Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-113744 |
critical | 10.0 | 0.0062 | 2026-10-21 | A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the fu | |
CVE-2026-114382 |
critical | 10.0 | 0.0067 | 2026-10-21 | A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStat | |
CVE-2026-114383 |
critical | 10.0 | 0.0065 | 2026-10-21 | A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAd | |
CVE-2026-42996 |
critical | 10.0 | 0.0057 | 2026-05-01 | JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio | |
CVE-2026-12485 |
critical | 10.0 | 0.0060 | 2026-06-24 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled ove | |
CVE-2026-12846 |
critical | 10.0 | 0.0060 | 2026-06-24 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled ove | |
CVE-2026-12847 |
critical | 10.0 | 0.0060 | 2026-06-24 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled ove | |
CVE-2026-12848 |
critical | 10.0 | 0.0060 | 2026-06-24 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled ove | |
CVE-2026-76008 |
critical | 10.0 | 0.0102 | 2026-08-19 | A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the | |
CVE-2024-51311 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of | |
CVE-2024-51313 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of | |
CVE-2024-51312 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of | |
CVE-2024-51314 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of | |
CVE-2024-51315 |
critical | 9.8 | 0.0051 | 2026-07-20 | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of | |
CVE-2026-58082 |
critical | 9.8 | 0.0052 | 2026-08-19 | The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate char | |
CVE-2026-16872 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-17138 |
critical | 9.8 | 0.0067 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-76934 |
critical | 9.8 | 0.0052 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affe | |
CVE-2026-82118 |
critical | 9.8 | 0.0052 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: fr | |
CVE-2026-103780 |
critical | 9.8 | — | 2026-10-28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2026-62878 |
critical | 9.8 | 0.0097 | 2026-08-11 | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a ne | 1 PoC |
CVE-2026-70024 |
critical | 9.8 | 0.0096 | 2026-10-13 | Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker | |
CVE-2026-85806 |
critical | 9.8 | 0.0091 | 2026-10-13 | Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacke | |
CVE-2026-88156 |
critical | 9.8 | 0.0117 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute c | |
CVE-2026-26354 |
critical | 9.8 | 0.0050 | 2026-04-22 | Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1 | |
CVE-2026-1950 |
critical | 9.8 | 0.0031 | 2026-04-24 | Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerabili | |
CVE-2026-1951 |
critical | 9.8 | 0.0061 | 2026-04-24 | Delta Electronics AS320T has no checking of the length of the buffer with the directory name vulne | |
CVE-2026-41089 |
critical | 9.8 | 0.7962 | 2026-05-12 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over | |
CVE-2026-42854 |
critical | 9.8 | 0.0057 | 2026-05-12 | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 | |
CVE-2026-8362 |
critical | 9.8 | 0.0039 | 2026-05-27 | A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long UR | |
CVE-2026-8363 |
critical | 9.8 | 0.0040 | 2026-05-27 | A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL | |
CVE-2026-57878 |
critical | 9.8 | 0.0095 | 2026-06-26 | An unauthenticated stack-based buffer overflow vulnerability exists in thttpd in GeoVision GV-LPC201 | |
CVE-2026-57879 |
critical | 9.8 | 0.0095 | 2026-06-26 | An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 | |
CVE-2026-57880 |
critical | 9.8 | 0.0095 | 2026-06-26 | An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 | |
CVE-2026-57881 |
critical | 9.8 | 0.0065 | 2026-06-26 | An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 | |
CVE-2026-10666 |
critical | 9.8 | 0.0065 | 2026-07-12 | parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c | |
CVE-2026-59144 |
critical | 9.8 | 0.0060 | 2026-07-21 | Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalida | |
CVE-2026-61486 |
critical | 9.8 | 0.0081 | 2026-08-05 | ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This is | |
CVE-2026-71267 |
critical | 9.8 | 0.0055 | 2026-08-05 | microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller | |
CVE-2026-10534 |
critical | 9.8 | 0.0038 | 2026-08-12 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF | |
CVE-2026-67967 |
critical | 9.8 | 0.0065 | 2026-08-17 | Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary | |
CVE-2026-16885 |
critical | 9.8 | 0.0080 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-12665 |
critical | 9.8 | 0.0032 | 2026-10-19 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when p | |
CVE-2026-53921 |
critical | 9.8 | 0.0112 | 2026-10-23 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.1 | |
CVE-2026-25289 |
critical | 9.6 | 0.0019 | 2026-08-04 | Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Disco | |
CVE-2026-103594 |
critical | 9.5 | 0.0043 | 2026-10-27 | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allo | |
CVE-2026-76932 |
critical | 9.4 | 0.0045 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affe | |
CVE-2026-76935 |
critical | 9.4 | 0.0033 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue aff | |
CVE-2026-76936 |
critical | 9.4 | 0.0045 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue aff | |
CVE-2026-82122 |
critical | 9.4 | 0.0045 | 2026-10-27 | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: fr |