE-2023-28115 was disclosed, allowing an attacker to gain remote code execution throug…

  33. 9.8CVE-2023-0925EPSS 0.8%

    Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP port 2099 by default) and two RMI interfaces (listening on a single, dynamically assigned TCP high po…

  34. 6.6CVE-2023-37941ExploitEPSS 35%

    If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset's web backend. The Superset metadata db is an 'internal…

  35. 7.2CVE-2023-4589EPSS 0.3%

    Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software updates without proper integrity verification mechanisms. …

  36. 6.8CVE-2023-35719EPSS 25%

    ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of M…

  37. 4.3CVE-2023-30534ExploitEPSS 2.9%

    Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti’s vendor directory (phpseclib), the nec…

  38. 8.8CVE-2023-2453EPSS 0.9%

    There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently passed to a ‘require_once’ statement. This allows arbitrary files with the ‘.php’ extension for which the absolute pat…

  39. 7.5CVE-2023-35906EPSS 0.4%

    IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM X-Force ID: 259649.

  40. 7.8CVE-2023-28072EPSS 0.3%

    Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. A local malicious user could potentially send specially crafted requests to the .NET Remoting server to run arbitrary cod…

  41. 7.8CVE-2023-39374EPSS 0.2%

    ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element

  42. 9.8CVE-2023-37220EPSS 0.3%

    Synel Terminals - CWE-494: Download of Code Without Integrity Check

  43. 7.8CVE-2023-4736EPSS 0.5%

    Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.

  44. 5.3CVE-2023-39983EPSS 0.6%

    A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to reg…

  45. 5.3CVE-2023-41045EPSS 0.4%

    Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never…

  46. 6.5CVE-2023-31170EPSS 0.3%

    An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authoriz…

  47. 6.5CVE-2023-31168EPSS 0.4%

    An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authoriz…

  48. 8.8CVE-2023-40596EPSS 0.2%

    In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk Enterprise references an insecure path for the OPENSSLDIR build definition. An attacker can abuse this reference and s…

  49. 8.8CVE-2023-40595EPSS 0.9%

    In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data. The attacker can use the query to execute arbitrary code.

  50. 6.5CVE-2023-3252EPSS 0.8%

    An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of…