CWE-424

35 CVEs classified under CWE-424. Browse by severity and year.

Top CVEs for CWE-424
CVESeverityScorePublishedSummary
CVE-2025-48827Critical10.02025-05-27vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or late…
CVE-2026-66756Critical9.82026-07-30Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recomme…
CVE-2025-48828Critical9.02025-05-27Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template co…
CVE-2024-58136Critical9.02025-04-10Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in Febru…
CVE-2023-52952High8.52024-10-08A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 14 pro+ (J31032-K2017-H435)…
CVE-2024-3459High8.42024-05-14KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened in an external PDF…
CVE-2026-54423High8.22026-07-10In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to…
CVE-2025-68939High8.22025-12-26Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
CVE-2026-0237High7.82026-05-13An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automati…
CVE-2024-3460High7.42024-05-14In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing a short time window…
CVE-2023-5165High7.12023-09-25Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible…
CVE-2023-0629High7.12023-03-13Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.soc…
CVE-2019-18996High7.12019-12-18Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially al…
CVE-2022-1742Medium6.82022-06-24The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operatin…
CVE-2025-6250Medium6.72025-07-28Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections. Once the s…
CVE-2025-49163Medium6.72025-06-03Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file.
CVE-2023-20272Medium6.72023-11-21A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files…
CVE-2023-46176Medium6.72023-11-03IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys. IBM X-Force ID…
CVE-2026-58428Medium6.52026-08-13Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)
CVE-2024-8311Medium6.52024-09-12An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authe…
All CVEs classified under CWE-424 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-58428Medium6.52026-08-13Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)
CVE-2026-66756Critical9.82026-07-30Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recomme…
CVE-2026-54423High8.22026-07-10In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to…
CVE-2026-0268Medium4.42026-06-10A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does…
CVE-2026-0237High7.82026-05-13An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automati…
CVE-2026-4913Medium5.72026-04-14Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has…
CVE-2026-4270Medium5.52026-03-16Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may…
CVE-2025-68939High8.22025-12-26Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.
CVE-2025-46172025-11-14An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the s…
CVE-2025-58079Medium4.32025-10-16Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create malicious AppSuite applicati…
CVE-2025-6250Medium6.72025-07-28Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections. Once the s…
CVE-2025-49163Medium6.72025-06-03Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file.
CVE-2025-49162Medium6.42025-06-03Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to c…
CVE-2025-48828Critical9.02025-05-27Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template co…
CVE-2025-48827Critical10.02025-05-27vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or late…
CVE-2025-46655Medium4.92025-04-26CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be bypassed in certain c…
CVE-2025-46654Medium4.92025-04-26CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file tha…
CVE-2024-58136Critical9.02025-04-10Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in Febru…
CVE-2025-01132025-02-12A problem with the network isolation mechanism of the Palo Alto Networks Cortex XDR Broker VM allows attackers unauthorized access to Docker containers from th…
CVE-2024-87812024-11-18Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform (ASP) allows Privilege Escala…
CVE-2023-52952High8.52024-10-08A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 14 pro+ (J31032-K2017-H435)…
CVE-2024-8311Medium6.52024-09-12An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authe…
CVE-2024-3927Medium5.32024-05-22The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Form Submissi…
CVE-2024-3460High7.42024-05-14In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing a short time window…
CVE-2024-3459High8.42024-05-14KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened in an external PDF…
CVE-2023-20272Medium6.72023-11-21A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files…
CVE-2023-46176Medium6.72023-11-03IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys. IBM X-Force ID…
CVE-2023-5165High7.12023-09-25Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible…
CVE-2023-0629High7.12023-03-13Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.soc…
CVE-2022-1742Medium6.82022-06-24The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operatin…
CVE-2022-28782Medium4.62022-05-03Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Se…
CVE-2022-24932Medium4.22022-03-10Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation befor…
CVE-2021-3793Medium6.52021-11-12An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the sam…
CVE-2019-18997Medium4.32019-12-18The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISim…
CVE-2019-18996High7.12019-12-18Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially al…