Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-17136 |
critical | 9.8 | 0.0080 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2023-2186 |
critical | 9.8 | 0.0071 | 2023-06-07 | On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send | |
CVE-2024-58366 |
critical | 9.0 | 0.0057 | 2026-07-18 | SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type | |
CVE-2023-29181 |
high | 8.8 | 0.0072 | 2024-02-22 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, | |
CVE-2026-12004 |
high | 8.7 | 0.0049 | 2026-08-12 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 | |
CVE-2026-57877 |
high | 8.6 | 0.0043 | 2026-06-26 | An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC221 | |
CVE-2026-67244 |
high | 8.6 | 0.0050 | 2026-07-30 | A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability | |
CVE-2023-23783 |
high | 7.8 | 0.0025 | 2023-02-16 | A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, Forti | |
CVE-2026-83585 |
high | 7.8 | 0.0035 | 2026-10-13 | Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate | |
CVE-2026-85842 |
high | 7.8 | 0.0032 | 2026-10-13 | Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacke | |
CVE-2026-44407 |
high | 7.5 | 0.0027 | 2026-05-07 | A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lea | |
CVE-2026-15680 |
high | 7.5 | 0.0041 | 2026-07-13 | Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerabil | |
CVE-2023-45583 |
high | 7.2 | 0.0066 | 2024-05-14 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 | |
CVE-2026-18186 |
high | 7.1 | 0.0046 | 2026-07-30 | A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occur | |
CVE-2026-18187 |
high | 7.1 | 0.0046 | 2026-07-30 | A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs | |
CVE-2026-18188 |
high | 7.1 | 0.0046 | 2026-07-30 | A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs bec | |
CVE-2026-68553 |
high | 7.1 | 0.0048 | 2026-08-19 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticat | |
CVE-2026-6250 |
high | 7.0 | 0.0046 | 2026-06-11 | An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 due to impr | |
CVE-2023-36640 |
medium | 6.7 | 0.0028 | 2024-05-14 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 | |
CVE-2026-6843 |
medium | 5.5 | 0.0011 | 2026-04-22 | A flaw was found in nano. A local user could exploit a format string vulnerability in the `statuslin | |
CVE-2026-46465 |
medium | 5.5 | 0.0041 | 2026-07-03 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through | |
CVE-2026-94520 |
medium | 4.9 | 0.0084 | 2026-10-13 | Use of externally-controlled format string in SQL Server allows an authorized attacker to deny servi | |
CVE-2019-1579 |
— | — | 0.4416 | — | Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled | KEV |