Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2630)
CWE-79 (1805)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (612)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (426)
CWE-121 (404)
CWE-77 (372)
CWE-190 (364)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-6840 |
medium | 5.5 | 0.0010 | 2026-04-22 | Missing bounds validation for operator could allow out of range operator-code lookup during model l | |
CVE-2026-44310 |
medium | 5.4 | 0.0011 | 2026-05-15 | Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. Fr | |
CVE-2024-21970 |
medium | 4.4 | 0.0014 | 2025-09-06 | Improper validation of an array index in the AND power Management Firmware could allow a privileged | |
CVE-2026-73489 |
medium | 4.3 | 0.0045 | 2026-08-13 | Russh is a Rust SSH client & server library. Prior to 0.62.4, an authenticated SSH client can cause | |
CVE-2026-16849 |
medium | 4.3 | 0.0028 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-40097 |
low | 3.7 | 0.0018 | 2026-04-10 | Step CA is an online certificate authority for secure, automated certificate management for DevOps. | |
CVE-2026-40886 |
— | — | 0.0038 | 2026-04-23 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on |