Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-1949 |
critical | 9.8 | 0.0061 | 2026-04-24 | Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT re | |
CVE-2026-97631 |
critical | 9.5 | 0.0063 | 2026-10-22 | EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer O | |
CVE-2026-112709 |
critical | 9.2 | 0.0042 | 2026-10-27 | A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attac | |
CVE-2026-112710 |
critical | 9.2 | 0.0042 | 2026-10-27 | A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows a | |
CVE-2026-42945 |
critical | 9.2 | 0.6805 | 2026-05-13 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vu | |
CVE-2026-82944 |
high | 8.8 | 0.0021 | 2026-10-26 | SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a mali | |
CVE-2026-40618 |
high | 8.7 | 0.0032 | 2026-05-13 | When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel Q | |
CVE-2026-65706 |
high | 8.5 | 0.0019 | 2026-07-23 | FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect vi | |
CVE-2026-70457 |
high | 8.3 | 0.0038 | 2026-08-13 | rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value | |
CVE-2020-37287 |
high | 8.2 | 0.0025 | 2026-10-21 | Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function out | |
CVE-2026-16924 |
high | 7.5 | 0.0055 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-78002 |
high | 7.5 | 0.0106 | 2026-08-27 | A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow i | |
CVE-2026-52834 |
high | 7.3 | 0.0017 | 2026-08-19 | jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a cr | |
CVE-2026-65705 |
high | 7.3 | 0.0019 | 2026-07-23 | FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill v | |
CVE-2026-29004 |
high | 7.2 | 0.0037 | 2026-05-04 | BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (ud | |
CVE-2026-116737 |
medium | 6.9 | 0.0013 | 2026-10-26 | libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_ | |
CVE-2023-20627 |
medium | 6.7 | 0.0009 | 2023-03-07 | In pqframework, there is a possible out of bounds write due to a missing bounds check. This could le | |
CVE-2026-45812 |
medium | 6.5 | 0.0069 | 2026-07-24 | Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertisi | |
CVE-2026-57192 |
medium | 6.0 | 0.0065 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-40918 |
medium | 5.5 | 0.0020 | 2026-04-15 | A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can le | |
CVE-2026-8357 |
medium | 5.4 | 0.0022 | 2026-06-15 | LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed w | |
CVE-2026-44254 |
medium | 5.3 | 0.0050 | 2026-08-19 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1 | |
CVE-2026-54696 |
low | 3.7 | 0.0041 | 2026-06-30 | Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap bu | |
CVE-2026-75093 |
low | 2.1 | 0.0059 | 2026-08-18 | A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Te | |
CVE-2026-107590 |
low | 1.9 | 0.0012 | 2026-10-27 | An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibi | |
CVE-2026-27820 |
low | 1.7 | 0.0056 | 2026-04-16 | zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3 | |
CVE-2026-34986 |
— | — | 0.0065 | 2026-04-06 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards | |
CVE-2026-6752 |
— | — | 0.0031 | 2026-04-21 | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, |