Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2612)
CWE-79 (1785)
CWE-416 (1279)
CWE-862 (1161)
CWE-89 (1089)
CWE-22 (1005)
CWE-125 (861)
CWE-200 (838)
CWE-306 (831)
CWE-122 (821)
CWE-20 (786)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (601)
CWE-74 (599)
CWE-639 (533)
CWE-400 (512)
CWE-269 (499)
CWE-119 (494)
CWE-770 (429)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (320)
CWE-352 (271)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-113659 |
medium | 6.1 | 0.0034 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticat | |
CVE-2026-49459 |
medium | 6.1 | 0.0037 | 2026-07-14 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DO | |
CVE-2026-72769 |
medium | 6.1 | 0.0051 | 2026-08-11 | n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expre | |
CVE-2026-14574 |
medium | 5.7 | 0.0040 | 2026-08-05 | In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `PreferenceUtils.merge` function | |
CVE-2026-73647 |
medium | 5.6 | 0.0039 | 2026-08-13 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22. | |
CVE-2026-6621 |
medium | 5.5 | 0.0034 | 2026-04-20 | A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unknow | |
CVE-2026-118243 |
medium | 5.3 | 0.0035 | 2026-10-28 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dash | |
CVE-2026-15538 |
medium | 5.3 | 0.0054 | 2026-07-13 | A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the functio | |
CVE-2026-15598 |
medium | 5.3 | 0.0042 | 2026-07-13 | A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the | |
CVE-2026-16150 |
medium | 5.3 | 0.0045 | 2026-07-18 | A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is the funct | |
CVE-2026-16151 |
medium | 5.3 | 0.0045 | 2026-07-18 | A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the function addFilt | |
CVE-2026-42077 |
medium | 5.2 | 0.0016 | 2026-05-04 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype po | |
CVE-2026-65913 |
medium | 5.1 | 0.0032 | 2026-07-23 | DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USE_PROFILES mode that allows | |
CVE-2026-57439 |
medium | 5.0 | 0.0014 | 2026-07-08 | CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, th | |
CVE-2026-59876 |
medium | 4.8 | 0.0035 | 2026-07-08 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the | |
CVE-2026-48819 |
medium | 4.8 | 0.0027 | 2026-07-17 | Hey API is an ecosystem for turning API specifications into production-ready code. Prior to 0.97.3, | |
CVE-2026-33916 |
medium | 4.7 | 0.0028 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-53592 |
medium | 4.6 | 0.0014 | 2026-07-20 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A Prototype Pollu | |
CVE-2026-54335 |
low | 3.7 | 0.0039 | 2026-07-17 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaSc | |
CVE-2026-71438 |
low | 2.4 | 0.0035 | 2026-08-06 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and char | |
CVE-2026-15195 |
low | 2.1 | 0.0046 | 2026-07-09 | A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the | |
CVE-2026-15607 |
low | 2.1 | 0.0044 | 2026-07-13 | A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the funct | |
CVE-2026-15697 |
low | 2.1 | 0.0045 | 2026-07-14 | A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on o | |
CVE-2026-15698 |
low | 2.1 | 0.0046 | 2026-07-14 | A vulnerability was determined in kofrasa mingo up to 7.2.1. This impacts the function update/update | |
CVE-2026-15699 |
low | 2.1 | 0.0045 | 2026-07-14 | A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function | |
CVE-2026-16008 |
low | 2.1 | 0.0032 | 2026-07-17 | A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts | |
CVE-2026-44005 |
— | — | 0.0083 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable pro |