Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (879)
CWE-200 (847)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (540)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-45087 |
critical | 10.0 | 0.0873 | 2026-05-27 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, whe | |
CVE-2026-66065 |
high | 8.4 | 0.0024 | 2026-08-03 | Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user- | |
CVE-2026-46485 |
high | 8.2 | 0.0038 | 2026-07-15 | Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow | |
CVE-2026-73027 |
high | 7.8 | 0.0052 | 2026-10-13 | External control of system or configuration setting in Windows Setup Files Cleanup allows an authori | |
CVE-2026-33092 |
high | 7.8 | 0.0018 | 2026-04-10 | Local privilege escalation due to improper handling of environment variables. The following products | |
CVE-2026-110845 |
high | 7.7 | 0.0034 | 2026-10-14 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerabi | |
CVE-2026-22750 |
high | 7.5 | 0.0022 | 2026-04-10 | When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl. | |
CVE-2026-96188 |
high | 7.3 | 0.0038 | 2026-10-13 | External control of system or configuration setting in Microsoft PowerToys allows an authorized atta | |
CVE-2026-96218 |
medium | 5.5 | 0.0055 | 2026-10-13 | Improper access control in Windows Update Stack allows an authorized attacker to perform tampering l | |
CVE-2026-44768 |
medium | 4.1 | 0.0026 | 2026-07-14 | SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of th | |
CVE-2026-0232 |
medium | 4.0 | 0.0015 | 2026-04-13 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a | |
CVE-2026-56567 |
low | 3.3 | 0.0014 | 2026-07-31 | HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the publi |