Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-12488 |
medium | 6.2 | 0.0034 | 2026-06-24 | A memory corruption vulnerability exists in the GV-Cloud functionality of GeoVision GV-VMS V20 20.0. | |
CVE-2026-52167 |
medium | 6.2 | 0.0013 | 2026-10-15 | A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause | |
CVE-2026-113881 |
medium | 6.1 | 0.0036 | 2026-10-27 | A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process | |
CVE-2026-58303 |
medium | 6.1 | 0.0016 | 2026-07-09 | Stack-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. | |
CVE-2026-85080 |
medium | 6.0 | 0.0046 | 2026-10-22 | In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bound | |
CVE-2026-33452 |
medium | 5.9 | 0.0010 | 2026-04-30 | CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.5 | |
CVE-2026-20218 |
medium | 5.8 | 0.0063 | 2026-10-21 | A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple | |
CVE-2026-31267 |
medium | 5.7 | 0.0032 | 2026-07-09 | Mercusys MW302R MW302R(EU)_V1_1.4.10 Build 231023 is vulnerable to Buffer Overflow in the administra | |
CVE-2026-18909 |
medium | 5.6 | 0.0011 | 2026-08-06 | A stack-based buffer overflow vulnerability exists in ELAN Microelectronics Corp. ELAN Smart-Pad on | |
CVE-2025-60492 |
medium | 5.5 | 0.0027 | 2026-10-21 | A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box befo | |
CVE-2026-6538 |
medium | 5.5 | 0.0018 | 2026-04-30 | BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of servi | |
CVE-2026-15166 |
medium | 5.5 | 0.0014 | 2026-07-08 | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial o | |
CVE-2026-15167 |
medium | 5.5 | 0.0027 | 2026-07-08 | DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of se | |
CVE-2026-55980 |
medium | 5.5 | 0.0014 | 2026-08-06 | A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer ov | |
CVE-2026-19695 |
medium | 5.5 | 0.0012 | 2026-08-13 | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service | |
CVE-2026-8356 |
medium | 5.4 | 0.0015 | 2026-06-15 | LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existe | |
CVE-2026-7260 |
medium | 5.4 | 0.0011 | 2026-07-30 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack a | |
CVE-2026-111548 |
medium | 5.3 | 0.0034 | 2026-10-27 | A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa | |
CVE-2026-5713 |
medium | 5.3 | 0.0013 | 2026-04-14 | The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "pyt | |
CVE-2026-12495 |
medium | 5.3 | 0.0025 | 2026-07-27 | Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt functi | |
CVE-2026-40130 |
medium | 5.3 | 0.0047 | 2026-08-11 | SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An | |
CVE-2026-40553 |
medium | 5.1 | 0.0029 | 2026-07-13 | Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() | |
CVE-2026-109940 |
medium | 5.1 | 0.0014 | 2026-10-13 | FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overf | |
CVE-2026-90731 |
medium | 4.9 | 0.0026 | 2026-10-27 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release version | |
CVE-2026-90732 |
medium | 4.9 | 0.0026 | 2026-10-27 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release ve | |
CVE-2026-90725 |
medium | 4.9 | 0.0026 | 2026-10-27 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2026-0206 |
medium | 4.9 | 0.0050 | 2026-04-29 | A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacke | |
CVE-2026-78801 |
medium | 4.3 | 0.0031 | 2026-10-22 | An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 all | |
CVE-2026-70116 |
medium | 4.2 | 0.0036 | 2026-10-13 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker | |
CVE-2026-41434 |
low | 3.3 | 0.0015 | 2026-07-06 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel r | |
CVE-2026-5245 |
low | 2.9 | 0.0072 | 2026-04-02 | A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_reco | |
CVE-2026-41963 |
low | 2.8 | 0.0008 | 2026-05-15 | Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerab | |
CVE-2026-33447 |
low | 2.3 | 0.0025 | 2026-04-30 | CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior | |
CVE-2026-33449 |
low | 2.3 | 0.0024 | 2026-04-30 | CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prio | |
CVE-2024-14042 |
low | 2.1 | 0.0050 | 2026-08-11 | A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/ | |
CVE-2026-8733 |
low | 2.1 | 0.0026 | 2026-05-17 | A vulnerability was found in Investintech SlimPDFReader up to 2.0.13. Affected by this vulnerability | |
CVE-2026-13573 |
low | 1.9 | 0.0017 | 2026-06-29 | A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringM | |
CVE-2026-14789 |
low | 1.9 | 0.0022 | 2026-07-06 | A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknow | |
CVE-2026-11979 |
low | 1.8 | 0.0015 | 2026-06-29 | libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when runnin | |
CVE-2026-11733 |
low | 1.1 | 0.0078 | 2026-08-11 | A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to tempor | |
CVE-2026-11734 |
low | 1.1 | 0.0089 | 2026-08-11 | A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to c | |
CVE-2023-24549 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2023-24566 |
— | — | 0.0022 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2 | |
CVE-2025-0282 |
— | — | 0.9998 | — | Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which c | KEV |
CVE-2025-22457 |
— | — | 0.9998 | — | Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulner | KEV |
CVE-2025-42599 |
— | — | 0.0336 | — | Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, una | KEV |
CVE-2025-20352 |
— | — | 0.4150 | — | Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Mana | KEV |
CVE-2025-53521 |
— | — | 0.0230 | — | F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor t | KEV |
CVE-2026-0719 |
— | — | 0.0061 | 2026-01-08 | A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME | |
CVE-2026-32203 |
— | — | 0.0190 | 2026-04-14 | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny servic |