Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-57278 |
high | 8.3 | 0.0040 | 2026-07-02 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is | |
CVE-2026-59250 |
high | 8.3 | 0.0078 | 2026-07-27 | Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticat | |
CVE-2026-57191 |
high | 8.2 | 0.0059 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-42859 |
high | 8.1 | 0.0063 | 2026-05-11 | Neat VNC is a VNC server library. Prior to 0.9.6, a pre-authentication stack buffer overflow exists | |
CVE-2026-70465 |
high | 8.1 | 0.0052 | 2026-08-12 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet F | |
CVE-2026-21382 |
high | 7.8 | 0.0008 | 2026-04-06 | Memory Corruption when handling power management requests with improperly sized input/output buffers | |
CVE-2026-6384 |
high | 7.8 | 0.0026 | 2026-04-15 | A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `R | |
CVE-2026-0138 |
high | 7.8 | 0.0007 | 2026-06-16 | In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory c | |
CVE-2026-28981 |
high | 7.8 | 0.0020 | 2026-07-27 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia | |
CVE-2026-24080 |
high | 7.8 | 0.0010 | 2026-08-04 | Memory Corruption when handling malformed request parameters in the fingerprint TA. | |
CVE-2026-8247 |
high | 7.7 | 0.0038 | 2026-07-03 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker | |
CVE-2026-6688 |
high | 7.6 | 0.0032 | 2026-07-01 | FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs lon | |
CVE-2026-14970 |
high | 7.5 | 0.0046 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registrat | |
CVE-2026-33337 |
high | 7.5 | 0.0054 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 | |
CVE-2026-28925 |
high | 7.5 | 0.0044 | 2026-05-11 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia | |
CVE-2026-28959 |
high | 7.5 | 0.0060 | 2026-05-11 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and | |
CVE-2026-7287 |
high | 7.5 | 0.0031 | 2026-05-12 | ** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPa | |
CVE-2026-0136 |
high | 7.5 | 0.0027 | 2026-06-16 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to r | |
CVE-2026-0144 |
high | 7.5 | 0.0027 | 2026-06-16 | In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bo | |
CVE-2026-57874 |
high | 7.5 | 0.0055 | 2026-06-26 | An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2 | |
CVE-2026-48706 |
high | 7.5 | 0.0061 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 u | |
CVE-2026-52196 |
high | 7.5 | 0.0052 | 2026-06-30 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
CVE-2026-52193 |
high | 7.5 | 0.0051 | 2026-06-30 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
CVE-2026-52195 |
high | 7.5 | 0.0052 | 2026-06-30 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
CVE-2026-20213 |
high | 7.5 | 0.0057 | 2026-07-01 | A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attack | |
CVE-2026-20214 |
high | 7.5 | 0.0057 | 2026-07-01 | A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attac | |
CVE-2026-20215 |
high | 7.5 | 0.0057 | 2026-07-01 | A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attack | |
CVE-2026-20217 |
high | 7.5 | 0.0057 | 2026-07-01 | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote at | |
CVE-2026-20243 |
high | 7.5 | 0.0057 | 2026-07-01 | A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attac | |
CVE-2026-20244 |
high | 7.5 | 0.0057 | 2026-07-01 | A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attac | |
CVE-2026-52187 |
high | 7.5 | 0.0052 | 2026-07-02 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
CVE-2026-52189 |
high | 7.5 | 0.0052 | 2026-07-02 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
CVE-2026-52191 |
high | 7.5 | 0.0052 | 2026-07-02 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
CVE-2026-44436 |
high | 7.5 | 0.0049 | 2026-07-16 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server | |
CVE-2026-45811 |
high | 7.5 | 0.0048 | 2026-07-24 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBL | |
CVE-2026-67871 |
high | 7.5 | 0.0082 | 2026-08-06 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of | |
CVE-2026-20337 |
high | 7.5 | 0.0060 | 2026-08-07 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker | |
CVE-2026-20348 |
high | 7.5 | 0.0072 | 2026-08-07 | A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attac | |
CVE-2026-0640 |
high | 7.4 | 0.0348 | 2026-01-06 | A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the fi | |
CVE-2026-4976 |
high | 7.4 | 0.0067 | 2026-03-27 | A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the fu | |
CVE-2026-5979 |
high | 7.4 | 0.0069 | 2026-04-09 | A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the funct | |
CVE-2026-5980 |
high | 7.4 | 0.0068 | 2026-04-09 | A flaw has been found in D-Link DIR-605L 2.13B01. Affected by this issue is the function formSetMACF | |
CVE-2026-5981 |
high | 7.4 | 0.0072 | 2026-04-09 | A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall | |
CVE-2026-5982 |
high | 7.4 | 0.0069 | 2026-04-09 | A vulnerability was found in D-Link DIR-605L 2.13B01. This vulnerability affects the function formAd | |
CVE-2026-5983 |
high | 7.4 | 0.0068 | 2026-04-09 | A vulnerability was determined in D-Link DIR-605L 2.13B01. This issue affects the function formSetDD | |
CVE-2026-5984 |
high | 7.4 | 0.0078 | 2026-04-09 | A vulnerability was identified in D-Link DIR-605L 2.13B01. Impacted is the function formSetLog of th | |
CVE-2026-6012 |
high | 7.4 | 0.0282 | 2026-04-10 | A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSet | |
CVE-2026-6013 |
high | 7.4 | 0.0074 | 2026-04-10 | A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects the function formSet | |
CVE-2026-6014 |
high | 7.4 | 0.0073 | 2026-04-10 | A flaw has been found in D-Link DIR-513 1.10. This issue affects the function formAdvanceSetup of th | |
CVE-2026-6157 |
high | 7.4 | 0.0047 | 2026-04-13 | A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the function set |