Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-81694 |
critical | 9.3 | 0.0025 | 2026-08-27 | openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted dri | |
CVE-2026-10745 |
high | 7.9 | 0.0043 | 2026-06-24 | Improper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant Privile | |
CVE-2026-34478 |
medium | 6.9 | 0.0097 | 2026-04-10 | Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424L | |
CVE-2026-12616 |
medium | 6.9 | 0.0054 | 2026-06-29 | The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature ve | |
CVE-2026-48083 |
medium | 6.5 | 0.0036 | 2026-08-06 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl | |
CVE-2026-6494 |
medium | 5.3 | 0.0031 | 2026-04-17 | A flaw was found in the AAP MCP server. An unauthenticated remote attacker can exploit a log injecti | |
CVE-2026-44256 |
medium | 5.3 | 0.0049 | 2026-08-19 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4 | |
CVE-2026-15661 |
medium | 5.3 | 0.0024 | 2026-10-19 | IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due | |
CVE-2026-20260 |
medium | 4.3 | 0.0020 | 2026-06-10 | In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an unauthent | |
CVE-2026-18148 |
medium | 4.3 | 0.0034 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content |