Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-83728 |
high | 8.8 | 0.0031 | 2026-10-13 | Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attack | |
CVE-2026-111107 |
high | 8.7 | 0.0036 | 2026-10-27 | A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a r | |
CVE-2025-11573 |
high | 8.7 | 0.0043 | 2025-10-09 | An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat actor to caus | |
CVE-2026-33778 |
high | 8.7 | 0.0034 | 2026-04-09 | An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by | |
CVE-2026-6918 |
high | 8.7 | 0.0052 | 2026-05-05 | In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by | |
CVE-2026-57026 |
high | 8.7 | 0.0046 | 2026-07-09 | An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper | |
CVE-2026-6442 |
high | 8.3 | 0.0036 | 2026-04-16 | Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed s | |
CVE-2026-110675 |
high | 8.1 | 0.0017 | 2026-10-19 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys un | |
CVE-2026-25292 |
high | 7.6 | 0.0015 | 2026-08-04 | Memory Corruption when processing untrusted user input in the fastboot command handler for audio fra | |
CVE-2026-40198 |
high | 7.5 | 0.0031 | 2026-04-10 | Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP | |
CVE-2026-0983 |
high | 7.1 | 0.0023 | 2026-05-18 | Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and bef | |
CVE-2026-0931 |
medium | 6.9 | 0.0041 | 2026-08-05 | Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticat | |
CVE-2026-109425 |
medium | 6.9 | 0.0019 | 2026-10-12 | Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset. | |
CVE-2025-13327 |
medium | 6.3 | 0.0017 | 2026-02-27 | A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during packa | |
CVE-2026-7307 |
— | — | 0.0088 | 2026-05-19 | A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML in |