Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-35039 |
critical | 9.1 | 0.0021 | 2026-04-06 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, setting up a | |
CVE-2026-116870 |
high | 8.7 | 0.0023 | 2026-10-27 | In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. T | |
CVE-2026-60074 |
high | 7.5 | 0.0063 | 2026-07-30 | Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that | |
CVE-2026-39972 |
high | 7.1 | 0.0034 | 2026-04-09 | Mercure is a protocol for pushing data updates to web browsers and other HTTP clients in a battery-e | |
CVE-2026-41239 |
medium | 6.8 | 0.0025 | 2026-04-23 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Starting in versio | |
CVE-2026-47729 |
medium | 6.5 | 0.0150 | 2026-07-16 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic corre | |
CVE-2026-50090 |
medium | 6.1 | 0.0025 | 2026-06-12 | The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a | |
CVE-2026-41213 |
medium | 5.9 | 0.0026 | 2026-04-23 | @node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchan | |
CVE-2026-114348 |
medium | 5.3 | 0.0031 | 2026-10-22 | webpack-dev-server is a development server that provides live reloading for webpack projects. In ver | |
CVE-2026-116197 |
low | 2.1 | 0.0016 | 2026-10-25 | Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection | |
CVE-2026-48710 |
— | — | 0.7029 | — | Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers | KEV |