Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-39338 |
high | 8.6 | 0.0022 | 2026-04-07 | ChurchCRM is an open-source church management system. Prior to 7.1.0, a Blind Reflected Cross-Site S | |
CVE-2026-35575 |
high | 8.0 | 0.0024 | 2026-04-07 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a Stored Cross-Site Scripting | |
CVE-2026-57948 |
high | 7.6 | 0.0016 | 2026-06-29 | Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows att | |
CVE-2026-11956 |
medium | 6.3 | 0.0019 | 2026-06-11 | A vulnerability was determined in TwiN gatus 5.36.0. Impacted is the function setSessionCookie of th | |
CVE-2026-111063 |
medium | 6.3 | 0.0023 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the | |
CVE-2026-115519 |
low | 2.1 | 0.0019 | 2026-10-22 | Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow a |