Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-33471 |
critical | 9.6 | 0.0022 | 2026-04-22 | nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::ve | |
CVE-2026-103594 |
critical | 9.5 | 0.0043 | 2026-10-27 | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allo | |
CVE-2026-57623 |
critical | 9.0 | 0.0053 | 2026-07-02 | Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions. | |
CVE-2026-25863 |
high | 8.7 | 0.0045 | 2026-05-04 | Conditional Fields for Contact Form 7 WordPress plugin through version 2.7.2 contains an uncontrolle | |
CVE-2026-12059 |
high | 8.7 | 0.0045 | 2026-06-12 | The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, all | |
CVE-2026-57023 |
high | 8.7 | 0.0046 | 2026-07-09 | An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Junip | |
CVE-2026-58662 |
high | 8.7 | 0.0108 | 2026-07-27 | Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrif | |
CVE-2026-56035 |
high | 8.6 | 0.0038 | 2026-06-26 | Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions. | |
CVE-2026-34545 |
high | 8.4 | 0.0063 | 2026-04-01 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-59694 |
high | 8.3 | 0.0052 | 2026-07-17 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote c | |
CVE-2026-59695 |
high | 8.3 | 0.0052 | 2026-07-17 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote c | |
CVE-2026-55952 |
high | 8.2 | 0.0048 | 2026-07-02 | The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried | |
CVE-2026-59252 |
high | 8.2 | 0.0046 | 2026-07-17 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote c | |
CVE-2026-54890 |
high | 8.2 | 0.0042 | 2026-07-27 | Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang | |
CVE-2026-40093 |
high | 8.1 | 0.0031 | 2026-04-09 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and ear | |
CVE-2026-66374 |
high | 8.1 | 0.0062 | 2026-07-25 | Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ | |
CVE-2026-92386 |
high | 8.1 | 0.0026 | 2026-10-20 | When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `c | |
CVE-2026-20313 |
high | 7.7 | 0.0042 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst | |
CVE-2026-63869 |
high | 7.6 | 0.0026 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected | |
CVE-2026-44826 |
high | 7.5 | 0.0026 | 2026-05-15 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stor | |
CVE-2026-44635 |
high | 7.5 | 0.0036 | 2026-05-27 | Kysely is a type-safe TypeScript SQL query builder. From 0.26.0 to 0.28.16, DefaultQueryCompiler.vis | |
CVE-2026-45441 |
high | 7.5 | 0.0026 | 2026-06-15 | Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions. | |
CVE-2026-49110 |
high | 7.5 | 0.0024 | 2026-06-15 | Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions. | |
CVE-2026-54234 |
high | 7.5 | 0.0062 | 2026-07-06 | vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24. | |
CVE-2026-47667 |
high | 7.5 | 0.0052 | 2026-07-21 | CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the | |
CVE-2026-32665 |
high | 7.5 | 0.0029 | 2026-07-22 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enab | |
CVE-2026-11721 |
high | 7.5 | 0.0040 | 2026-07-22 | It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number | |
CVE-2026-59531 |
high | 7.5 | 0.0046 | 2026-07-27 | Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions. | |
CVE-2026-59532 |
high | 7.5 | 0.0037 | 2026-07-27 | Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. | |
CVE-2026-70378 |
high | 7.5 | 0.0033 | 2026-08-05 | imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only asserts , never validating tha | |
CVE-2026-19566 |
high | 7.5 | 0.0063 | 2026-08-12 | Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via un | |
CVE-2026-53587 |
high | 7.5 | 0.0047 | 2026-08-20 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a | |
CVE-2026-116581 |
high | 7.5 | 0.0045 | 2026-10-26 | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.strin | |
CVE-2026-118782 |
high | 7.5 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-60820 |
high | 7.4 | 0.0038 | 2026-08-18 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Support | |
CVE-2026-35489 |
high | 7.3 | 0.0022 | 2026-04-07 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. | |
CVE-2023-7332 |
high | 7.1 | 0.0040 | 2025-12-31 | PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in invento | |
CVE-2026-53689 |
high | 7.1 | 0.0021 | 2026-06-10 | libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow | |
CVE-2026-57019 |
high | 7.1 | 0.0027 | 2026-07-09 | An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine | |
CVE-2026-101974 |
high | 7.1 | 0.0025 | 2026-10-14 | An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos | |
CVE-2026-101987 |
high | 7.1 | 0.0027 | 2026-10-14 | An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of J | |
CVE-2026-40272 |
high | 7.0 | 0.0016 | 2026-07-29 | Improper Input Validation in the decode() function of the traceparser library could allow an attacke | |
CVE-2025-9316 |
medium | 6.9 | 0.3739 | 2025-11-12 | N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-centr | |
CVE-2026-53794 |
medium | 6.9 | 0.0051 | 2026-08-13 | rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configurat | |
CVE-2026-19026 |
medium | 6.8 | 0.0019 | 2026-08-05 | H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] | |
CVE-2026-19028 |
medium | 6.8 | 0.0019 | 2026-08-06 | H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksu | |
CVE-2026-55392 |
medium | 6.7 | 0.0015 | 2026-06-18 | NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to valida | |
CVE-2026-6839 |
medium | 6.6 | 0.0010 | 2026-04-22 | Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out o | |
CVE-2026-1352 |
medium | 6.5 | 0.0033 | 2026-04-23 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 C | |
CVE-2026-1577 |
medium | 6.5 | 0.0034 | 2026-04-30 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 C |