Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-44935 |
critical | 9.9 | 0.0049 | 2026-07-02 | Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.1 | |
CVE-2026-114509 |
critical | 9.2 | 0.0078 | 2026-10-21 | Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a sta | |
CVE-2026-9390 |
critical | 9.1 | 0.0050 | 2026-08-03 | XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify() and _get_signed | |
CVE-2026-96044 |
high | 8.8 | 0.0085 | 2026-10-13 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privil | |
CVE-2026-18830 |
high | 8.6 | 0.0051 | 2026-08-04 | Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remot | |
CVE-2026-40851 |
high | 8.4 | 0.0013 | 2026-05-27 | A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an | |
CVE-2026-4773 |
high | 8.1 | 0.0047 | 2026-07-22 | Improper validation of specified type of input vulnerability in Magarsus Consulting Ltd. Co. IDM-MFA | |
CVE-2026-50524 |
high | 7.5 | 0.0123 | 2026-07-14 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to | |
CVE-2026-97801 |
high | 7.5 | 0.0073 | 2026-10-13 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to | |
CVE-2026-0802 |
high | 7.3 | 0.0040 | 2026-05-12 | An ACAP configuration file lacked sufficient input validation, which could allow command injection a | |
CVE-2026-10825 |
high | 7.1 | 0.0024 | 2026-06-16 | A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and han | |
CVE-2026-54235 |
medium | 6.9 | 0.0045 | 2026-06-22 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, ll tem | |
CVE-2024-2105 |
medium | 6.5 | 0.0020 | 2025-12-10 | An unauthorised attacker within bluetooth range may use an improper validation during the BLE connec | |
CVE-2026-20498 |
medium | 6.0 | 0.0017 | 2026-08-03 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This co | |
CVE-2026-115383 |
medium | 5.9 | 0.0018 | 2026-10-22 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability | |
CVE-2026-5304 |
medium | 5.7 | 0.0031 | 2026-08-11 | An ACAP configuration file lacks input validation, which could potentially lead to privilege escalat | |
CVE-2026-55124 |
medium | 5.5 | 0.0060 | 2026-07-14 | Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attac | |
CVE-2026-90458 |
medium | 5.4 | 0.0028 | 2026-10-23 | OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts f | |
CVE-2025-8556 |
low | 3.7 | 0.0053 | 2025-08-06 | A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an | |
CVE-2026-110985 |
— | — | 0.0013 | 2026-10-28 | A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.cla |