Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2637)
CWE-79 (1880)
CWE-416 (1379)
CWE-862 (1214)
CWE-89 (1112)
CWE-22 (1032)
CWE-125 (931)
CWE-306 (858)
CWE-200 (854)
CWE-122 (832)
CWE-20 (801)
CWE-787 (728)
CWE-78 (721)
CWE-918 (699)
CWE-863 (657)
CWE-94 (647)
CWE-74 (603)
CWE-639 (568)
CWE-400 (535)
CWE-119 (504)
CWE-269 (503)
CWE-502 (477)
CWE-770 (449)
CWE-287 (442)
CWE-121 (410)
CWE-190 (380)
CWE-77 (375)
CWE-362 (374)
CWE-476 (303)
CWE-352 (287)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-40320 |
medium | 5.4 | 0.0014 | 2026-04-17 | Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the Conform | |
CVE-2026-41318 |
medium | 5.4 | 0.0019 | 2026-04-24 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as refe | |
CVE-2026-40087 |
medium | 5.3 | 0.0026 | 2026-04-09 | LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.84 and 1.2.2 | |
CVE-2026-71502 |
medium | 5.1 | 0.0074 | 2026-08-08 | CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutraliza | |
CVE-2026-115223 |
medium | 4.9 | 0.0042 | 2026-10-28 | The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection paylo | |
CVE-2026-96392 |
low | 3.5 | 0.0021 | 2026-10-22 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKE | |
CVE-2026-44916 |
low | 3.0 | 0.0034 | 2026-05-08 | In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_templa | |
CVE-2026-8740 |
low | 2.1 | 0.0023 | 2026-05-17 | A flaw has been found in Sanluan PublicCMS 5.202506.d. The impacted element is the function execute | |
CVE-2026-18632 |
low | 2.1 | 0.0039 | 2026-08-03 | A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function | |
CVE-2026-75979 |
low | 2.1 | 0.0041 | 2026-08-19 | A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected is the function | |
CVE-2026-5987 |
low | 2.0 | 0.0024 | 2026-04-09 | A security vulnerability has been detected in Sanluan PublicCMS up to 6.202506.d. This affects the f | |
CVE-2026-6984 |
low | 2.0 | 0.0030 | 2026-04-25 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the function c | |
CVE-2024-23692 |
— | — | 0.9949 | — | Rejetto HTTP File Server contains an improper neutralization of special elements used in a template | KEV |
CVE-2026-40477 |
— | — | 0.0085 | 2026-04-17 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3. | |
CVE-2026-40478 |
— | — | 0.0110 | 2026-04-17 | Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3. | |
CVE-2026-75650 |
— | — | 0.0395 | — | Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used i | KEV |
CVE-2026-107259 |
— | — | 0.0018 | 2026-10-30 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked | |
CVE-2026-107264 |
— | — | 0.0018 | 2026-10-30 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline |